Edit tour

Windows Analysis Report
http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450

Overview

General Information

Sample URL:	http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450
Analysis ID:	1575561
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious URL

Detected suspicious crossdomain redirect

HTML body contains low number of good links

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2204,i,2496441180284747030,5519861355904546482,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T02:33:43.657440+0100	2823606	1	Exploit Kit Activity Detected	45.223.19.68	443	192.168.2.4	49842	TCP
2024-12-16T02:33:45.911870+0100	2823606	1	Exploit Kit Activity Detected	45.223.19.68	443	192.168.2.4	49846	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://www.ipv4now.com/9W598/24NCH8Z/?sub1=quotesMD	Avira URL Cloud: Label: malware
Source: https://clktrack7.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious URL

Source: Email

Joe Sandbox AI: AI detected IP in URL: http://18.224.21.137

Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483

HTTP Parser: Number of links: 1

Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50

Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No favicon

Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="author".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="author".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="author".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="author".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="author".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="author".. found

Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="copyright".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="copyright".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="copyright".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="copyright".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="copyright".. found
Source: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.ipv4now.com to https://cy6clk.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesmd
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: cy6clk.com to https://clktrack7.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesmd&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: clktrack7.com to https://track.walk-inbathtubshop.com/?a=5286&c=2734&s1=483&s2=92464844

Source: Network traffic	Suricata IDS: 2823606 - Severity 1 - ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016 : 45.223.19.68:443 -> 192.168.2.4:49846
Source: Network traffic	Suricata IDS: 2823606 - Severity 1 - ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016 : 45.223.19.68:443 -> 192.168.2.4:49842

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	TCP traffic detected without corresponding DNS query: 18.224.21.137
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /9W598/24NCH8Z/?sub1=quotesMD HTTP/1.1Host: www.ipv4now.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD HTTP/1.1Host: cy6clk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g HTTP/1.1Host: cy6clk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9 HTTP/1.1Host: clktrack7.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=5286&c=2734&s1=483&s2=92464844 HTTP/1.1Host: track.walk-inbathtubshop.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=5286&c=2734&s1=483&s2=92464844&ch-redir=1&ckmxid=ctfo6no10001qs3t6oag HTTP/1.1Host: track.walk-inbathtubshop.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-ui/jquery-ui.min.css HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.11.1.min.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d.js HTTP/1.1Host: track.walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==
Source: global traffic	HTTP traffic detected: GET /js/jquery-ui/jquery-ui.min.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/form_custom.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/main.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.11.4/themes/smoothness/jquery-ui.css HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.12.1/jquery-ui.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts.css HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/reset.css HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/all.css HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/media.css HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://walk-inbathtubshop.com/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/form_custom.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/main.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d.js HTTP/1.1Host: track.walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==
Source: global traffic	HTTP traffic detected: GET /js/jquery-ui/jquery-ui.min.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.mask.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.11.1.min.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.ui.touch-punch.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.12.1/jquery-ui.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bg.jpg HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://walk-inbathtubshop.com/css/reset.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /js/jquery.mask.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /js/jquery.ui.touch-punch.js HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /images/starthere.png HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /request.js?instance=3661425590&source=5286&campaign=992&exid=70060015&variable=anura&673249116261 HTTP/1.1Host: script.anura.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CAe854059830cf4314ae327f16481e8efc HTTP/1.1Host: b-js.ringba.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /images/starthere.png HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2 HTTP/1.1Host: create.lidstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js.ashx?o=992&_=1734312808006 HTTP/1.1Host: track.walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==; _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /fonts/MyriadPro-Bold.woff HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://walk-inbathtubshop.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://walk-inbathtubshop.com/css/fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /fonts/MyriadPro-Regular.woff HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://walk-inbathtubshop.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://walk-inbathtubshop.com/css/fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /images/bg.jpg HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635 HTTP/1.1Host: api.trustedform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /request.js?instance=3661425590&source=5286&campaign=992&exid=70060015&variable=anura&673249116261 HTTP/1.1Host: script.anura.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CAe854059830cf4314ae327f16481e8efc HTTP/1.1Host: b-js.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js.ashx?o=992&_=1734312808006 HTTP/1.1Host: track.walk-inbathtubshop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==; _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635 HTTP/1.1Host: cdn.trustedform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uniclick.js?attribution=lastpaid&cookiedomain=walk-inbathtub-shop.com&cookieduration=90&defaultcampaignid=6723c0f752e3b38cb5d16a33&regviewonce=false HTTP/1.1Host: red.walk-inbathtub-shop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2 HTTP/1.1Host: create.lidstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /response.json?46852511047 HTTP/1.1Host: script.anura.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/nis/gnbulk HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: walk-inbathtubshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
Source: global traffic	HTTP traffic detected: GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635 HTTP/1.1Host: cdn.trustedform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined HTTP/1.1Host: red.walk-inbathtub-shop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://walk-inbathtubshop.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/GenerateToken?msn=1&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&_=646533 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uniclick.js?attribution=lastpaid&cookiedomain=walk-inbathtub-shop.com&cookieduration=90&defaultcampaignid=6723c0f752e3b38cb5d16a33&regviewonce=false HTTP/1.1Host: red.walk-inbathtub-shop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /result.json HTTP/1.1Host: script.anura.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 HTTP/1.1Host: d2m2wsoho8qq12.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/SaveDom?msn=2&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646535 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/InitFormData?msn=3&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646536 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /2.15.1/Snap?msn=4&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646537 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /trustedform-1.9.33.js HTTP/1.1Host: cdn.trustedform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/InitFormData?msn=5&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646538 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /view?clickid=675f8372b262d1dc67374521&referrer= HTTP/1.1Host: red.walk-inbathtub-shop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://walk-inbathtubshop.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined HTTP/1.1Host: red.walk-inbathtub-shop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://d2m2wsoho8qq12.cloudfront.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/nis/hb HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/Snap?msn=6&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646539 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /trustedform-1.9.33.js HTTP/1.1Host: cdn.trustedform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=375929182 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==
Source: global traffic	HTTP traffic detected: GET /2.15.1/SaveDeviceId.js?lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&methods=48&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&uuid=692da195c1754dff85eb88ff9655ff01 HTTP/1.1Host: create.leadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://deviceid.trueleadid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
Source: global traffic	HTTP traffic detected: GET /2.15.1/SaveDeviceId.js?lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&methods=48&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&uuid=692da195c1754dff85eb88ff9655ff01 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=375929182 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
Source: global traffic	HTTP traffic detected: GET /2.15.1/Snap?msn=7&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646540 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /v1/nis/hb HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/nis/hb HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/Snap?msn=8&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646541 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /v1/nis/hb HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/nis/hb HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/Snap?msn=9&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646542 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /v1/nis/hb HTTP/1.1Host: display.ringba.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.1/Snap?msn=10&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646543 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450 HTTP/1.1Host: 18.224.21.137Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_130.2.dr, chromecache_103.2.dr, chromecache_129.2.dr, chromecache_99.2.dr

String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.ipv4now.com
Source: global traffic	DNS traffic detected: DNS query: cy6clk.com
Source: global traffic	DNS traffic detected: DNS query: clktrack7.com
Source: global traffic	DNS traffic detected: DNS query: track.walk-inbathtubshop.com
Source: global traffic	DNS traffic detected: DNS query: walk-inbathtubshop.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: b-js.ringba.com
Source: global traffic	DNS traffic detected: DNS query: script.anura.io
Source: global traffic	DNS traffic detected: DNS query: create.lidstatic.com
Source: global traffic	DNS traffic detected: DNS query: api.trustedform.com
Source: global traffic	DNS traffic detected: DNS query: stun.anura.io
Source: global traffic	DNS traffic detected: DNS query: red.walk-inbathtub-shop.com
Source: global traffic	DNS traffic detected: DNS query: display.ringba.com
Source: global traffic	DNS traffic detected: DNS query: cdn.trustedform.com
Source: global traffic	DNS traffic detected: DNS query: create.leadid.com
Source: global traffic	DNS traffic detected: DNS query: d2m2wsoho8qq12.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: deviceid.trueleadid.com

Source: unknown

HTTP traffic detected: POST /response.json?46852511047 HTTP/1.1Host: script.anura.ioConnection: keep-aliveContent-Length: 6666sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://walk-inbathtubshop.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://walk-inbathtubshop.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 16 Dec 2024 01:33:37 GMTContent-Type: text/htmlContent-Length: 1245Connection: closeCache-Control: no-cachePragma: no-cacheExpires: -1Server: Microsoft-IIS/10.0Access-Control-Allow-Origin: *Access-Control-Max-Age: 300X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NET
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.10.3 (Ubuntu)Date: Mon, 16 Dec 2024 01:33:37 GMTContent-Type: text/htmlContent-Length: 580Connection: close

Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: Http://bugs.jquery.com/ticket/8235
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_86.2.dr	String found in binary or memory: http://api.trustedform.com/ns.gif
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: http://digitalbush.com/projects/masked-input-plugin/#license)
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_126.2.dr, chromecache_115.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_86.2.dr	String found in binary or memory: http://www.optout-mmmp.net/o-fssl-f91-272c05ccff15f314c1eb894df4957edd&cr=2734
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_99.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_130.2.dr, chromecache_103.2.dr, chromecache_129.2.dr, chromecache_99.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_86.2.dr	String found in binary or memory: https://code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
Source: chromecache_86.2.dr	String found in binary or memory: https://code.jquery.com/ui/1.12.1/jquery-ui.js
Source: chromecache_122.2.dr	String found in binary or memory: https://deviceid.trueleadid.com/iframe.html
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Raleway:400
Source: chromecache_135.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_135.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_135.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_135.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_135.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_87.2.dr, chromecache_111.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_99.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_130.2.dr, chromecache_103.2.dr, chromecache_129.2.dr, chromecache_99.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_123.2.dr, chromecache_94.2.dr	String found in binary or memory: https://red.walk-inbathtub-shop.com/
Source: chromecache_94.2.dr	String found in binary or memory: https://red.walk-inbathtub-shop.com/view?clickid=
Source: chromecache_86.2.dr	String found in binary or memory: https://script.anura.io/request.js?
Source: chromecache_86.2.dr	String found in binary or memory: https://script.anura.io/result.json
Source: chromecache_130.2.dr, chromecache_99.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_130.2.dr, chromecache_103.2.dr, chromecache_129.2.dr, chromecache_99.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_86.2.dr	String found in binary or memory: https://track.walk-inbathtubshop.com/d.ashx
Source: chromecache_86.2.dr	String found in binary or memory: https://track.walk-inbathtubshop.com/d.js
Source: chromecache_101.2.dr	String found in binary or memory: https://walk-inbathtub-shop.com/?rtkcid=675f8372b262d1dc67374521
Source: chromecache_82.2.dr	String found in binary or memory: https://walk-inbathtub-shop.com/?rtkcid=675f8374e7b0b8d486306878
Source: chromecache_99.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_130.2.dr, chromecache_103.2.dr, chromecache_129.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_99.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_86.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-NC10B79WFD
Source: chromecache_86.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_86.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NDD4B4Z
Source: chromecache_130.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: classification engine

Classification label: mal52.win@19/93@63/25

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2204,i,2496441180284747030,5519861355904546482,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2204,i,2496441180284747030,5519861355904546482,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450	1%	Virustotal		Browse
http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Link
clktrack7.com	1%	Virustotal	Browse
dt1xsxznqnno4.cloudfront.net	0%	Virustotal	Browse
d2m2wsoho8qq12.cloudfront.net	1%	Virustotal	Browse
www.ipv4now.com	4%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://walk-inbathtubshop.com/images/bg.jpg	0%	Avira URL Cloud	safe
https://www.ipv4now.com/9W598/24NCH8Z/?sub1=quotesMD	100%	Avira URL Cloud	malware
https://track.walk-inbathtubshop.com/d.ashx	0%	Avira URL Cloud	safe
http://api.jqueryui.com/data-selector/	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/css/all.css	0%	Avira URL Cloud	safe
http://api.jqueryui.com/focusable-selector/	0%	Avira URL Cloud	safe
http://www.optout-mmmp.net/o-fssl-f91-272c05ccff15f314c1eb894df4957edd&cr=2734	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=107380	0%	Avira URL Cloud	safe
https://red.walk-inbathtub-shop.com/view?clickid=	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/js/jquery.mask.js	0%	Avira URL Cloud	safe
http://api.jqueryui.com/form-reset-mixin/	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/js/jquery.ui.touch-punch.js	0%	Avira URL Cloud	safe
http://api.jqueryui.com/size-effect/	0%	Avira URL Cloud	safe
http://api.jqueryui.com/puff-effect/	0%	Avira URL Cloud	safe
http://api.jqueryui.com/uniqueId/	0%	Avira URL Cloud	safe
https://clktrack7.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9	100%	Avira URL Cloud	malware
https://walk-inbathtubshop.com/js/jquery-1.11.1.min.js	0%	Avira URL Cloud	safe
http://api.jqueryui.com/checkboxradio/	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/js/form_custom.js	0%	Avira URL Cloud	safe
http://api.jqueryui.com/disableSelection/	0%	Avira URL Cloud	safe
https://cy6clk.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD	0%	Avira URL Cloud	safe
http://api.jqueryui.com/scrollParent/	0%	Avira URL Cloud	safe
https://red.walk-inbathtub-shop.com/6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined	0%	Avira URL Cloud	safe
https://walk-inbathtub-shop.com/?rtkcid=675f8374e7b0b8d486306878	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/js/main.js	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/images/logo.png	0%	Avira URL Cloud	safe
http://api.jqueryui.com/tabbable-selector/	0%	Avira URL Cloud	safe
Http://bugs.jquery.com/ticket/8235	0%	Avira URL Cloud	safe
http://api.jqueryui.com/labels/	0%	Avira URL Cloud	safe
Http://bugs.jqueryui.com/ticket/9446	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/css/media.css	0%	Avira URL Cloud	safe
https://walk-inbathtubshop.com/js/jquery-ui/jquery-ui.min.js	0%	Avira URL Cloud	safe
https://walk-inbathtub-shop.com/?rtkcid=675f8372b262d1dc67374521	0%	Avira URL Cloud	safe
https://track.walk-inbathtubshop.com/js.ashx?o=992&_=1734312808006	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
track.walk-inbathtubshop.com	159.65.98.5	true	false		high
clktrack7.com	44.226.223.11	true	false	1%, Virustotal, Browse	unknown
walk-inbathtubshop.com	167.99.100.230	true	false		high
stun.anura.io	18.159.105.57	true	false		high
script.anura.io	35.178.117.130	true	false		high
display.ringba.com	34.196.202.149	true	false		high
dt1xsxznqnno4.cloudfront.net	18.66.161.21	true	false	0%, Virustotal, Browse	unknown
d2m2wsoho8qq12.cloudfront.net	108.158.71.192	true	false	1%, Virustotal, Browse	unknown
create.lidstatic.com	104.22.39.182	true	false		high
www.ipv4now.com	172.67.196.220	true	false	4%, Virustotal, Browse	unknown
create.leadid.com	35.170.168.120	true	false		high
sin.ttrk.io	209.58.171.123	true	false		unknown
code.jquery.com	151.101.194.137	true	false		high
cy6clk.com	44.226.223.11	true	false		unknown
www.google.com	172.217.19.228	true	false		high
api.trustedform.com	52.54.218.21	true	false		high
dw4luqp.ng.impervadns.net	45.223.19.68	true	false		high
cdn.trustedform.com	52.222.144.90	true	false		high
b-js.ringba.com	unknown	unknown	false		high
red.walk-inbathtub-shop.com	unknown	unknown	false		high
deviceid.trueleadid.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.ipv4now.com/9W598/24NCH8Z/?sub1=quotesMD	false	Avira URL Cloud: malware	unknown
https://walk-inbathtubshop.com/images/bg.jpg	false	Avira URL Cloud: safe	unknown
https://deviceid.trueleadid.com/_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439	false		high
https://create.leadid.com/2.15.1/Snap?msn=10&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646543	false		high
https://walk-inbathtubshop.com/css/all.css	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.1/Snap?msn=7&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646540	false		high
https://create.leadid.com/2.15.1/InitFormData?msn=3&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646536	false		high
https://create.leadid.com/2.15.1/Snap?msn=6&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646539	false		high
https://display.ringba.com/v1/nis/hb	false		high
https://create.leadid.com/2.15.1/SaveDeviceId.js?lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&methods=48&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&uuid=692da195c1754dff85eb88ff9655ff01	false		high
https://walk-inbathtubshop.com/js/jquery.mask.js	false	Avira URL Cloud: safe	unknown
https://cdn.trustedform.com/trustedform-1.9.33.js	false		high
https://walk-inbathtubshop.com/js/jquery.ui.touch-punch.js	false	Avira URL Cloud: safe	unknown
http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450	true		unknown
https://create.lidstatic.com/campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2	false		high
https://script.anura.io/request.js?instance=3661425590&source=5286&campaign=992&exid=70060015&variable=anura&673249116261	false		high
https://clktrack7.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9	false	Avira URL Cloud: malware	unknown
https://walk-inbathtubshop.com/js/jquery-1.11.1.min.js	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.1/GenerateToken?msn=1&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&_=646533	false		high
https://walk-inbathtubshop.com/js/form_custom.js	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.1/InitFormData?msn=5&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646538	false		high
https://create.leadid.com/2.15.1/Snap?msn=9&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646542	false		high
https://create.leadid.com/2.15.1/Snap?msn=4&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646537	false		high
https://cy6clk.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD	false	Avira URL Cloud: safe	unknown
https://script.anura.io/response.json?46852511047	false		high
https://red.walk-inbathtub-shop.com/6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.1/SaveDom?msn=2&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646535	false		high
https://walk-inbathtubshop.com/js/main.js	false	Avira URL Cloud: safe	unknown
https://deviceid.trueleadid.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=375929182	false		high
https://walk-inbathtubshop.com/images/logo.png	false	Avira URL Cloud: safe	unknown
https://walk-inbathtubshop.com/css/media.css	false	Avira URL Cloud: safe	unknown
https://walk-inbathtubshop.com/js/jquery-ui/jquery-ui.min.js	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/ui/1.12.1/jquery-ui.js	false		high
https://track.walk-inbathtubshop.com/js.ashx?o=992&_=1734312808006	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://track.walk-inbathtubshop.com/d.ashx	chromecache_86.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_130.2.dr, chromecache_99.2.dr	false		high
http://api.jqueryui.com/slide-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/accordion/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/tooltip/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com	chromecache_111.2.dr	false		high
http://jsfiddle.net/JZSMt/3/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/mouse/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/position/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/button/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_126.2.dr, chromecache_115.2.dr	false		high
https://www.google.com	chromecache_99.2.dr	false		high
http://api.jqueryui.com/fade-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://www.optout-mmmp.net/o-fssl-f91-272c05ccff15f314c1eb894df4957edd&cr=2734	chromecache_86.2.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/11778	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/draggable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://red.walk-inbathtub-shop.com/view?clickid=	chromecache_94.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/form-reset-mixin/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/fold-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/button/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/spinner/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/spinner/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/tabs/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/puff-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://script.anura.io/request.js?	chromecache_86.2.dr	false		high
https://deviceid.trueleadid.com/iframe.html	chromecache_122.2.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/slider/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/checkboxradio/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/selectable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/slider/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/droppable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_130.2.dr, chromecache_103.2.dr, chromecache_129.2.dr, chromecache_99.2.dr	false		high
http://api.jqueryui.com/pulsate-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/scrollParent/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jqueryui.com/ticket/7552	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/draggable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/sortable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/resizable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/transfer-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://walk-inbathtub-shop.com/?rtkcid=675f8374e7b0b8d486306878	chromecache_82.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/labels/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=47182	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://www.robertpenner.com/easing)	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/sortable/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://jqueryui.com/datepicker/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/tabbable-selector/	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/datepicker/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
Http://bugs.jquery.com/ticket/8235	chromecache_87.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_87.2.dr, chromecache_111.2.dr	false		high
http://api.jqueryui.com/highlight-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG	chromecache_87.2.dr, chromecache_111.2.dr	false		high
https://walk-inbathtub-shop.com/?rtkcid=675f8372b262d1dc67374521	chromecache_101.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/drop-effect/	chromecache_87.2.dr, chromecache_111.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
45.223.19.68	dw4luqp.ng.impervadns.net	United States	19551	INCAPSULAUS	false
18.66.161.129	unknown	United States	3	MIT-GATEWAYSUS	false
209.58.171.123	sin.ttrk.io	Singapore	59253	LEASEWEB-APAC-SIN-11LeasewebAsiaPacificpteltdSG	false
159.65.98.5	track.walk-inbathtubshop.com	United States	14061	DIGITALOCEAN-ASNUS	false
35.178.117.130	script.anura.io	United States	16509	AMAZON-02US	false
108.158.71.192	d2m2wsoho8qq12.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
52.54.218.21	api.trustedform.com	United States	14618	AMAZON-AESUS	false
104.22.39.182	create.lidstatic.com	United States	13335	CLOUDFLARENETUS	false
34.229.26.21	unknown	United States	14618	AMAZON-AESUS	false
167.99.100.230	walk-inbathtubshop.com	United States	14061	DIGITALOCEAN-ASNUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
18.66.161.21	dt1xsxznqnno4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.159.105.57	stun.anura.io	United States	16509	AMAZON-02US	false
44.226.223.11	clktrack7.com	United States	16509	AMAZON-02US	false
52.222.144.90	cdn.trustedform.com	United States	16509	AMAZON-02US	false
35.170.168.120	create.leadid.com	United States	14618	AMAZON-AESUS	false
18.224.21.137	unknown	United States	16509	AMAZON-02US	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.196.220	www.ipv4now.com	United States	13335	CLOUDFLARENETUS	false
54.227.246.42	unknown	United States	14618	AMAZON-AESUS	false
34.196.202.149	display.ringba.com	United States	14618	AMAZON-AESUS	false
172.67.41.229	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1575561
Start date and time:	2024-12-16 02:31:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@19/93@63/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.19.206, 64.233.164.84, 172.217.17.46, 199.232.210.172, 192.229.221.95, 142.250.181.136, 172.217.19.170, 172.217.19.200, 142.250.181.14, 172.217.17.74, 172.217.19.202, 142.250.181.138, 172.217.19.10, 172.217.19.234, 172.217.17.42, 142.250.181.74, 142.250.181.106, 172.217.21.42, 142.250.181.10, 172.217.17.35, 184.28.90.27, 4.175.87.197, 13.107.246.63
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: http://18.224.21.137 Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": true, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://18.224.21.137
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=700... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script demonstrates moderate-risk behaviors, including external data transmission and the use of legacy APIs. However, it appears to be primarily focused on retrieving a result from the 'Anura' service, which could be a legitimate analytics or security-related functionality. Further context would be needed to determine the full scope and intent of the script." }
(function(){ // check for the response object every 50 milliseconds var interval = setInterval(function(){ // Change "anura" to match above variable name if different if ('object' === typeof anura) { // declare the response object when available // Change "anura" to match above variable name if different try { var response = anura.getAnura(); // when the response ID or EXID is available if (response.getId() \|\| response.getExId()) { // clear defined intervals! clearInterval(interval); // get the result from Anura servers... getResult(response); } } catch(e){ } } }, 50); // get the result from Anura servers using the response object var getResult = function(response) { var method = 'POST'; var params = ['instance=3661425590']; if (response.getId()) params.push('id='+encodeURIComponent(response.getId())); if (response.getExId()) params.push('exid='+encodeURIComponent(response.getExId())); var url = 'https://script.anura.io/result.json'+('GET' === method ? '?'+params.join('&'): ''); // internet explorer 8-9 if (window.XDomainRequest) { var http = new XDomainRequest(); if (http) { http.open(method, url); http.onprogress = function(){}; http.ontimeout = function(){}; http.onerror = function(){}; http.onload = function(){ // continue with your custom result handler... console.log(http.responseText); try{ json = jQuery.parseJSON(http.responseText); jQuery("#anura").val(json.result); } catch(e){} }; setTimeout(function(){http.send('POST' === method ? params.join('&'): '');}, 0); } // other browsers } else if (window.XMLHttpRequest) { var http = new XMLHttpRequest(); if (http && 'withCredentials' in http) { http.open(method, url, true); if ('POST' === method) http.setRequestHeader('Content-type', 'application/x-www-form-urlencoded'); http.onreadystatechange = function() { // continue with your custom result handler... console.log(http.responseText); try{ json = jQuery.parseJSON(http.responseText); jQuery("#anura").val(json.result); } catch(e){} } http.send('POST' === method ? params.join('&'): ''); } } } })();
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=700... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script appears to be handling a 'clickid' value, which is a common practice for tracking and analytics purposes. However, the use of `getCookie` and modifying form input values without user interaction raises some moderate concerns around data exfiltration and aggressive DOM manipulation. Further review may be needed to ensure the script's intent and implementation are legitimate." }
function setFormClickIdValue(a){console.log(a);document.querySelectorAll("input").forEach(function(b){console.log(b.value);b.value.indexOf("{clickid}")>-1&&(b.value=b.value.replace(/{clickid}/,a))})}function getCookie(a){var b="; "+document.cookie;a=b.split("; "+a+"\x3d");if(a.length==2)return a.pop().split(";").shift()} getCookie("rtkclickid-store")!==null&&getCookie("rtkclickid-store")!==void 0&&getCookie("rtkclickid-store")!=="undefined"&&setTimeout(function(){setFormClickIdValue(getCookie("rtkclickid-store"))},3E3);
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=700... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate script for a marketing/lead generation platform. It creates a script element and dynamically inserts it into the DOM, which is a common practice for loading third-party scripts. The script source points to a known domain (create.lidstatic.com), and the behavior is consistent with typical analytics or tracking functionality. While the script uses some older APIs like `document.createElement` and `document.getElementById`, these are not inherently malicious. Overall, this script poses a low risk and is likely part of a legitimate marketing campaign." }
// (function() { var s = document.createElement('script'); s.id = 'LeadiDscript_campaign'; s.type = 'text/javascript'; s.async = true; s.src = '//create.lidstatic.com/campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2'; var LeadiDscript = document.getElementById('LeadiDscript'); LeadiDscript.parentNode.insertBefore(s, LeadiDscript); })(); // -->
URL: https://walk-inbathtubshop.com/js/main.js... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be primarily focused on form validation and data submission, with no clear indicators of malicious behavior. The code uses standard AJAX requests to validate user input and populate form fields, which is a common practice. While some of the code may be considered outdated or could be improved, there are no high-risk indicators present." }
function MM_openBrWindow(theURL,winName,features) { //v2.0 window.open(theURL,winName,features); } function isDNCPhoneNumber(phone){ var jqxhr = $.ajax({ url: "/validate.php?phone=" + phone, dataType: "json", success: function(data) { console.log(data); jQuery("#phone_warnings").val(data[0]["IsLitigator"]); } }); } function validateAddress(address, postal_code) { var jqxhr = $.ajax({ url: "/validate_address.php?address=" + address + "&zip_code=" + postal_code, dataType: "json", success: function(data) { jQuery("#address_is_active").val(data["address_is_active"]); jQuery("#address_is_valid").val(data["address_is_valid"]); jQuery("#address_diagnostics").val(data["address_diagnostics"]); } }); } function validatePhone(){ var jqxhr = $.ajax({ url: "/validate_ph.php", data: $("#ckm_form").serialize(), dataType: "json", success: function(data) { jQuery("#NAS").val(data["identity_risk_score"]); jQuery("#NES").val(data["identity_network_score"]); jQuery("#phone_subscriber_name").val(data["phone.to_name"]); jQuery("#phone_is_valid").val(data["phone.valid"]); jQuery("#phone_score").val(data["phone.last_seen_days"]); jQuery("#phone_line_type").val(data["phone.line_type"]); jQuery("#address_resident_name").val(data["address.to_name"]); jQuery("#address_is_diagnostics").val(data["address.validity_level"]); jQuery("#email_registered_name").val(data["email.to_name"]); jQuery("#email_is_valid").val(data["email.valid"]); jQuery("#email_score").val(data["email.first_seen_days"]); jQuery("#ip_warnings").val(data["warnings"]); jQuery("#ip_zip").val(data["ip.phone_distance"]); } }); } function apiValidations(){ // ajax call to validation var jqxhr = $.ajax({ type: "GET", data: jQuery("#ckm_form").serialize(), dataType: 'json', url: "../validation.php" }) .done(function(data) { arr_fields = ["phone_score","phone_is_valid","phone_warnings","phone_is_prepaid","phone_subscriber_name","phone_line_type","phone_carrier","phone_is_commercial", "address_warnings" , "address_is_valid" , "address_diagnostics" , "address_score" , "address_is_active" , "address_resident_name" , "address_type" , "address_is_commercial" , "address_phone", "ip_warnings" , "ip_is_valid" , "ip_is_proxy" , "ip_zip" , "ip_connection_type" , "email_warnings" , "email_is_valid" , "email_diagnostics" , "email_score" , "email_is_disposable" , "email_registered_name"]; // insert fields to form jQuery.each(arr_fields, function(index,value){ if(!jQuery("#"+value).length) { field_value = eval("data."+ value); if(field_value != null) { jQuery('#ckm_form').append('<input type="hidden" id="'+value+'" name="'+value+'" value="'+field_value+'" />'); } } }); jQuery("#ckm_form").submit(); //console.log( "second success" ); }) .fail(function() { }) .always(function() { //alert( "finished" ); }); // Perform other work here ... // // } function MM_openBrWindow(theURL,winName,features) { //v2.0 window.open(theURL,winName,features); } function hasErrors(step) { var errors = []; error_flag = false; if(step == 1) { if(jQuery("#zip").val() == "") { jQuery("#zip").addClass("error"); error_flag = true; console.log('zip'); } } else if(step == 2) { if(jQuery("input[name='luxuryoptions']").attr("checked")==true) { jQuery("#luxury_features").addClass("error"); error_flag = true; } } else if(step == 3) { if(jQuery("input[name='safetyfeatures']").attr("checked")==true) { jQuery("#safety_features").addClass("error"); error_flag = true; console.log('safety_features'); } } else if(step == 4) { if(jQuery("input[name='financing']").attr("checked")==true) { jQuery("#rebates").addClass("error"); error_flag = true; console.log('rebates'); }
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=700... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script appears to be loading a third-party script from 'script.anura.io', which could potentially be used for tracking or data collection purposes. While the script does not exhibit any high-risk indicators like dynamic code execution or data exfiltration, the use of obfuscated parameters and the lack of transparency around the purpose of the script raises some moderate concerns. Further investigation into the reputation and purpose of the Anura service would be warranted to determine the overall risk level." }
(function(){ var anura = document.createElement('script'); if ('object' === typeof anura) { var params = []; var request = { instance: 3661425590, source: encodeURIComponent('5286'), campaign: encodeURIComponent('992'), exid: encodeURIComponent('70060015'), variable: encodeURIComponent('anura') }; for (var x in request) params.push(x+'='+request[x]); params.push(Math.floor(1E12*Math.random()+1)); anura.type = 'text/javascript'; anura.async = true; anura.src = 'https://script.anura.io/request.js?'+params.join('&'); var script = document.getElementsByTagName('script')[0]; script.parentNode.insertBefore(anura, script); } })();
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=700... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of the TrustedForm API, which is a service that helps verify the authenticity of online lead generation forms. The script creates a dynamic script tag to load the TrustedForm API, which is a common practice for integrating third-party services. There are no clear indicators of malicious behavior, and the interaction with the TrustedForm domain is expected for this use case. Therefore, the overall risk score is low." }
(function() { var field = 'xxTrustedFormCertUrl'; var provideReferrer = false; var tf = document.createElement('script'); tf.type = 'text/javascript'; tf.async = true; tf.src = 'http' + ('https:' == document.location.protocol ? 's' : '') + '://api.trustedform.com/trustedform.js?provide_referrer=' + escape(provideReferrer) + '&field=' + escape(field) + '&l='+new Date().getTime()+Math.random(); var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(tf, s); } )();
URL: https://walk-inbathtubshop.com/js/jquery-ui/jquery... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This appears to be a legitimate jQuery UI library with no obvious malicious behaviors. The code is well-structured and does not contain any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The library is widely used and maintained by the jQuery Foundation, which is a trusted organization. Overall, this script is likely benign and poses a low risk." }
/! jQuery UI - v1.11.2 - 2014-12-24 http://jqueryui.com * Includes: core.js, widget.js, button.js, spinner.js * Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */ (function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var a,n,o,r=t.nodeName.toLowerCase();return"area"===r?(a=t.parentNode,n=a.name,t.href&&n&&"map"===a.nodeName.toLowerCase()?(o=e("img[usemap='#"+n+"']")[0],!!o&&i(o)):!1):(/input\|select\|textarea\|button\|object/.test(r)?!t.disabled:"a"===r?t.href\|\|s:s)&&i(t)}function i(t){return e.expr.filters.visible(t)&&!e(t).parents().addBack().filter(function(){return"hidden"===e.css(this,"visibility")}).length}function s(e){return function(){var t=this.element.val();e.apply(this,arguments),this._refresh(),t!==this.element.val()&&this._trigger("change")}}e.ui=e.ui\|\|{},e.extend(e.ui,{version:"1.11.2",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:38}}),e.fn.extend({scrollParent:function(t){var i=this.css("position"),s="absolute"===i,a=t?/(auto\|scroll\|hidden)/:/(auto\|scroll)/,n=this.parents().filter(function(){var t=e(this);return s&&"static"===t.css("position")?!1:a.test(t.css("overflow")+t.css("overflow-y")+t.css("overflow-x"))}).eq(0);return"fixed"!==i&&n.length?n:e(this[0].ownerDocument\|\|document)},uniqueId:function(){var e=0;return function(){return this.each(function(){this.id\|\|(this.id="ui-id-"+ ++e)})}}(),removeUniqueId:function(){return this.each(function(){/^ui-id-\d+$/.test(this.id)&&e(this).removeAttr("id")})}}),e.extend(e.expr[":"],{data:e.expr.createPseudo?e.expr.createPseudo(function(t){return function(i){return!!e.data(i,t)}}):function(t,i,s){return!!e.data(t,s[3])},focusable:function(i){return t(i,!isNaN(e.attr(i,"tabindex")))},tabbable:function(i){var s=e.attr(i,"tabindex"),a=isNaN(s);return(a\|\|s>=0)&&t(i,!a)}}),e("<a>").outerWidth(1).jquery\|\|e.each(["Width","Height"],function(t,i){function s(t,i,s,n){return e.each(a,function(){i-=parseFloat(e.css(t,"padding"+this))\|\|0,s&&(i-=parseFloat(e.css(t,"border"+this+"Width"))\|\|0),n&&(i-=parseFloat(e.css(t,"margin"+this))\|\|0)}),i}var a="Width"===i?["Left","Right"]:["Top","Bottom"],n=i.toLowerCase(),o={innerWidth:e.fn.innerWidth,innerHeight:e.fn.innerHeight,outerWidth:e.fn.outerWidth,outerHeight:e.fn.outerHeight};e.fn["inner"+i]=function(t){return void 0===t?o["inner"+i].call(this):this.each(function(){e(this).css(n,s(this,t)+"px")})},e.fn["outer"+i]=function(t,a){return"number"!=typeof t?o["outer"+i].call(this,t):this.each(function(){e(this).css(n,s(this,t,!0,a)+"px")})}}),e.fn.addBack\|\|(e.fn.addBack=function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}),e("<a>").data("a-b","a").removeData("a-b").data("a-b")&&(e.fn.removeData=function(t){return function(i){return arguments.length?t.call(this,e.camelCase(i)):t.call(this)}}(e.fn.removeData)),e.ui.ie=!!/msie [\w.]+/.exec(navigator.userAgent.toLowerCase()),e.fn.extend({focus:function(t){return function(i,s){return"number"==typeof i?this.each(function(){var t=this;setTimeout(function(){e(t).focus(),s&&s.call(t)},i)}):t.apply(this,arguments)}}(e.fn.focus),disableSelection:function(){var e="onselectstart"in document.createElement("div")?"selectstart":"mousedown";return function(){return this.bind(e+".ui-disableSelection",function(e){e.preventDefault()})}}(),enableSelection:function(){return this.unbind(".ui-disableSelection")},zIndex:function(t){if(void 0!==t)return this.css("zIndex",t);if(this.length)for(var i,s,a=e(this[0]);a.length&&a[0]!==document;){if(i=a.css("position"),("absolute"===i\|\|"relative"===i\|\|"fixed"===i)&&(s=parseInt(a.css("zIndex"),10),!isNaN(s)&&0!==s))return s;a=a.parent()}return 0}}),e.ui.plugin={add:function(t,i,s){var a,n=e.ui[t].prototype;for(a in s)n.plugins[a]=n.plugins[a]\|\|[],n.plugins[a].push([i,s[a]])},call:function(e,t,i,s){var a,n=e.plugins[t];if(n&&(s\|\|e.element[0].parentNode&&11!==e.elemen
URL: https://track.walk-inbathtubshop.com/d.js... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a form validation library with some basic functionality. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or redirects to malicious domains. The script is primarily focused on form validation, error handling, and AJAX interactions, which are common and legitimate use cases. While it uses some legacy practices like `XDomainRequest`, the overall behavior is benign and does not raise significant security concerns." }
var CKM = { use_iframe: false, form_selector: "#ckm_form", submit_selector: ":submit", init_focus: false, error_title: "Error", required_error: "This field is required.", validation_error: "Please fix all highlighted fields.", ajax_timeout: 8000, ajax_error: "An error occurred while saving your information. Please check your internet connection and try again.", ajax_class: "valid-ajax", required_class: "valid-required", valid_class: "valid", error_class: "error", default_value_class: "default", submitting: false, add_validator: function(id, name, group_names, required){ $(function(){ var el = $(":input[name=" + name + "]", CKM.form_selector); if (el.size() == 0 && group_names) { for (var n in group_names) $(":input[name=" + group_names[n] + "]", CKM.form_selector).attr("rel", name); el = $(":input[rel=" + name + "]", CKM.form_selector); } el.data("field_id", id); if (required) { el.addClass(CKM.required_class); el.data("error", required); } else el.addClass(CKM.ajax_class); }); }, prepop_field: function(field, value, group_names){ $(function(){ var el = $(":input[name=" + field + "]", CKM.form_selector); if (el.size() == 0 && group_names) { for (var n in group_names) { el = $(":input[name=" + group_names[n] + "]", CKM.form_selector); if (el.val().length > 0 && !el.hasClass(CKM.default_value_class)) break; var ml = el.attr("maxlength"); if (ml && ml - 0 < value.length) { el.val(value.substring(0, ml - 0)); value = value.substring(ml - 0); } else el.val(value); } } else if (el.val().length == 0 \|\| el.hasClass(CKM.default_value_class)) el.val(value); }); }, format_valid: function(input){ input.removeClass(CKM.error_class).addClass(CKM.valid_class); }, format_invalid: function(input, err){ input.removeClass(CKM.valid_class).addClass(CKM.error_class); }, remove_format: function(input){ input.removeClass(CKM.error_class).removeClass(CKM.valid_class); }, popup_error: function(title, err){ alert(err ? (title + ": " + err) : title); }, change_page: function(page){ location.replace(page); } }; if ($.ajaxPrefilter) { $.ajaxPrefilter(function(options){ options.global = true; }); } $().ajaxError(function(e, req, s){ if (s.url.indexOf("v.ashx") > -1) { var field = $("#" + s.url.substring(s.url.indexOf("v.ashx") + 9).split("&")[0], CKM.form_selector); field.removeData("changing").removeData("invalid").removeData("valid"); CKM.remove_format(field); } else { CKM.submitting = false; CKM.popup_error(CKM.ajax_error); $(CKM.submit_selector, CKM.form_selector).attr("disabled", false); } }); $(function(){ $.ajaxSetup({timeout: CKM.ajax_timeout}); var ckm_form = $(CKM.form_selector); $.getScript(ckm_form.attr("action").replace("d.ashx", "js.ashx?o=" + $("input[name=ckm_offer_id]", ckm_form).val())); var format_valid = function(input){ input.removeData("invalid").data("valid", true); CKM.format_valid(input); }; var format_invalid = function(input, err){ input.removeData("valid").data("invalid", true); CKM.format_invalid(input, err); }; var remove_format = function(input){ input.removeData("invalid").removeData("valid"); CKM.remove_format(input); }; $(":text,:password,textarea", ckm_form).change(function(){ var me = $(this); if ($.trim(me.val()).length == 0 \|\| me.hasClass(CKM.default_value_class)) { var group = me.attr("rel"); if (group) { var partial = false; me = $(":input[rel=" + group + "]", ckm_form).each(function(i, el){ if (el.value.length > 0) partial = true; }); if (partial \|\| me.hasClass(CKM.required_class)) format_invalid(me, me.data("error") \|\| CKM.required_error); else format_valid(me); } else if (me.hasClass(CKM.required_class)) format_invalid(me, me.data("error") \|\| CKM.required_error); else format_valid(me); } else if (me.hasClass(CKM.ajax_class)) { var val = me.val()
URL: https://walk-inbathtubshop.com/js/form_custom.js... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be a plugin for creating a custom select dropdown element. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code primarily focuses on DOM manipulation and event handling, which are common practices in front-end web development. While the code uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are used in a transparent manner for the intended functionality. Overall, the code seems to be a legitimate implementation of a custom select dropdown, with no clear signs of malicious intent." }
$.fn.customSelect = function() { return this.each(function() { var classes = $(this).attr("class"); classes = classes.split(' '); // Cache the number of options var $this = $(this), numberOfOptions = $(this).children('option').length; // Hides the select element $this.addClass('s-hidden'); // Wrap the select element in a div $this.wrap('<div class="customSelect"></div>'); // Insert a styled div to sit over the top of the hidden select element $this.after('<div class="styledSelect"></div>'); // Cache the styled div var $styledSelect = $this.next('div.styledSelect'); if( $.isArray(classes) && classes.length ){ for (var i = 0; i < classes.length; i++) { if(classes[i] == 'custom') continue; $styledSelect.addClass(classes[i]); } } $styledSelect.append('<div class="styledInput"></div>'); $styledSelect.append('<div class="styledButton"></div>'); if($this.prop('disabled')) $styledSelect.closest('.styledSelect').addClass('disabled'); // Show the first select option in the styled div if(!$this.prop('disabled')){ $styledSelect.find('.styledInput').text($this.children('option').eq(0).text()); for (var i = 0; i < numberOfOptions; i++) { if($this.children('option').eq(i).prop('selected')) $styledSelect.find('.styledInput').text($this.children('option').eq(i).text()); }; } // Insert an unordered list after the styled div and also cache the list var $list = $('<ul />', { 'class': 'options' }).insertAfter($styledSelect); // Insert a list item into the unordered list for each select option for (var i = 0; i < numberOfOptions; i++) { $('<li />', { text: $this.children('option').eq(i).text(), rel: $this.children('option').eq(i).val() }).appendTo($list); } // Cache the list items var $listItems = $list.children('li'); // Show the unordered list when the styled div is clicked (also hides it if the div is clicked again) if(!$this.prop('disabled')){ $styledSelect.click(function (e) { e.stopPropagation(); $(this).toggleClass('active').next('ul.options').toggleClass('active'); // $('div.styledSelect.active').each(function () { // $(this).removeClass('active').next('ul.options').hide(); // }); // $(this).toggleClass('active').next('ul.options').toggle(); }); // Hides the unordered list when a list item is clicked and updates the styled div to show the selected list item // Updates the select element to have the value of the equivalent option $listItems.click(function (e) { e.stopPropagation(); $styledSelect.find('.styledInput').text($(this).text()); $styledSelect.removeClass('active').next('ul.options').removeClass('active'); $this.val($(this).attr('rel')); /* alert($this.val()); Uncomment this for demonstration! */ }); // Hides the unordered list when clicking outside of it $(document).click(function () { $styledSelect.removeClass('active').next('ul.options').removeClass('active'); }); } }); }; $(function(){ // $('select.customSelect').customSelect(); })
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue", "text_input_field_labels": "Your Zip Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	{ "brands": [ "Walk-in Bathtub Shop" ] }
	{ "brands": [ "Walk-in Bathtub Shop" ] }
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	```json{ "legit_domain": "walkinbathtubshop.com", "classification": "unknown", "reasons": [ "The brand 'Walk-in Bathtub Shop' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'walk-inbathtubshop.com' contains a hyphen, which is often used in phishing attempts to mimic legitimate domains.", "There is no widely recognized brand associated with 'Walk-in Bathtub Shop', making it challenging to verify the legitimacy of the domain.", "The domain does not match any well-known or established brand, increasing the suspicion of phishing.", "The input field 'Your Zip Code' is generic and does not provide enough context to determine the site's legitimacy." ], "riskscore": 7}
URL: walk-inbathtubshop.com Brands: Walk-in Bathtub Shop Input Fields: Your Zip Code
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue", "text_input_field_labels": "Your Zip Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	{ "brands": [ "Walk-in Bathtub Shop" ] }
	{ "brands": [ "Walk-in Bathtub Shop" ] }
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	```json{ "legit_domain": "walkinbathtubshop.com", "classification": "unknown", "reasons": [ "The brand 'Walk-in Bathtub Shop' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'walk-inbathtubshop.com' contains a hyphen, which is often used in phishing attempts to mimic legitimate domains.", "There is no widely recognized brand associated with 'Walk-in Bathtub Shop', making it challenging to verify the legitimacy of the domain.", "The domain does not match any well-known or established brand, increasing the suspicion of phishing." ], "riskscore": 7}
URL: walk-inbathtubshop.com Brands: Walk-in Bathtub Shop Input Fields: Your Zip Code
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue", "text_input_field_labels": "Your Zip Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	{ "brands": [ "Walk-in Bathtub Shop" ] }
	{ "brands": [ "Walk-in Bathtub Shop" ] }
URL: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be a legitimate script that retrieves and uses a LeadiD token, checks for a UUID in cookies and local storage, and creates an iframe to load content from a trusted domain (deviceid.trueleadid.com). The script does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or redirects to malicious domains. It uses standard web APIs and practices, with some minor legacy functionality like the use of `XDomainRequest`. Overall, the script seems to be focused on tracking and analytics, which is a common and generally benign use case." }
function init() { // Retrieve the LeadiD token from this URL's querystring var token = getQueryVariable('token'); var apiurl = getQueryVariable('apiurl'); // Check if we have a uuid in cookie jar var uuidCookie = getCookie('uuid'); var lck = getQueryVariable('lck'); var lac = getQueryVariable('lac'); // Check if we have a UUID in local storage try { var uuidLocalStorage = 'object' == typeof localStorage && localStorage.getItem('uuid'); } catch(error) { // Catch security errors in browsers like Chrome that are averse to local storage // access attempts in the context of an iframe when 3rd party cookies are blocked var uuidLocalStorage = 0; } var uuid = uuidCookie \|\| uuidLocalStorage; var method = (+!!uuidLocalStorage * 2) + (+!!uuidCookie); var options = { token: token, apiurl: apiurl, uuid: uuid, method: method, lck: lck, lac: lac }; addNewIframe(options); } /** * Add forward to new iframe to page * * @param Object options * An object of values to put in the querystring of the new iframe / function addNewIframe(options) { var frame = document.createElement('iframe'); var newFrameUrl = "https://deviceid.trueleadid.com/iframe.html"; var queryStringVals = []; var key; for (key in options) { if (options.hasOwnProperty(key)) { var value = options[key]; if (value) { queryStringVals.push([key, value].join("=")) } } } newFrameUrl += "?" + queryStringVals.join("&"); frame.src = newFrameUrl; frame.title = '^'; document.body.appendChild(frame); } /* * Check whether a variable is defined. * * @param String val * The variable to test * * @return Boolean / function isDefined(val) { return 'undefined' != typeof val; }; /* * Gets the value of a variable in the query string of this URL. * * @param String variable * Name of the variable to get the value of * * @return String / function getQueryVariable(variable) { var querystring = location.search.split('?')[1]; if (isDefined(querystring)) { var vars = querystring.split('&'); for (var i = 0; i < vars.length; i++) { var pair = vars[i].split('='); if (pair[0] == variable) { return isDefined(pair[1]) ? pair[1] : ''; } } } return null; // Query Variable not found } /* * Polyfill for String.trim() / if (!String.prototype.trim) { String.prototype.trim = function() { return this.replace(/^\s+\|\s+$/gm, ''); } } /* * Gets a cookie from the browser * * @param String name * Cookie to get the value of * * @return String */ function getCookie(name) { var cookieName , cookieValue , cookieArray = document.cookie.split(';'); for (var index = 0; index < cookieArray.length; ++index) { cookieName = cookieArray[index].substr(0, cookieArray[index].indexOf('=')).trim(); cookieValue = cookieArray[index].substr(cookieArray[index].indexOf('=') + 1); if (cookieName == name) { return unescape(cookieValue); } } } (function() { try { init(); } catch(error) { // Silently swallow error here } })();
URL: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Model: Joe Sandbox AI	```json{ "legit_domain": "walkinbathtubshop.com", "classification": "unknown", "reasons": [ "The brand 'Walk-in Bathtub Shop' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'walk-inbathtubshop.com' contains a hyphen, which could be a tactic used in phishing to mimic legitimate domains.", "There is no widely recognized brand associated with 'Walk-in Bathtub Shop', making it challenging to verify the legitimacy of the domain.", "The domain name does not match any well-known or known brand, increasing the suspicion of phishing.", "The input field 'Your Zip Code' is generic and does not provide enough context to determine the legitimacy of the site." ], "riskscore": 7}
URL: walk-inbathtubshop.com Brands: Walk-in Bathtub Shop Input Fields: Your Zip Code

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13205), with no line terminators
Category:	dropped
Size (bytes):	13213
Entropy (8bit):	5.324751378544301
Encrypted:	false
SSDEEP:	192:cLwzC+nau15a22mCegA+BIQ5shD0V0hTqovXBVHbM/RQjQ4LFoDIBaqkAnFyl:cwLn3CjA0bTeT3JalqkMA
MD5:	0C3BC3C0BE25F6303C23505ABC9CABBB
SHA1:	2D3851142D90082B55A5F377C2AA56D8AD83C6F4
SHA-256:	B76530A493017914B1E73D62C98AC2F805154D980AECE5A1B5B47DD7388EB30F
SHA-512:	D52F5BE74367E688D3EA42A83145E76DA6A76358EF83564B480CAAA4DB2A749423F925398A66F84D52AC884750EC21C423A3F1D4C1823B2D8184EAA775941538
Malicious:	false
Reputation:	low
Preview:	(function(window){window.ringba_known_numbers = [{"int":"+18883060819","loc":"(888) 306-0819","jstag":"JS65ffc2abf10f43dd96c4efa88cc6a738","replaceWithInt":null,"replaceWithLoc":null,"replaceLeftToRight":false}];!function(e){function t(){this.tagId="",this.id="",this.displayNumber="",this.phoneNumber="",this.impressionQueryPath="",this.maxEpoch=0,this.timeBetweenTicks=0,this.heartBeatMs=0,this.exp=0,this.displayFmt=0,this.heartBeatTimeout=null,this.ready=!0}var n=function(){function t(e){return JSON.stringify(e)}return{postRequest:function(n,r,a,i){if("XDomainRequest"in e&&null!==e.XDomainRequest){var o=new XDomainRequest;o.open("POST",n),o.onload=function(){result=o.responseText,a(result)},o.onerror=function(){i&&i()},o.send(t(r))}else{if(navigator.userAgent.indexOf("MSIE")!=-1&&parseInt(navigator.userAgent.match(/MSIE ([\d.]+)/)[1],10)<8)return!1;var u=new XMLHttpRequest;u.onreadystatechange=function(){4==u.readyState&&(200==u.status?a(u.responseText):i&&i())},u.open("POST",n,!0),u.s

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	173
Entropy (8bit):	4.917659313554879
Encrypted:	false
SSDEEP:	3:YWR4bqINVK7RM1KgObjWUk3TyT2v9TlB+kBVDUAaGHmJmFOMBHmdk3TyT2G3NGAQ:YWybqI4q1KLbiTTyMJ+kjRmJqU+TyI
MD5:	D16DA1F2C6CD9DDCAE0D9FA3B03AE0F9
SHA1:	E3C53839A1A846535F28866553B540D527020CEA
SHA-256:	08624C7E764AA6170B101708C54707AFB87CA6B40E9C2188F8C16641A654F874
SHA-512:	C0FC228A28F5A9CFE44A87D9439292D71036B660DA8E52F7C1D9295065EEC23D474584E58FD944D865F57ACBF13E3869D43155CDAF2739445CEBBBFF655D981A
Malicious:	false
Reputation:	low
URL:	https://red.walk-inbathtub-shop.com/6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined
Preview:	{"status":1,"url":"https://walk-inbathtub-shop.com/?rtkcid=675f8372b262d1dc67374521\u0026rtkcmpid=6723c0f752e3b38cb5d16a33","clickid":"675f8372b262d1dc67374521","rsocid":""}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24035)
Category:	downloaded
Size (bytes):	24224
Entropy (8bit):	5.102463310155566
Encrypted:	false
SSDEEP:	384:0ZDvxTZeiMEdBqHhfpx9TmH4mSZQOrBWxZoFOZKWUnJx690HC:CFM1r+urB/ZdpHC
MD5:	934A602EFF918B6F44CA15C6FEBED244
SHA1:	B9B7FC06AA1743A5F70FF768BD43661E38DE9DF9
SHA-256:	54930D3F142BC3542CEFAAE1BF3FE5EFFB3F4CB91EE08E358129019D4089CFDF
SHA-512:	FD3678F406077E30B829FD3762CA3075EEE0947F5ED3F05687C8ACFA49072F9747BF54E28C97B8E74EA7FB354F34C364210C9594BB317AE10E700E34DEDB3F07
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/jquery-ui/jquery-ui.min.js
Preview:	/! jQuery UI - v1.11.2 - 2014-12-24. http://jqueryui.com.* Includes: core.js, widget.js, button.js, spinner.js.* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var a,n,o,r=t.nodeName.toLowerCase();return"area"===r?(a=t.parentNode,n=a.name,t.href&&n&&"map"===a.nodeName.toLowerCase()?(o=e("img[usemap='#"+n+"']")[0],!!o&&i(o)):!1):(/input\|select\|textarea\|button\|object/.test(r)?!t.disabled:"a"===r?t.href\|\|s:s)&&i(t)}function i(t){return e.expr.filters.visible(t)&&!e(t).parents().addBack().filter(function(){return"hidden"===e.css(this,"visibility")}).length}function s(e){return function(){var t=this.element.val();e.apply(this,arguments),this._refresh(),t!==this.element.val()&&this._trigger("change")}}e.ui=e.ui\|\|{},e.extend(e.ui,{version:"1.11.2",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	dropped
Size (bytes):	210082
Entropy (8bit):	5.546286519807053
Encrypted:	false
SSDEEP:	3072:0AwFitgcnsbIj3+D00zmYasxzuZ1IwPcRCrvPlka0Mf3/WfmJVM1:0AwYnsbQNZ1HcRCrKa0Mf3/WN
MD5:	675A53E174FAF2AD246F8DB160E61282
SHA1:	6E9467E9E18E7DB69B0E1C8206630D086848C9E1
SHA-256:	C85EBBF4C81AABA668127B61FC25A27D835D2F62099FB28CF7D322E3BCA7B4EB
SHA-512:	B83037E4FA629D9BE03D91FEA1B4CB50B5EA2CDA14F3F5CE39A763761D7F56334B02D89DEB1EA2F90B1841EC1E42CD72BB8BFE4A21DD94F48A86D0926D30409A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"19",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"rtkclickid-store"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__paused","vtp_originalTagType":"html","tag_id":3},{"function":"__paused","vtp_originalTagType":"html","tag_id":5},{"function":"__paused","vtp_originalTagType":"cvt_34034946_7","tag_id":8},{"function":"__paused","vtp_originalTagType":"cvt_34034946_7","tag_id":9},{"function":"__paused","vtp_originalTagType":"html","tag_id":11},{"function":"__paused"

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086)
Category:	dropped
Size (bytes):	95786
Entropy (8bit):	5.393689635062045
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB
MD5:	8101D596B2B8FA35FE3A634EA342D7C3
SHA1:	D6C1F41972DE07B09BFA63D2E50F9AB41EC372BD
SHA-256:	540BC6DEC1DD4B92EA4D3FB903F69EABF6D919AFD48F4E312B163C28CFF0F441
SHA-512:	9E1634EB02AB6ACDFD95BF6544EEFA278DFDEC21F55E94522DF2C949FB537A8DFEAB6BCFECF69E6C82C7F53A87F864699CE85F0068EE60C56655339927EEBCDB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	5074
Entropy (8bit):	4.4397748874223755
Encrypted:	false
SSDEEP:	96:xdG5v4PMVkxyM9SLUT7Kf+9/aclLxaal9r6IHHc8+h:x8WUAJnt9n7HPC
MD5:	594C7FA31E788C18FD6BAC62D2824BAC
SHA1:	C719615E4352507E1345EF95716163A7FB015A9C
SHA-256:	4BDEB4E61FFE7D31F1F2413CF6FE0D416B93182110245D01F541AF30560088EF
SHA-512:	655861BB9BDDD277E5A6F3D1553539B5FD900C9EDE5C9D53AA7202D947A307C02804428D55A6D60E7166C75D74AF872D17D3C4CCC1ABA59E87C87C358C7F00DE
Malicious:	false
Reputation:	low
Preview:	/!. jQuery UI Touch Punch 0.2.3. . Copyright 2011.2014, Dave Furfero. * Dual licensed under the MIT or GPL Version 2 licenses.. . Depends:. * jquery.ui.widget.js. * jquery.ui.mouse.js. /.(function ($) {.. // Detect touch support. $.support.touch = 'ontouchend' in document;.. // Ignore browsers without touch support. if (!$.support.touch) {. return;. }.. var mouseProto = $.ui.mouse.prototype,. _mouseInit = mouseProto._mouseInit,. _mouseDestroy = mouseProto._mouseDestroy,. touchHandled;.. /. Simulate a mouse event based on a corresponding touch event. * @param {Object} event A touch event. * @param {String} simulatedType The corresponding mouse event. */. function simulateMouseEvent (event, simulatedType) {.. // Ignore multi-touch events. if (event.originalEvent.touches.length > 1) {. return;. }.. event.preventDefault();.. var touch = event.originalEvent.changedTouches[0],. simulatedEvent = document.createEven

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	7223
Entropy (8bit):	4.969203628683902
Encrypted:	false
SSDEEP:	96:S2rJjYDSTG/tRo0ssi15rpmZyN5LnThdkC9PSxBQl7jQAjlZwMWAOzRadevBvBMb:VrJ7TiRZs7npQQeKEaq4uyeJCGKNP
MD5:	C5F6513027F4D0359FCD7BD1E7E8C26B
SHA1:	F5AB68300BBE2A6978272F9E09626F170B5A3B97
SHA-256:	D664612936B14C5CAA8092F018CE547CAD1397415BC1D61C1ECC480ACC6F116A
SHA-512:	D6AB4A3E8F7BED4AAACF809D0CBAB981F55F01E59BAF015E7835C36DFEDE4CDDF524C4968C819A251F1A44C00C4B11F2DC00DB471F7F1C236CC8FC26726D9666
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/jquery.mask.js
Preview:	/// <reference path="../../../lib/jquery-1.2.6.js" />./..Masked Input plugin for jQuery..Copyright (c) 2007-2009 Josh Bush (digitalbush.com)..Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) ..Version: 1.2.2 (03/09/2009 22:39:06)./.(function($) {..var ie = (function(){... var undef,.. v = 3,.. div = document.createElement('div'),.. all = div.getElementsByTagName('i');... while (.. div.innerHTML = ' [if gt IE ' + (++v) + ']><i></i><![endif]-->',.. all[0].. );... return v > 4 ? v : undef;...}());....var pasteEventName = (ie ? 'paste' : 'input') + ".mask";..var iPhone = (window.orientation != undefined);...$.mask = {...//Predefined character definitions...definitions: {....'9': "[0-9]",....'a': "[A-Za-z]",....'*': "[A-Za-z0-9]"...}..};...$.fn.extend({...//Helper Function for Caret positioning...caret: function(begin, end) {....if (this.length == 0) return;....if (typeof begin == 'number') {...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	101025
Entropy (8bit):	5.670770351006055
Encrypted:	false
SSDEEP:	1536:wCS94LMwitSwx/zVXhqfb0knerh6WFKsiTtVJ:zSS3lwxzVxqgoeV7O
MD5:	6B47EC48CCF715432C4687DA324F1EC0
SHA1:	2A4566822016517C00473656A8ABB6D51C98D371
SHA-256:	F5C43A5144409029904ECD3587DCA2535A6499BDD8384F7C0C366E9AC09560F9
SHA-512:	2F4411BB428A7C7B5407263F134142AF505D3A9F76B8336C54D495DCBC57E68855B608F854964B34007E1647FC76E9494746FF91130E3B0543C4E4DE4FC27311
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t){return"function"==typeof n?function(t){return n.bind(t)}:function(n){return t.bind(null,n)}}var t=Array.from\|\|function(n){return Array.prototype.slice.call(n)};var r=n(Array.prototype.includes,e);function e(n,t){return-1!==n.indexOf(t)}var i=n(Array.prototype.flatMap,(function(n,t){for(var r=[],e=0;e<n.length;e++)Array.prototype.push.apply(r,t(n[e]));return r}));var o=n(Array.prototype.find,(function(n,t){for(var r=0;r<n.length;r++)if(t(n[r]))return n[r]}));var u=n(String.prototype.includes,e);window.trustedForm\|\|(window.trustedForm={id:1337});var a=window.trustedForm;a.startRecording=function(){return f.disabled.recording?"TrustedForm recording cannot be started once stopped.":(f.disabled.recording=!1,"TrustedForm recording has been started")},a.stopRecording=function(){return f.disabled.recording=!0,"TrustedForm recording has been stopped"},window.trustedFormStartRecording=a.startRecording,window.trustedFormStopRecording=a.stopRecording;var c=

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 638 x 111, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28476
Entropy (8bit):	7.984805459803778
Encrypted:	false
SSDEEP:	768:sObjF8MXo5QLzvgcNH4gcACMNUcpInlpV5gtWPjtJe:TbuOP/9Hbfxgp56W7W
MD5:	D4D0C7D519B32A336958B12A4D787ABA
SHA1:	604173E4C33E49E119AB92CA7E576340F0FD2A19
SHA-256:	B9668627DEB43B895537C7C2458FE82BBDCAE6DFA2B8FE499A53D5617F33DF1D
SHA-512:	8825EDFF3A1E53A47EC62EFB1E917225BECAAD8A5643C2B2C39641D9A6156F409B5C626C0C843A0050D1571D10132DE099821C6B5E19683DE0F39FD5E117EA2C
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/images/logo.png
Preview:	.PNG........IHDR...~...o.....r..w....tEXtSoftware.Adobe ImageReadyq.e<..n.IDATx..].\|.G...!F.H..`A..S.J).R..R....B[.C...x..wI....ww.\|.6oa...%GH`.......y....Q....x.'.x.'.xz.I....x.'.x.'.....O<...O<...?.x.'.x.'.x...O<...O<.....x.'.x.'.xzs....[I...urhK...C{...Q.g.!W.[.\|<.,^TE.\E...<q...3J,...Z...B^..C.T.g...<5s.'.y.A..R..o..X...J.xN..Z...f).....p...s....a#G...E..5.h..H.\...=j...,{.a.....u.8>..:..<...~..H...U........U.1k...:.0.....xj,.. /j.K{.........{...V.[.Zk...#5.. ^.\|_...F.e3....S.l.cc.+)))...ut.\|.i.....2rU02.e.....M......y...p..~@..\|}\|,N.<9FEY9.[O...4....Vf......C....:...#ujjj../........544......;`.o.7.t.v.>'..o.n..G..m&._....@u..g..>....3ZUU.......@.9.;.=PF..o.6....%9.....^.#..ar%.Tk..x...N.l..1>~0...Kzo......u..,2..."tw...U.I.....[...mK.{..D..^+....+s..qE..Rf..O.<...wM.*...^..-(s.qhJ..~...x...S.A6{](...37j...u.L.S.]...@....3......).....o....<.^PP..d...>q....K266.4...^.i..i#..Z....BBV..AG.1z...1Sb./\j>.....v......

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4435
Entropy (8bit):	5.187565971836467
Encrypted:	false
SSDEEP:	48:Fg93t2acLahpc1fMJxqydyLiDon57TIYSAGR/3I56FLTy7WhrEaQo1R1zVrJjQ1Y:Fg93YhE23R7A/3I56FSyacVtc1hwi2
MD5:	42BE7D1F30FE415803AF2AC11DA82A1D
SHA1:	7147368B6DC449C465DC13796EF202B7B54FBD34
SHA-256:	F7D18DC9DA40033511C54AB5CCB77BA25AA68A53ADFE4426FAEFA04CF0F186DA
SHA-512:	4C810484D6D3AA300CB24A326C05CE3DC0AF02121336318F9178308A2FB50D9BEF9C3A6DB055EDED29205AC72BBD450BE523112BB053D0C8D8057B3870D85D24
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/css/all.css
Preview:	.wrapper{..max-width: 1200px;..width:100%;..margin: 0 auto;..min-height: 820px;..position: relative;.}...content {..max-width: 1200px;..width: 100%;..position: relative;..text-align:center;.}...clr{..clear: both;.}...top_wrap{..min-height:720px;..width: 100%;..box-sizing: border-box;. -moz-box-sizing: border-box; . -webkit-box-sizing: border-box; .}...bot_wrap{..padding: 0;..width: 100%;..box-sizing: border-box;. .-moz-box-sizing: border-box; . -webkit-box-sizing: border-box; .}...left_block{..margin:auto;..text-align:center;..font-size:18px;..padding:20px;..}....right_block{..text-align:center;..margin:0 auto;..position: relative;..max-width:900px;..padding:0px 20px 20px 20px;..border:4px solid #fff;..background-color: rgba(0, 0, 0, 0.6);.-webkit-box-shadow: 0px 0px 31px 1px rgba(0,0,0,0.45);.-moz-box-shadow: 0px 0px 31px 1px rgba(0,0,0,0.45);.box-shadow: 0px 0px 31px 1px rgba(0,0,0,0.45);..}....inner_left_block{..max-width:1200px;..margin:auto;..width: 100%;.}...icon_wrapp

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	775
Entropy (8bit):	4.769821519134196
Encrypted:	false
SSDEEP:	12:bgBa2gOeV2gOLJ+2gJvoPgY9VPgNTBlMZsdS2geV2gLJ+2HoPSzZP:b6a2beV2b9+2MQbBMesdS2bV20+2ISNP
MD5:	34AC921EF15F9FD23F9A7B33AE1C4378
SHA1:	BD7117FD57021D7D6F8DBEDCD4578E4D524DA803
SHA-256:	0E780C703A2774499AB38A29D0681BAC83AA5DF6DA3EDDFABC3313DBDF3C6F92
SHA-512:	7F869D7A897E7EA9D3C93B32B47B1EEC3065EF6B2596319F9AC7B9B6C2E5206026666C69732EAE2685871811BAE78C433956E48846BE2DD27CCC6CB2E09EF5F6
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/css/fonts.css
Preview:	@font-face {.. font-family: 'MyriadPro-Regular';.. src: url('../fonts/MyriadPro-Regular.eot');.. src: url('../fonts/MyriadPro-Regular.eot') format('embedded-opentype'),.. url('../fonts/MyriadPro-Regular.woff') format('woff'),.. url('../font/MyriadPro-Regular.ttf') format('truetype'),.. url('../font/MyriadPro-Regular.svg') format('svg');.. font-weight: normal;.. font-style: normal;..}..@font-face {.. font-family: 'MyriadPro-Bold';.. src: url('../fonts/MyriadPro-Bold.eot');.. src: url('../fonts/MyriadPro-Bold.eot') format('embedded-opentype'),.. url('../fonts/MyriadPro-Bold.woff') format('woff'),.. url('../font/MyriadPro-Bold.ttf') format('truetype');.. font-weight: normal;.. font-style: normal;..}

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1002)
Category:	downloaded
Size (bytes):	520714
Entropy (8bit):	5.069793318308826
Encrypted:	false
SSDEEP:	12288:1vemHFgymzYDdHCcmM2/W/CCeS/QRzbrVDDdRO2:vDdHCcmM2/W/CCeSIVDDdRO2
MD5:	AB5284DE5E3D221E53647FD348E5644B
SHA1:	75C20ACDC6CBC6334FE2B918AB7AFEEC007F969E
SHA-256:	4F455EB2DDF2094EE969F470F6BFAC7ADB4C057E8990A374E9DA819E943C777D
SHA-512:	2462ACC237C0063263B52527CFECBC5D4063065C0CD541CD966D9924DEC0D9AF475184F732C92AF9269CB08DF993896893EFF37AD4B18598CA4B7AF7B5F02742
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.12.1/jquery-ui.js
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sortabl

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.022714701636012
Encrypted:	false
SSDEEP:	3:hmgGYsYcV8kHU96kgpmkhmCWrrGnNKXyf+G2:hmXvYcW8k6kgpmk3sSnNKXtG2
MD5:	772194430453AE9A0D3110CB50792BBD
SHA1:	3D15EA524576481984A95690739C83BFD99C8AC9
SHA-256:	9157DB1BA07DF2430215632FB9A47E29B437687E73017E5212A3C6B46A972471
SHA-512:	D30C960F9AFA61D0B9266542FACBBC4E960990B5F590383D833CFBBB26AA6B57714487744285E9D95B3E1FF708485DA480CEED9F7C7250385353EF63D9055C18
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwlJTWgSZc82IxIFDQmoxJUSBQ2U1FseEgUN77-NcxIFDQCgC8oSBQ0ihz2yEgUNQepRrg==?alt=proto
Preview:	Ck4KCw0JqMSVGgQIIxgBCgsNlNRbHhoECE0YAQoLDe+/jXMaBAgDGAEKCw0AoAvKGgQIbRgBCgsNIoc9shoECA0YAQoLDUHqUa4aBAgJGAE=

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 491 x 105, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16897
Entropy (8bit):	7.971868923512247
Encrypted:	false
SSDEEP:	384:CYlWnv8XyUsxZaB2ooeuDz8zqD0pJB010ZMSis6/6EdN0fUGcFPY:3WnBvnaB2ooj0V0jHp0EFg
MD5:	6AD1F24BBCE3F25CA7418BE7757CC7BA
SHA1:	2A6B739663A18F030061893483D6183445C577C7
SHA-256:	98CE848AF4143DFBCA9EBB95AF70D2E81A51B8991A963674E8353CF612585407
SHA-512:	9753703C3BE44EDFC416C13556FFBD005B4DA49026A39E2A9914C3D8F5494F538BA166EC0F7E436C13DF2BB64369AA790B680F219A47036EBF0CADB3B0E39698
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/images/starthere.png
Preview:	.PNG........IHDR.......i.............tEXtSoftware.Adobe ImageReadyq.e<..A.IDATx...\|TU...{.3......& EVDQA..X+..].u.+.......k[....E.^."H.B(IHHBH/.L.7...y.>f..)...}>.3..+..W...{..!........:.D^.\\\\\\..\\\\\\\..\\\\\\..\\\\\\\..\\\\\\\..\\\\\\'........N.....mI.g.u9.F.............q.....@g.p.....p..u..x...G.].MW.....%...O.G._.E....1z0..@.'}!&5.bz.....A....%... y..G...C7t.(.@&6z.t..E..@h!..-.S...@34..U.0..Z.t.....iy......".UE#..O....-.L..\\\\\.A!.u....q.........q....$.e.@.....0.^H...WT.#PeYm8`n..ABj....K%..!n..!.........y.3.(..5.....W.y/."......P.y!.....+.]:j-S6[.ueA.1.U....)./..!-2H.$^...)....#.....}....Lu.xS!1'fA..;DQ.....\..k......(AE....Da<.j.c+f..x...Q.....S..dA....+...^>a.ktf.y!.........Y..`.........P.o...."=...._...r~n....T...n......2j... &...1.=.,..~..m..<.1.W.#.+..V.t...E`...OX.BK+C...-..U..s ............X.5. .;y.5.5.....u.a..bj..n..r...W..t...I...&.9..w......I...XWn....\|..............J.}...!'.711.h.O\|......W.$B....../`....w...V.Ff..EK....\|.SpJ....

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1436x725, components 3
Category:	downloaded
Size (bytes):	126411
Entropy (8bit):	7.96815787663642
Encrypted:	false
SSDEEP:	3072:mJjwP7ZEtxsSPZCVTlZ7O6BuOkDu+azN3HmyXVUeeBW+Nm:qFt+QmlZ7zBjCtKVURm
MD5:	CD0520B1847678A79D3499BE4A711864
SHA1:	075EEE32119C575FCA76619E52330B47C2B5B693
SHA-256:	849958D4589819622E31905D80FC4DA21506F3635FF12B4031DE2B4E7F8237E1
SHA-512:	E15D33043AB155BA9B0574B4338F6329414265824B881C21AF11CD4EF826A13A795DF24A9D7C557CD97622ECE599067C86E053CDB49B4CDD8C7589FF690BAFD8
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/images/bg.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!1A..Q.a"2.q.B..R#....3.b...r.CS..$..4..c%.s..DU.....................!...1AQ..a"..q2..B.Rb#..r.3............?..........x...j.._....}...wj..0..o........~.........\|cy...X...J1....@.2O;.O.._l}..'.7....j8...L...\|.y..s/.......w.1....I.A.....+.~.c.............t.e.;.e..h.....W..L./g2.xT..>A.Ox.1.}....:...-M.x...>.`..t.2..k..c.........,6..+.S.2.i.n..T&...U<b...L...ghW.".....5.,7...W..6./m....U..;B..d+x.I...l..B..G%.....F...A.dp......n..f..r....0../.QG...yGd}]rL.....C..{5...Db..&i.<~.wFg.......W4.6.Q..Mgi...L6..!.F..[...2a....W"U.X2...&I.8.k@.S..9..%..U....dS.9@.DF..7.8...1...K.C.2VdM.z...........a.y..8Wa....Kh......Pm..0.n$F8.e0.....gT....i.W+.Etq... ......AL.y

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	35212
Entropy (8bit):	5.2880504466700256
Encrypted:	false
SSDEEP:	192:vGO80QYpyprM2lr0sNJdBsUPSMfe3OnJ572hk/LQY+Bg3da5Y6BjSmMErEURHd0Q:6Ypypr4Oq2J1eQykeC5YE7zS25+as
MD5:	64DFB75EF30CBF691E7858DC1992B4DF
SHA1:	EEC52FFEE06BD3EA66967AE9CDD62F1FD2742365
SHA-256:	7F8E420A4AC3EA7F6FD081CE07234101414D27DF260A6D547663F8E0C0EFBAF4
SHA-512:	120CD1B088489AA778284359BDEC026C4FDD6ABA246C83B6DCBCCF2343EF504742B4E4EE2A220DE7429E9F1D91119A6431C4B0E18158C1CB9D50067778BB85C7
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHover=4

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13205), with no line terminators
Category:	downloaded
Size (bytes):	13213
Entropy (8bit):	5.324751378544301
Encrypted:	false
SSDEEP:	192:cLwzC+nau15a22mCegA+BIQ5shD0V0hTqovXBVHbM/RQjQ4LFoDIBaqkAnFyl:cwLn3CjA0bTeT3JalqkMA
MD5:	0C3BC3C0BE25F6303C23505ABC9CABBB
SHA1:	2D3851142D90082B55A5F377C2AA56D8AD83C6F4
SHA-256:	B76530A493017914B1E73D62C98AC2F805154D980AECE5A1B5B47DD7388EB30F
SHA-512:	D52F5BE74367E688D3EA42A83145E76DA6A76358EF83564B480CAAA4DB2A749423F925398A66F84D52AC884750EC21C423A3F1D4C1823B2D8184EAA775941538
Malicious:	false
Reputation:	low
URL:	https://b-js.ringba.com/CAe854059830cf4314ae327f16481e8efc
Preview:	(function(window){window.ringba_known_numbers = [{"int":"+18883060819","loc":"(888) 306-0819","jstag":"JS65ffc2abf10f43dd96c4efa88cc6a738","replaceWithInt":null,"replaceWithLoc":null,"replaceLeftToRight":false}];!function(e){function t(){this.tagId="",this.id="",this.displayNumber="",this.phoneNumber="",this.impressionQueryPath="",this.maxEpoch=0,this.timeBetweenTicks=0,this.heartBeatMs=0,this.exp=0,this.displayFmt=0,this.heartBeatTimeout=null,this.ready=!0}var n=function(){function t(e){return JSON.stringify(e)}return{postRequest:function(n,r,a,i){if("XDomainRequest"in e&&null!==e.XDomainRequest){var o=new XDomainRequest;o.open("POST",n),o.onload=function(){result=o.responseText,a(result)},o.onerror=function(){i&&i()},o.send(t(r))}else{if(navigator.userAgent.indexOf("MSIE")!=-1&&parseInt(navigator.userAgent.match(/MSIE ([\d.]+)/)[1],10)<8)return!1;var u=new XMLHttpRequest;u.onreadystatechange=function(){4==u.readyState&&(200==u.status?a(u.responseText):i&&i())},u.open("POST",n,!0),u.s

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	5.267787405599065
Encrypted:	false
SSDEEP:	48:xP8hOjc+7GtljqKCRtpJTjN5Bxm0r/FrGrNhsp+olx1BiM1PtI7nW4V9GEEn:h8hOjP4ljKRtpJvPjGrNh4+olliO67nG
MD5:	AC3F79B70C757CC799808244DC0C579E
SHA1:	AF8563D22C118B350961BBEA080A311C0E25F769
SHA-256:	7DCF8DDDB2B520F6A07468B4B7D22205C2907860848F5CE926C1412F849D66A6
SHA-512:	FD92E913000F6082F3C699F26515AE003B883709EB5725BAD9C2CCE2A34BE4B5EDF0DC062B469EFFA207DB8AF6A7ECAE616D64F7C5C5AB95EDB30272885A7198
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/css/reset.css
Preview:	html, body, div, span, applet, object, iframe,.blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, img, ins, kbd, q, s, samp,.small, strike, strong, sub, sup, tt, var,.b, u, i, center,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td,.article, aside, canvas, details, embed, .figure, figcaption, footer, header, hgroup, .menu, nav, output, ruby, section, summary,.time, mark, audio, video {..margin: 0;..padding: 0;..border: 0;..vertical-align: baseline;.}..a{..color: #505050.}.article, aside, details, figcaption, figure, .footer, header, hgroup, menu, nav, section {..display: block;.}.html{margin: 0 !important}.html, body {. margin: 0;. padding: 0;. height: 100%;.}.body{..color: #505050;..font: 22px/30px Helvetica, Arial, sans-serif;..background-color: #f1f2ed;..padding-bottom: 200px;.}.body.bg {..background-image: url(../images/bg.jpg);..background-repeat: repeat-x;..background-position: 0px 0px;.}..h1 {font-family: Helvetica,

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17335)
Category:	downloaded
Size (bytes):	17336
Entropy (8bit):	5.209069004610379
Encrypted:	false
SSDEEP:	192:RznlqIceqGtYkG8/UrNcn6EWFAXI46Hg5HKYNGdb7GXyolASMmLduCxONXGLBJsU:HBqkG3cI4aWtGdb7wysdunypupF8lklU
MD5:	13BFB39C2A3C27244ADA71A50C793D6F
SHA1:	E517AEFFE236FCDAEE9343E5C1527CA36F1BC28E
SHA-256:	E114E889E78B7142FF6758283264CAAC4EA6637D9083297170B0C6D0989AD27C
SHA-512:	97F5E33B1E68B37A4EC34937DFC5AB6F5B5A8CB5AD3C5F3C50F55796B8858FE2A4E162E45BB5908CECED78436FF1CBE98696740B58F21044971C903F1AEC446E
Malicious:	false
Reputation:	low
URL:	https://cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635
Preview:	!function(){"use strict";function t(t,n){return"function"==typeof t?function(n){return t.bind(n)}:function(t){return n.bind(null,t)}}var n=Array.from\|\|function(t){return Array.prototype.slice.call(t)};var e=t(Array.prototype.includes,r);function r(t,n){return-1!==t.indexOf(n)}var o=t(Array.prototype.find,(function(t,n){for(var e=0;e<t.length;e++)if(n(t[e]))return t[e]}));var i=Object.assign\|\|function(t,n){return Object.keys(n).forEach((function(e){t[e]=n[e]})),t};var c="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function u(t,n){return t(n={exports:{}},n.exports),n.exports}function a(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}var f,d=u((function(t){function n(e){return"function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?(t.exports=n=function(t){return typeof t},t.exports.default=t.exports,t.exports.__esModule=!0):(t.exports=n=functio

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	downloaded
Size (bytes):	7695
Entropy (8bit):	5.086188469939407
Encrypted:	false
SSDEEP:	192:tFzJYsT7tu0Zr7Q7QUZNncrRX0ASslq9MYZYTse:tBpgcr7Z8NIFS0WYTL
MD5:	562AAE9348426470228B1ECAD67DAD13
SHA1:	6A7BB1790C9388AE2592B502BAB0ACEC8EDF29BE
SHA-256:	7F21C8273E165C0152DE21D0D41D8410DBDDE5351A569965897477607B958152
SHA-512:	459EB5CC7B87D5DDDB9B9544888F6E7F0239E04F3D7AA69CB5D58B83639F846D7D3A522D888BED65CAC34181DD7A15DD9229499565EC0AB4215A1B831CD887B1
Malicious:	false
Reputation:	low
URL:	https://track.walk-inbathtubshop.com/d.js
Preview:	var CKM = {..use_iframe: false,..form_selector: "#ckm_form",..submit_selector: ":submit",..init_focus: false,..error_title: "Error",..required_error: "This field is required.",..validation_error: "Please fix all highlighted fields.",..ajax_timeout: 8000,..ajax_error: "An error occurred while saving your information. Please check your internet connection and try again.",..ajax_class: "valid-ajax",..required_class: "valid-required",..valid_class: "valid",..error_class: "error",..default_value_class: "default",..submitting: false,..add_validator: function(id, name, group_names, required){...$(function(){....var el = $(":input[name=" + name + "]", CKM.form_selector);....if (el.size() == 0 && group_names) {.....for (var n in group_names)......$(":input[name=" + group_names[n] + "]", CKM.form_selector).attr("rel", name);.....el = $(":input[rel=" + name + "]", CKM.form_selector);....}....el.data("field_id", id);....if (required) {.....el.addClass(CKM.required_class);.....el.data("error", requ

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	dropped
Size (bytes):	7223
Entropy (8bit):	4.969203628683902
Encrypted:	false
SSDEEP:	96:S2rJjYDSTG/tRo0ssi15rpmZyN5LnThdkC9PSxBQl7jQAjlZwMWAOzRadevBvBMb:VrJ7TiRZs7npQQeKEaq4uyeJCGKNP
MD5:	C5F6513027F4D0359FCD7BD1E7E8C26B
SHA1:	F5AB68300BBE2A6978272F9E09626F170B5A3B97
SHA-256:	D664612936B14C5CAA8092F018CE547CAD1397415BC1D61C1ECC480ACC6F116A
SHA-512:	D6AB4A3E8F7BED4AAACF809D0CBAB981F55F01E59BAF015E7835C36DFEDE4CDDF524C4968C819A251F1A44C00C4B11F2DC00DB471F7F1C236CC8FC26726D9666
Malicious:	false
Reputation:	low
Preview:	/// <reference path="../../../lib/jquery-1.2.6.js" />./..Masked Input plugin for jQuery..Copyright (c) 2007-2009 Josh Bush (digitalbush.com)..Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) ..Version: 1.2.2 (03/09/2009 22:39:06)./.(function($) {..var ie = (function(){... var undef,.. v = 3,.. div = document.createElement('div'),.. all = div.getElementsByTagName('i');... while (.. div.innerHTML = ' [if gt IE ' + (++v) + ']><i></i><![endif]-->',.. all[0].. );... return v > 4 ? v : undef;...}());....var pasteEventName = (ie ? 'paste' : 'input') + ".mask";..var iPhone = (window.orientation != undefined);...$.mask = {...//Predefined character definitions...definitions: {....'9': "[0-9]",....'a': "[A-Za-z]",....'*': "[A-Za-z0-9]"...}..};...$.fn.extend({...//Helper Function for Caret positioning...caret: function(begin, end) {....if (this.length == 0) return;....if (typeof begin == 'number') {...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086)
Category:	downloaded
Size (bytes):	95786
Entropy (8bit):	5.393689635062045
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB
MD5:	8101D596B2B8FA35FE3A634EA342D7C3
SHA1:	D6C1F41972DE07B09BFA63D2E50F9AB41EC372BD
SHA-256:	540BC6DEC1DD4B92EA4D3FB903F69EABF6D919AFD48F4E312B163C28CFF0F441
SHA-512:	9E1634EB02AB6ACDFD95BF6544EEFA278DFDEC21F55E94522DF2C949FB537A8DFEAB6BCFECF69E6C82C7F53A87F864699CE85F0068EE60C56655339927EEBCDB
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/jquery-1.11.1.min.js
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3515
Entropy (8bit):	4.769271631460699
Encrypted:	false
SSDEEP:	96:hfavexihhUuw9LaimPh23qIanLM/ws1vfQ:hfaJhSuwFaiKh23qIanLGv4
MD5:	F383924B4DF21AD2FE7E8882C61BD5CE
SHA1:	465F78B89EAF1A5AAEA70D27DDEF8BD19B72FEE5
SHA-256:	E3AD82A69FAF9EC1B298A080CE5974322A33CC501E1455071CF8DB58C7F2462F
SHA-512:	6A218D87889E8FDA4B1C3AFA1F14BE02828B8E98561B322F62F9C8525E2785D88EB79774BC6176BABE77BB70A332E4CE144A33FE4B03172E23689BE3702416E6
Malicious:	false
Reputation:	low
URL:	https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">.</head>.<body>. <script type="text/javascript">. function init() {. // Retrieve the LeadiD token from this URL's querystring. var token = getQueryVariable('token');.. var apiurl = getQueryVariable('apiurl');. // Check if we have a uuid in cookie jar. var uuidCookie = getCookie('uuid');.. var lck = getQueryVariable('lck');. var lac = getQueryVariable('lac');.. // Check if we have a UUID in local storage. try {. var uuidLocalStorage = 'object' == typeof localStorage && localStorage.getItem('uuid');. } catch(error) {. // Catch security errors in browsers like Chrome that are averse to local storage. // access attempts in the context of an iframe when 3rd party cookies are blocked. var uuidLocalStorage = 0;. }.. var uuid = uuidCookie \|\| uuidLocalStorage;. var method = (+!!uuidLocalStorage * 2) + (+!!uuidCookie);.. var options = {. token: token,. apiurl: apiurl,.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5213
Entropy (8bit):	4.917188037743877
Encrypted:	false
SSDEEP:	96:aI7Abfdho/yqQTtGQiWKoGk04Qe6dxyiiweLtxObe09xQJ4AUO5:T7ADA/yqQxpiWKo7Qe6dxyiiweLtxObo
MD5:	760D6E16E9A8A25484558BB17F088ECA
SHA1:	1EA8F939DD582F101A059B36C917B7FBB3EE5467
SHA-256:	9539DB1913EE43D7E39BA08E4898ADD4E6ED924825ED35A07132B4F18B0E68B2
SHA-512:	D9E16DCCF9076D0CFE158600166E66636D20DDEF3607F7105ABB69016AC29DBAAC49EDCA500754BCACCDB4CF8F3E3EFD5ABA04C419769FB2A14BCDC229926A60
Malicious:	false
Reputation:	low
Preview:	function parseBool(value, defaultValue) {. return (value == 'true' \|\| value == 'false' \|\| value === true \|\| value === false) && JSON.parse(value) \|\| defaultValue;.}..var campaignIds = {. 'default': "6723c0f752e3b38cb5d16a33",.}.var cookieDomain = "walk-inbathtub-shop.com".var cookieDuration = parseInt("90") \|\| 30.var registerViewOncePerSession = parseBool("false", false).var lastPaidClickAttribution = false.var firstClickAttribution = false.var attribution = "lastpaid".var referrer = document.referrer;.if (attribution === 'lastpaid') {. lastPaidClickAttribution = true.} else if (attribution === 'firstclick') {. lastPaidClickAttribution = false. firstClickAttribution = true.} else if (attribution === 'lastclick') {. lastPaidClickAttribution = false. firstClickAttribution = false.}..var ourCookie = getCookie('rtkclickid-store').var rtkClickID;..function removeParam(key, sourceURL) {. var rtn = sourceURL.split("?")[0],. param, params_arr = [],. queryS

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17335)
Category:	dropped
Size (bytes):	17336
Entropy (8bit):	5.209069004610379
Encrypted:	false
SSDEEP:	192:RznlqIceqGtYkG8/UrNcn6EWFAXI46Hg5HKYNGdb7GXyolASMmLduCxONXGLBJsU:HBqkG3cI4aWtGdb7wysdunypupF8lklU
MD5:	13BFB39C2A3C27244ADA71A50C793D6F
SHA1:	E517AEFFE236FCDAEE9343E5C1527CA36F1BC28E
SHA-256:	E114E889E78B7142FF6758283264CAAC4EA6637D9083297170B0C6D0989AD27C
SHA-512:	97F5E33B1E68B37A4EC34937DFC5AB6F5B5A8CB5AD3C5F3C50F55796B8858FE2A4E162E45BB5908CECED78436FF1CBE98696740B58F21044971C903F1AEC446E
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(t,n){return"function"==typeof t?function(n){return t.bind(n)}:function(t){return n.bind(null,t)}}var n=Array.from\|\|function(t){return Array.prototype.slice.call(t)};var e=t(Array.prototype.includes,r);function r(t,n){return-1!==t.indexOf(n)}var o=t(Array.prototype.find,(function(t,n){for(var e=0;e<t.length;e++)if(n(t[e]))return t[e]}));var i=Object.assign\|\|function(t,n){return Object.keys(n).forEach((function(e){t[e]=n[e]})),t};var c="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function u(t,n){return t(n={exports:{}},n.exports),n.exports}function a(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}var f,d=u((function(t){function n(e){return"function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?(t.exports=n=function(t){return typeof t},t.exports.default=t.exports,t.exports.__esModule=!0):(t.exports=n=functio

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16857)
Category:	downloaded
Size (bytes):	18389
Entropy (8bit):	5.009024611747691
Encrypted:	false
SSDEEP:	192:PDYpyiW4aLzBq2pMWNAikIV+4pgjbtrdDLYyB8gB6mBpNPzFhCNBjVs5y6sybYwj:7YpyixaLzBz+4O37L/72fZBhVZqR
MD5:	469D99519642AC6116EF418951CB7CB6
SHA1:	D9F81E5564E2CB83D43DE83D8F7462849BBBDAE9
SHA-256:	61B82A18C9708DBB79B60BB9D559F4280AA2A32A186C89776F2FAE24C215BEAA
SHA-512:	698147834C707C9AE9E15F6D88C349DFBD1C8EAF8787CC5AAF341581004025813209288E1EB1B7670A2C406FC02C381C78C0070D5F240C0DBB983948D19FCF14
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/jquery-ui/jquery-ui.min.css
Preview:	/! jQuery UI - v1.11.2 - 2014-12-24. http://jqueryui.com.* Includes: core.css, button.css, spinner.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHover=454545&bgColorActive=ffffff&bgTextureActive=glass&bgImgOpacityActive=65&borderColorActive=aaaaaa&fcActive=212121&iconColorActive=454545&bgColorHighlight=fbf9ee&bgTextureHighlight=glass&bgImgOpacityHig

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	4.8136327677200565
Encrypted:	false
SSDEEP:	12:TjeRHdHiHZdtklI5rPiCNGlTF5TF5TF5TF5TF5TFK:neRH988lTPTPTPTPTPTc
MD5:	19BD47CCBB05E0D9EC3C0116300204D3
SHA1:	495403F5ABA96F0A4451AD3871E0049153F8CD8A
SHA-256:	9E3DAD9D075C73DC68D76BDFEE5A2400BB8DA07094C1059544B434177A8789F0
SHA-512:	66BB2D5D37CD095ADF9DC6D33DBBF86B89B7149B4BCEC8BE7EC27014C536F436DCD142EFA96E3BB4C5C07570CC9D2D71F2D4669B1F7B8BDA183ED8EC0F2D1A9B
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.10.3 (Ubuntu)</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	112
Entropy (8bit):	4.29216644904513
Encrypted:	false
SSDEEP:	3:HUfovWIVZzAtgM3vWIVKJ8WqovWIVGABFLGl:UyWIYtgMfWIYJHqyWIUkAl
MD5:	82C77158309DEFE0A59893D7DEA092B7
SHA1:	A1A6D1B14B474F45C3D82704A50C084D49B44D58
SHA-256:	8F6118E9696D2E24C88B7B83C8060C147C6FD6EF7750CCFE541169CD0BD205AB
SHA-512:	CA752CE6DE4483B2604B7B647D9098D11E417CC413C40D5F4139785E3F41923706E960F3D7328ED1039945E9A6292227D24B14DCAB3300A03AE4748733227B92
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/style.css
Preview:	@import url(css/fonts.css);..@import url(css/reset.css);..@import url(css/all.css);..@import url(css/media.css);

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	downloaded
Size (bytes):	210092
Entropy (8bit):	5.546455704468075
Encrypted:	false
SSDEEP:	3072:0AwFitgcnsbIjq+D00zmYasxzuZ1IwPcRCrvPlka0Mf3/WfmJVM1:0AwYnsbQQZ1HcRCrKa0Mf3/WN
MD5:	E59C01CC4BD5C1C71F8FA70003DD143F
SHA1:	E03DAEE7773B5600489FB795CEF51A3B0C9102A2
SHA-256:	EC212050D29FC38D56B1CEAF518B5DAA13294D351E942C16803BAF786C96612E
SHA-512:	8CBE7C6E561ED7F9F00A1F3D76E765842A276EA3D1CE5BBEF10A2A1D7BFCA7A103AB44816C5AF1F285D96E3D240EA88DB27C3D282EB5B38E5D2E27C2A83992C6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NDD4B4Z
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"19",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"rtkclickid-store"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__paused","vtp_originalTagType":"html","tag_id":3},{"function":"__paused","vtp_originalTagType":"html","tag_id":5},{"function":"__paused","vtp_originalTagType":"cvt_34034946_7","tag_id":8},{"function":"__paused","vtp_originalTagType":"cvt_34034946_7","tag_id":9},{"function":"__paused","vtp_originalTagType":"html","tag_id":11},{"function":"__paused"

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	292424
Entropy (8bit):	5.589745136908507
Encrypted:	false
SSDEEP:	6144:TsIYnsmQ8o2Z1HcRCriua0Mf3/WrfMuT+bsno:gQm9o27Hc8Amo
MD5:	3E3EBEB88E42C4F2F1547D2C7FF5A755
SHA1:	7CCBE4C74A1AFC273B1FCC752610ADA02D947255
SHA-256:	AB24F09072FEFF3E7426539FFBC6380B6888EA4B5A90014B56CB67FFB36C3AA8
SHA-512:	99A3B1562E80D9429090C78A459236A3DF18082B028D4E36F4C972F2F6E550207D9F272A7853A5B99961DA57E7F0AB2E911D669B69F2C206BEA403D2D0941925
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","walk\\-inbathtubshop\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	101025
Entropy (8bit):	5.670770351006055
Encrypted:	false
SSDEEP:	1536:wCS94LMwitSwx/zVXhqfb0knerh6WFKsiTtVJ:zSS3lwxzVxqgoeV7O
MD5:	6B47EC48CCF715432C4687DA324F1EC0
SHA1:	2A4566822016517C00473656A8ABB6D51C98D371
SHA-256:	F5C43A5144409029904ECD3587DCA2535A6499BDD8384F7C0C366E9AC09560F9
SHA-512:	2F4411BB428A7C7B5407263F134142AF505D3A9F76B8336C54D495DCBC57E68855B608F854964B34007E1647FC76E9494746FF91130E3B0543C4E4DE4FC27311
Malicious:	false
Reputation:	low
URL:	https://cdn.trustedform.com/trustedform-1.9.33.js
Preview:	!function(){"use strict";function n(n,t){return"function"==typeof n?function(t){return n.bind(t)}:function(n){return t.bind(null,n)}}var t=Array.from\|\|function(n){return Array.prototype.slice.call(n)};var r=n(Array.prototype.includes,e);function e(n,t){return-1!==n.indexOf(t)}var i=n(Array.prototype.flatMap,(function(n,t){for(var r=[],e=0;e<n.length;e++)Array.prototype.push.apply(r,t(n[e]));return r}));var o=n(Array.prototype.find,(function(n,t){for(var r=0;r<n.length;r++)if(t(n[r]))return n[r]}));var u=n(String.prototype.includes,e);window.trustedForm\|\|(window.trustedForm={id:1337});var a=window.trustedForm;a.startRecording=function(){return f.disabled.recording?"TrustedForm recording cannot be started once stopped.":(f.disabled.recording=!1,"TrustedForm recording has been started")},a.stopRecording=function(){return f.disabled.recording=!0,"TrustedForm recording has been stopped"},window.trustedFormStartRecording=a.startRecording,window.trustedFormStopRecording=a.stopRecording;var c=

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	123556
Entropy (8bit):	5.433094948124664
Encrypted:	false
SSDEEP:	1536:NaZj1DbP47U0wSD7ZL0OPNw0aMcHDOwNz5Q9oYsBB+KB+5TgelRleKW+2AHPmA1l:CO/c/O80gNSHhmQ
MD5:	F6AC8F2575D07A6A2ED6F85FB2A76A2D
SHA1:	E3C8690814A464913E4C2AC61D43933173A4FD00
SHA-256:	6A88404E9F620490EC73C9471376137BA520B4F16E2A4B35315FE7182E16A38A
SHA-512:	F57F9D56B1B11B62D778FF0A29658571B58E2EF8606A1A218E5ABB7934F3030260C4FEC5C01993FAEC9861DBA7AB51C473020E1BA53A9291E842985BA35A82C9
Malicious:	false
Reputation:	low
URL:	https://create.lidstatic.com/campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2
Preview:	!function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Duplicate Script",LeadiD.LOG_TYPES.INFO,"Dupe check",{href:window.location.href,campaignKey:"2C655333-C8E9-A250-F78D-C5C6738D03D1"});else{LeadiDconfig={apiURL:"//create.leadid.com",cdnURL:"//d2m2wsoho8qq12.cloudfront.net",lac:"1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50",lck:"2C655333-C8E9-A250-F78D-C5C6738D03D1",hashLac:"7e33de6b84bbe2b44ecab8038c17427fee798bed",version:"2.15.1",logLevel:2,logLimit:0,logTargets:2,loggingUrl:"//info.leadid.com/info"},Array.prototype.forEach\|\|(Array.prototype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|\|(Array.proto

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3451
Entropy (8bit):	4.788758732338513
Encrypted:	false
SSDEEP:	96:TrhaS7PjEeABLKclKft+GsMBdLoiNfKvset:3wYxstEbid
MD5:	93C0113850DE7AD4253092B0926069F8
SHA1:	A461A89E51D7B1749B13C68F7DA3FCC65D14C5C5
SHA-256:	3095E09BA06F7850CCDF001F40F944771B93C1C2BF19B194C628ABAB52BE0ED6
SHA-512:	B8C90E64FBCA50CC4711A218DAE438542BFFFB2F40498A7CD8545D15457170AA67851AFD4597B30B760BBC75A4DFF4FF29FE08D3C749BEDE907BE752DEE8AC3B
Malicious:	false
Reputation:	low
Preview:	$.fn.customSelect = function() {.. ...return this.each(function() {........var classes = $(this).attr("class");....classes = classes.split(' ');....// Cache the number of options.. .var $this = $(this), numberOfOptions = $(this).children('option').length;.. .. ..// Hides the select element.. ..$this.addClass('s-hidden');.... .// Wrap the select element in a div.. .$this.wrap('<div class="customSelect"></div>');.. ... ... .// Insert a styled div to sit over the top of the hidden select element.. .$this.after('<div class="styledSelect"></div>');.... .// Cache the styled div.. .var $styledSelect = $this.next('div.styledSelect');.. .if( $.isArray(classes) && classes.length ){.. ..for (var i = 0; i < classes.length; i++) {.. ...if(classes[i] == 'custom') continue;.. ...$styledSelect.addClass(classes[i]);.. ..}.. .}.. .$styledSelect.append('<div class="styledInput"></div>');.. .$styledSelect.append('<div class="styledButton"></div

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 49404, version 1.0
Category:	downloaded
Size (bytes):	49404
Entropy (8bit):	7.992739994051637
Encrypted:	true
SSDEEP:	1536:e0TUIF4+mZUVnGT1AJudgaw/1nknFa2oNjtXXW9y:ZTJ4+bAJAJfaU1nkRottHW4
MD5:	6E14159C380B9D778D71DE533C77D88C
SHA1:	9348964386C4C72D4AE93732CE9DF8793DA2C2E1
SHA-256:	94BCB6F1A43C396CA026BC58A1A8A979DA2E0327BDA0454305CD545FAFF6BAAE
SHA-512:	EDAB755BF7A2A80DAF2651F3611AD0B889E7148A642DE92C8157E166496442AC580A34A4EE0FFE1DBC8D65840C8B55CF7B973046801EF5841E32157E64B3D94B
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/fonts/MyriadPro-Regular.woff
Preview:	wOFFOTTO..........A ........................BASE...D...D...l..)GCFF ...........E..M.FFTM............:.~.GDEF...,...N...`...2GPOS...\|...-..Kd....GSUB...........&..y4OS/2...t...[...`}.?.cmap.......s...,.{.Fhead...D...4...6..M.hhea...x...!...$....hmtx..............e.maxp...,..........P.name...4..........V.post........... ...2x.c`d``..b..>........<..........l....<...6..`d`...a`.....K.(.ad..x....T.I.?..i.....5.9G.`D...AQ.H..0$u0.Z..............l.b.5.......g.w.y..\|.;..j..~.V.u..8....8n4-2....!8`...+..-........."..%.H....!..'.....I'.km..=1..z......#..~ThMa-1..u..`.0K.......c.l)..)...jl=......c9X>v....cw........g-.... ........S..<.....a........T.0~././...].1^........ ...Kt z.}...91..%&...Wb..GD.k...f"..M.&N..D)QA< ........W.w.')RN.!."M.~.59..@.$..^d0.A. ....2.<N.!K...6..\|C~!.......u...g.7Eo..,..z.z.z.zK...B.".V....[..A/Qo.^....4..z.zG.2...n...=.{..Y.'....I.JL$]%=$}%.%......N2N2U2M. .'Y(Y,Y"..I.$...d.$UrX.#).\...<...\|.....@.F.I.S:Hj-.#.".%](UH..J.J.N.U.*M.....^.^.VK.H..

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3454
Entropy (8bit):	5.431770859284335
Encrypted:	false
SSDEEP:	96:vOL/fOLBFZOGOL0xOL+Jc+uKOLVNaOxT/fOxTBFZOGOxT0xOxT+Jc+uKOxTVNE:K/a4z00ukZ/44t0Gu2k
MD5:	D1039B5B551E05D60F4A4641172FA4B2
SHA1:	04268935E2B3EA5825766BF50ED71EAB686454D4
SHA-256:	28BFAFCA8775A2BB48E3B3D64A179C6865052FE39164A62AC48A7A298C944B0D
SHA-512:	3B5D6D6441730EA0DBFFE5A98DE3E7BE6DA273C969F3CD59EC74EC1E9860E1D7EC107646CD5F62E679EFDB5246E692C5318CDD5B43E63DDDD60E4218B1E649B1
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Raleway:400,600"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-family: 'Raleway';. font-style

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1436x725, components 3
Category:	dropped
Size (bytes):	126411
Entropy (8bit):	7.96815787663642
Encrypted:	false
SSDEEP:	3072:mJjwP7ZEtxsSPZCVTlZ7O6BuOkDu+azN3HmyXVUeeBW+Nm:qFt+QmlZ7zBjCtKVURm
MD5:	CD0520B1847678A79D3499BE4A711864
SHA1:	075EEE32119C575FCA76619E52330B47C2B5B693
SHA-256:	849958D4589819622E31905D80FC4DA21506F3635FF12B4031DE2B4E7F8237E1
SHA-512:	E15D33043AB155BA9B0574B4338F6329414265824B881C21AF11CD4EF826A13A795DF24A9D7C557CD97622ECE599067C86E053CDB49B4CDD8C7589FF690BAFD8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d...........................................................................................................................................................................................................................................!1A..Q.a"2.q.B..R#....3.b...r.CS..$..4..c%.s..DU.....................!...1AQ..a"..q2..B.Rb#..r.3............?..........x...j.._....}...wj..0..o........~.........\|cy...X...J1....@.2O;.O.._l}..'.7....j8...L...\|.y..s/.......w.1....I.A.....+.~.c.............t.e.;.e..h.....W..L./g2.xT..>A.Ox.1.}....:...-M.x...>.`..t.2..k..c.........,6..+.S.2.i.n..T&...U<b...L...ghW.".....5.,7...W..6./m....U..;B..d+x.I...l..B..G%.....F...A.dp......n..f..r....0../.QG...yGd}]rL.....C..{5...Db..&i.<~.wFg.......W4.6.Q..Mgi...L6..!.F..[...2a....W"U.X2...&I.8.k@.S..9..%..U....dS.9@.DF..7.8...1...K.C.2VdM.z...........a.y..8Wa....Kh......Pm..0.n$F8.e0.....gT....i.W+.Etq... ......AL.y

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5074
Entropy (8bit):	4.4397748874223755
Encrypted:	false
SSDEEP:	96:xdG5v4PMVkxyM9SLUT7Kf+9/aclLxaal9r6IHHc8+h:x8WUAJnt9n7HPC
MD5:	594C7FA31E788C18FD6BAC62D2824BAC
SHA1:	C719615E4352507E1345EF95716163A7FB015A9C
SHA-256:	4BDEB4E61FFE7D31F1F2413CF6FE0D416B93182110245D01F541AF30560088EF
SHA-512:	655861BB9BDDD277E5A6F3D1553539B5FD900C9EDE5C9D53AA7202D947A307C02804428D55A6D60E7166C75D74AF872D17D3C4CCC1ABA59E87C87C358C7F00DE
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/jquery.ui.touch-punch.js
Preview:	/!. jQuery UI Touch Punch 0.2.3. . Copyright 2011.2014, Dave Furfero. * Dual licensed under the MIT or GPL Version 2 licenses.. . Depends:. * jquery.ui.widget.js. * jquery.ui.mouse.js. /.(function ($) {.. // Detect touch support. $.support.touch = 'ontouchend' in document;.. // Ignore browsers without touch support. if (!$.support.touch) {. return;. }.. var mouseProto = $.ui.mouse.prototype,. _mouseInit = mouseProto._mouseInit,. _mouseDestroy = mouseProto._mouseDestroy,. touchHandled;.. /. Simulate a mouse event based on a corresponding touch event. * @param {Object} event A touch event. * @param {String} simulatedType The corresponding mouse event. */. function simulateMouseEvent (event, simulatedType) {.. // Ignore multi-touch events. if (event.originalEvent.touches.length > 1) {. return;. }.. event.preventDefault();.. var touch = event.originalEvent.changedTouches[0],. simulatedEvent = document.createEven

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	9290
Entropy (8bit):	5.047123500047671
Encrypted:	false
SSDEEP:	192:GZo23dMmOxUZ69xN4W33ZBJXKEIwvVyLrAXu9un27c:GZo23lZ69xN4W3vdjKA+ux
MD5:	FC77AD58D8B1400A26289B01147FD119
SHA1:	682F2F6B546F451147982BE5184CD90D77617E75
SHA-256:	BA0C8A505070A6AFA65A0FA37056C5BD5F61762D6A2BE17128D7A02027177DC1
SHA-512:	1CEFB0D61E1D0CB3FCEBBEA138F2789ABDC63AF3549E8E5A404AC31AD930554B0B750B4D40BF28F3BBEF9EE16F105C9D400373644B40D9BB4F963062AF0AEBB5
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/main.js
Preview:	function MM_openBrWindow(theURL,winName,features) {.//v2.0..window.open(theURL,winName,features);.}.....function isDNCPhoneNumber(phone){..var jqxhr = $.ajax({...url: "/validate.php?phone=" + phone,...dataType: "json",...success: function(data) {. ....console.log(data);.. .jQuery("#phone_warnings").val(data[0]["IsLitigator"]);...}..});.}..function validateAddress(address, postal_code) {. var jqxhr = $.ajax({. url: "/validate_address.php?address=" + address + "&zip_code=" + postal_code,. dataType: "json",. success: function(data) { . jQuery("#address_is_active").val(data["address_is_active"]);. jQuery("#address_is_valid").val(data["address_is_valid"]);. jQuery("#address_diagnostics").val(data["address_diagnostics"]);. . }. });..}...function validatePhone(){..var jqxhr = $.ajax({...url: "/validate_ph.php",...data: $("#ckm_form").serialize(),...dataType: "json",...success: function(data) {. .. .jQuery("#NAS").val(data["identity_risk_score"]);..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	173
Entropy (8bit):	4.946416319716895
Encrypted:	false
SSDEEP:	3:YWR4bqINVK7RM1KgObjWUiA6ISd5QB+kBVDUAaGHmJmFOMBHmdiA6ISdHXGA/Y:YWybqI4q1KLbiHISY+kjRmJqUIISI
MD5:	10B93E265B22336FD5E37EA50844340B
SHA1:	C65D1B3EED1CFF89042B02769F7180FBFA55184B
SHA-256:	5F4421F06471B085D74729F62D177F27A254F60B8960B69FEED4693623D1DD28
SHA-512:	E2276927AF76B62B8DD3F50FC37307AAF1B912DA7A2106902AA4B99FE01CF1A55DC22BBE3F4C98C37EA0C9A55392337B428551320B760787CCB0E08295201A4F
Malicious:	false
Reputation:	low
Preview:	{"status":1,"url":"https://walk-inbathtub-shop.com/?rtkcid=675f8374e7b0b8d486306878\u0026rtkcmpid=6723c0f752e3b38cb5d16a33","clickid":"675f8374e7b0b8d486306878","rsocid":""}

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	572
Entropy (8bit):	4.779882290909824
Encrypted:	false
SSDEEP:	12:F48sFRO48stW6wO48s6Hz8O48snO48sWbO48sWr48skLdhpG:FKeKt9jKqzPKOKWiKWrKkA
MD5:	5C908D09E090EB3E22E7A5761EFF5AB5
SHA1:	73AA759BB4EBBACE58B19FE14DFC8706209554AF
SHA-256:	D2C93B6A44E0FDE5D68205E7637F74FC634D9F76A22742098E147249216109E8
SHA-512:	438FFC10A07539530360645D9154F3302C364668E1A622CD07FAEEAC96D8DF38316ABA13C1D374FDFA31BF5187DC93091E9715FA5B7F08556D2D710FA1142B66
Malicious:	false
Reputation:	low
Preview:	CKM.add_validator(3,'first_name',null,'Valid input for this field is required');..CKM.add_validator(4,'last_name',null,'Valid input for this field is required');..CKM.add_validator(5,'address',null,'Valid input for this field is required');..CKM.add_validator(8,'zip_code',null,'Valid input for this field is required');..CKM.add_validator(9,'email_address',null,'Valid input for this field is required');..CKM.add_validator(9,'email_address',null,null);..CKM.add_validator(11,'phone_home',null,'Valid input for this field is required');..//No QueryString Parameters Found

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	downloaded
Size (bytes):	572
Entropy (8bit):	4.779882290909824
Encrypted:	false
SSDEEP:	12:F48sFRO48stW6wO48s6Hz8O48snO48sWbO48sWr48skLdhpG:FKeKt9jKqzPKOKWiKWrKkA
MD5:	5C908D09E090EB3E22E7A5761EFF5AB5
SHA1:	73AA759BB4EBBACE58B19FE14DFC8706209554AF
SHA-256:	D2C93B6A44E0FDE5D68205E7637F74FC634D9F76A22742098E147249216109E8
SHA-512:	438FFC10A07539530360645D9154F3302C364668E1A622CD07FAEEAC96D8DF38316ABA13C1D374FDFA31BF5187DC93091E9715FA5B7F08556D2D710FA1142B66
Malicious:	false
Reputation:	low
URL:	https://track.walk-inbathtubshop.com/js.ashx?o=992&_=1734312808006
Preview:	CKM.add_validator(3,'first_name',null,'Valid input for this field is required');..CKM.add_validator(4,'last_name',null,'Valid input for this field is required');..CKM.add_validator(5,'address',null,'Valid input for this field is required');..CKM.add_validator(8,'zip_code',null,'Valid input for this field is required');..CKM.add_validator(9,'email_address',null,'Valid input for this field is required');..CKM.add_validator(9,'email_address',null,null);..CKM.add_validator(11,'phone_home',null,'Valid input for this field is required');..//No QueryString Parameters Found

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 638 x 111, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28476
Entropy (8bit):	7.984805459803778
Encrypted:	false
SSDEEP:	768:sObjF8MXo5QLzvgcNH4gcACMNUcpInlpV5gtWPjtJe:TbuOP/9Hbfxgp56W7W
MD5:	D4D0C7D519B32A336958B12A4D787ABA
SHA1:	604173E4C33E49E119AB92CA7E576340F0FD2A19
SHA-256:	B9668627DEB43B895537C7C2458FE82BBDCAE6DFA2B8FE499A53D5617F33DF1D
SHA-512:	8825EDFF3A1E53A47EC62EFB1E917225BECAAD8A5643C2B2C39641D9A6156F409B5C626C0C843A0050D1571D10132DE099821C6B5E19683DE0F39FD5E117EA2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...o.....r..w....tEXtSoftware.Adobe ImageReadyq.e<..n.IDATx..].\|.G...!F.H..`A..S.J).R..R....B[.C...x..wI....ww.\|.6oa...%GH`.......y....Q....x.'.x.'.xz.I....x.'.x.'.....O<...O<...?.x.'.x.'.x...O<...O<.....x.'.x.'.xzs....[I...urhK...C{...Q.g.!W.[.\|<.,^TE.\E...<q...3J,...Z...B^..C.T.g...<5s.'.y.A..R..o..X...J.xN..Z...f).....p...s....a#G...E..5.h..H.\...=j...,{.a.....u.8>..:..<...~..H...U........U.1k...:.0.....xj,.. /j.K{.........{...V.[.Zk...#5.. ^.\|_...F.e3....S.l.cc.+)))...ut.\|.i.....2rU02.e.....M......y...p..~@..\|}\|,N.<9FEY9.[O...4....Vf......C....:...#ujjj../........544......;`.o.7.t.v.>'..o.n..G..m&._....@u..g..>....3ZUU.......@.9.;.=PF..o.6....%9.....^.#..ar%.Tk..x...N.l..1>~0...Kzo......u..,2..."tw...U.I.....[...mK.{..D..^+....+s..qE..Rf..O.<...wM.*...^..-(s.qhJ..~...x...S.A6{](...37j...u.L.S.]...@....3......).....o....<.^PP..d...>q....K266.4...^.i..i#..Z....BBV..AG.1z...1Sb./\j>.....v......

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1144)
Category:	downloaded
Size (bytes):	23322
Entropy (8bit):	4.710965414565257
Encrypted:	false
SSDEEP:	384:jibArruqMwoHHzzNPD7Uer9eA2/4JwdHho2rw1djdyKrwubXw93OWi9otDwg4wka:mbA/JonBD7pr9eA2/ZoUyfZNG9
MD5:	284F4E1968499C67F4E2B8220730C275
SHA1:	2EEE8C8AFDA2D12D5AADD8EF9E7D2D4A6054724F
SHA-256:	275988180CC5A8DCE36DC9630721A3F2EEA9BEE928CF3C98D0C100C06045EA29
SHA-512:	8A9919B4F2FADCF1AA5029958AFA4A6CE445D6D6AD44E4827E376F04C9252E101D641BBC328CF33FDFD97D86A61CFE7D7BC0285F0AC7F0DDA5A5924216A4F2CB
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483
Preview:	<!DOCTYPE html>.<html>.<head> .. Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NDD4B4Z');</script>.. End Google Tag Manager -->.... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-NC10B79WFD"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());... gtag('config', 'G-NC10B79WFD');..</script>.. ..<meta charset="utf-8">..<title>Walk-in Bathtub Shop</title>..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<link rel="stylesheet" type="text/css" href="js/jq

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1002)
Category:	dropped
Size (bytes):	520714
Entropy (8bit):	5.069793318308826
Encrypted:	false
SSDEEP:	12288:1vemHFgymzYDdHCcmM2/W/CCeS/QRzbrVDDdRO2:vDdHCcmM2/W/CCeSIVDDdRO2
MD5:	AB5284DE5E3D221E53647FD348E5644B
SHA1:	75C20ACDC6CBC6334FE2B918AB7AFEEC007F969E
SHA-256:	4F455EB2DDF2094EE969F470F6BFAC7ADB4C057E8990A374E9DA819E943C777D
SHA-512:	2462ACC237C0063263B52527CFECBC5D4063065C0CD541CD966D9924DEC0D9AF475184F732C92AF9269CB08DF993896893EFF37AD4B18598CA4B7AF7B5F02742
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sortabl

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2995
Entropy (8bit):	5.115632180669845
Encrypted:	false
SSDEEP:	48:Sp9kRgHupzyJkwOkdQxvaPgnTGVvGnaDDe2SAAl7/ignTQJBSu:Sp6fFy6OdKQT7W8iu
MD5:	821443428BA096BDE9629EDAAF441102
SHA1:	43BE78D02E8AD4818BBF8AB14773619FDFA20FF6
SHA-256:	C7EB724C44AC547FD3F30147EF3430F008A0DFD5E5B391E4CFA32007432B2556
SHA-512:	CCB8E2CA90180290FE0FC4A73A4BCC7802ED85175684A7F1EB155FB41F5EBE310E9B58D208F49E00438A8348BFF258F0836F9874E6BB65092D93D7A30E9603F5
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/css/media.css
Preview:	@media(max-width: 1050px){...left_block{...width: auto;...margin-right: 20px;...margin-left: 20px;...float: none;...text-align: center;...padding:10px;..}....left_block ul{...text-align: left;..}....right_block{...margin: 0;...text-align: center;..}....inner_left_block{...float: none;...display: inline-block;..}....back{...bottom: 30px;..}. .logo_wrapper img {width:60%;}.}...@media(max-width: 760px){..#header_phone {...float:none;...padding:10px;...text-align:center;...background-color:#EEE;..}...}...@media(max-width: 531px){..h1 {font-size:1em;line-height:1.2;}..h2 {font-size:1em;line-height:1.2;}..h3 {font-size:1em;line-height:1.2;}...logo_wrapper {float:none;margin:5px auto 0px auto;text-align:center;padding-left:0px;}...phone_wrapper {float:none;margin:5px auto 0px auto;text-align:center;}..#vendor_phone {text-align:center;margin-right:auto;}...logo_wrap {margin:0px auto 20px auto;text-align:center;}...logo_wrapper img {width:384px;height:60px;}...icon_wrapper img {..text-align:

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3451
Entropy (8bit):	4.788758732338513
Encrypted:	false
SSDEEP:	96:TrhaS7PjEeABLKclKft+GsMBdLoiNfKvset:3wYxstEbid
MD5:	93C0113850DE7AD4253092B0926069F8
SHA1:	A461A89E51D7B1749B13C68F7DA3FCC65D14C5C5
SHA-256:	3095E09BA06F7850CCDF001F40F944771B93C1C2BF19B194C628ABAB52BE0ED6
SHA-512:	B8C90E64FBCA50CC4711A218DAE438542BFFFB2F40498A7CD8545D15457170AA67851AFD4597B30B760BBC75A4DFF4FF29FE08D3C749BEDE907BE752DEE8AC3B
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/js/form_custom.js
Preview:	$.fn.customSelect = function() {.. ...return this.each(function() {........var classes = $(this).attr("class");....classes = classes.split(' ');....// Cache the number of options.. .var $this = $(this), numberOfOptions = $(this).children('option').length;.. .. ..// Hides the select element.. ..$this.addClass('s-hidden');.... .// Wrap the select element in a div.. .$this.wrap('<div class="customSelect"></div>');.. ... ... .// Insert a styled div to sit over the top of the hidden select element.. .$this.after('<div class="styledSelect"></div>');.... .// Cache the styled div.. .var $styledSelect = $this.next('div.styledSelect');.. .if( $.isArray(classes) && classes.length ){.. ..for (var i = 0; i < classes.length; i++) {.. ...if(classes[i] == 'custom') continue;.. ...$styledSelect.addClass(classes[i]);.. ..}.. .}.. .$styledSelect.append('<div class="styledInput"></div>');.. .$styledSelect.append('<div class="styledButton"></div

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48336, version 1.0
Category:	downloaded
Size (bytes):	48336
Entropy (8bit):	7.995815173088384
Encrypted:	true
SSDEEP:	768:aHPbHlNlYMCZibwJi/6WwetfISUeR/nQipVg2Ddz9fZIMiktaFm5x4KSz0h1wO:0DyMYibQi1fI7exQvW9RIMTim56KSz0z
MD5:	BFE7AD4AA54CFF8909B2D7632073CC30
SHA1:	7C2E625BEA4D449CA78CDE09AB59DC6C9CB4726F
SHA-256:	47D477915FA5912616E2DC5DF8C5780F9202671678CF275472BD39F3381C0098
SHA-512:	B083C9E0766F281A39F582404F08B3D3314C7757AC151C4CB00BD3CECEB4FA06B12D08D881A2C6BF80A066ECAD22FECE7CFF41269D2DBD2BFE38D873922A31FF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2...................S..........................g...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[3mq..c..5.Hu..ev.5.c.L6e....<.>U..#0l..h.........F.m........."...,V...\.i....;zG-....%..Nt.j....l..m.p.`=....%...}^B).I.Q..qt.l..l...i.......9~....P.".tj.._?.P.j...B.r...'...Zh...}......M].+......k].!..E<.{.........."........m...$C.."_i.>.i@.=.#......s...........%...;."...U.....n,...DO.W.n..85.._.Bj9..nN.T.xl.U".Xq^...y.......<.2'.... .`...WCT.W........?{wI.!.B..C..B.$..Zh..0/ b.....P.(X..?..._Pi.4;`y....gi.j.Zu=.8......>...{U..K..X.P.hN......=.....C..,............f.eE.l...e.Y...K.Xf.u.%f...k...+"V.Y"W.bD.........~.[.~QL.z2.......V.Bd..j.D...]...X.5d........){....G~Q.x....{.{.=\.5.h...DB...H]V'.....<...sD....=D(.......^.&M.2....M(iH.8<........p\d.Wo.....@..A....U..M..K...z".%....n...k.T/a..d(..5s1..P..K..i.]l..+.......ZK7H\D.N...].kL.......^.^...K)(r.J.W..L2Y...?..`.......&.%....{?T.:P9.\%..E*....H....`....r....Q.....Rw....T..}....M

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	123556
Entropy (8bit):	5.433094948124664
Encrypted:	false
SSDEEP:	1536:NaZj1DbP47U0wSD7ZL0OPNw0aMcHDOwNz5Q9oYsBB+KB+5TgelRleKW+2AHPmA1l:CO/c/O80gNSHhmQ
MD5:	F6AC8F2575D07A6A2ED6F85FB2A76A2D
SHA1:	E3C8690814A464913E4C2AC61D43933173A4FD00
SHA-256:	6A88404E9F620490EC73C9471376137BA520B4F16E2A4B35315FE7182E16A38A
SHA-512:	F57F9D56B1B11B62D778FF0A29658571B58E2EF8606A1A218E5ABB7934F3030260C4FEC5C01993FAEC9861DBA7AB51C473020E1BA53A9291E842985BA35A82C9
Malicious:	false
Reputation:	low
Preview:	!function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Duplicate Script",LeadiD.LOG_TYPES.INFO,"Dupe check",{href:window.location.href,campaignKey:"2C655333-C8E9-A250-F78D-C5C6738D03D1"});else{LeadiDconfig={apiURL:"//create.leadid.com",cdnURL:"//d2m2wsoho8qq12.cloudfront.net",lac:"1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50",lck:"2C655333-C8E9-A250-F78D-C5C6738D03D1",hashLac:"7e33de6b84bbe2b44ecab8038c17427fee798bed",version:"2.15.1",logLevel:2,logLimit:0,logTargets:2,loggingUrl:"//info.leadid.com/info"},Array.prototype.forEach\|\|(Array.prototype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|\|(Array.proto

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	dropped
Size (bytes):	9290
Entropy (8bit):	5.047123500047671
Encrypted:	false
SSDEEP:	192:GZo23dMmOxUZ69xN4W33ZBJXKEIwvVyLrAXu9un27c:GZo23lZ69xN4W3vdjKA+ux
MD5:	FC77AD58D8B1400A26289B01147FD119
SHA1:	682F2F6B546F451147982BE5184CD90D77617E75
SHA-256:	BA0C8A505070A6AFA65A0FA37056C5BD5F61762D6A2BE17128D7A02027177DC1
SHA-512:	1CEFB0D61E1D0CB3FCEBBEA138F2789ABDC63AF3549E8E5A404AC31AD930554B0B750B4D40BF28F3BBEF9EE16F105C9D400373644B40D9BB4F963062AF0AEBB5
Malicious:	false
Reputation:	low
Preview:	function MM_openBrWindow(theURL,winName,features) {.//v2.0..window.open(theURL,winName,features);.}.....function isDNCPhoneNumber(phone){..var jqxhr = $.ajax({...url: "/validate.php?phone=" + phone,...dataType: "json",...success: function(data) {. ....console.log(data);.. .jQuery("#phone_warnings").val(data[0]["IsLitigator"]);...}..});.}..function validateAddress(address, postal_code) {. var jqxhr = $.ajax({. url: "/validate_address.php?address=" + address + "&zip_code=" + postal_code,. dataType: "json",. success: function(data) { . jQuery("#address_is_active").val(data["address_is_active"]);. jQuery("#address_is_valid").val(data["address_is_valid"]);. jQuery("#address_diagnostics").val(data["address_diagnostics"]);. . }. });..}...function validatePhone(){..var jqxhr = $.ajax({...url: "/validate_ph.php",...data: $("#ckm_form").serialize(),...dataType: "json",...success: function(data) {. .. .jQuery("#NAS").val(data["identity_risk_score"]);..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24035)
Category:	dropped
Size (bytes):	24224
Entropy (8bit):	5.102463310155566
Encrypted:	false
SSDEEP:	384:0ZDvxTZeiMEdBqHhfpx9TmH4mSZQOrBWxZoFOZKWUnJx690HC:CFM1r+urB/ZdpHC
MD5:	934A602EFF918B6F44CA15C6FEBED244
SHA1:	B9B7FC06AA1743A5F70FF768BD43661E38DE9DF9
SHA-256:	54930D3F142BC3542CEFAAE1BF3FE5EFFB3F4CB91EE08E358129019D4089CFDF
SHA-512:	FD3678F406077E30B829FD3762CA3075EEE0947F5ED3F05687C8ACFA49072F9747BF54E28C97B8E74EA7FB354F34C364210C9594BB317AE10E700E34DEDB3F07
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.11.2 - 2014-12-24. http://jqueryui.com.* Includes: core.js, widget.js, button.js, spinner.js.* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var a,n,o,r=t.nodeName.toLowerCase();return"area"===r?(a=t.parentNode,n=a.name,t.href&&n&&"map"===a.nodeName.toLowerCase()?(o=e("img[usemap='#"+n+"']")[0],!!o&&i(o)):!1):(/input\|select\|textarea\|button\|object/.test(r)?!t.disabled:"a"===r?t.href\|\|s:s)&&i(t)}function i(t){return e.expr.filters.visible(t)&&!e(t).parents().addBack().filter(function(){return"hidden"===e.css(this,"visibility")}).length}function s(e){return function(){var t=this.element.val();e.apply(this,arguments),this._refresh(),t!==this.element.val()&&this._trigger("change")}}e.ui=e.ui\|\|{},e.extend(e.ui,{version:"1.11.2",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5213
Entropy (8bit):	4.917188037743877
Encrypted:	false
SSDEEP:	96:aI7Abfdho/yqQTtGQiWKoGk04Qe6dxyiiweLtxObe09xQJ4AUO5:T7ADA/yqQxpiWKo7Qe6dxyiiweLtxObo
MD5:	760D6E16E9A8A25484558BB17F088ECA
SHA1:	1EA8F939DD582F101A059B36C917B7FBB3EE5467
SHA-256:	9539DB1913EE43D7E39BA08E4898ADD4E6ED924825ED35A07132B4F18B0E68B2
SHA-512:	D9E16DCCF9076D0CFE158600166E66636D20DDEF3607F7105ABB69016AC29DBAAC49EDCA500754BCACCDB4CF8F3E3EFD5ABA04C419769FB2A14BCDC229926A60
Malicious:	false
Reputation:	low
URL:	https://red.walk-inbathtub-shop.com/uniclick.js?attribution=lastpaid&cookiedomain=walk-inbathtub-shop.com&cookieduration=90&defaultcampaignid=6723c0f752e3b38cb5d16a33&regviewonce=false
Preview:	function parseBool(value, defaultValue) {. return (value == 'true' \|\| value == 'false' \|\| value === true \|\| value === false) && JSON.parse(value) \|\| defaultValue;.}..var campaignIds = {. 'default': "6723c0f752e3b38cb5d16a33",.}.var cookieDomain = "walk-inbathtub-shop.com".var cookieDuration = parseInt("90") \|\| 30.var registerViewOncePerSession = parseBool("false", false).var lastPaidClickAttribution = false.var firstClickAttribution = false.var attribution = "lastpaid".var referrer = document.referrer;.if (attribution === 'lastpaid') {. lastPaidClickAttribution = true.} else if (attribution === 'firstclick') {. lastPaidClickAttribution = false. firstClickAttribution = true.} else if (attribution === 'lastclick') {. lastPaidClickAttribution = false. firstClickAttribution = false.}..var ourCookie = getCookie('rtkclickid-store').var rtkClickID;..function removeParam(key, sourceURL) {. var rtn = sourceURL.split("?")[0],. param, params_arr = [],. queryS

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	dropped
Size (bytes):	7695
Entropy (8bit):	5.086188469939407
Encrypted:	false
SSDEEP:	192:tFzJYsT7tu0Zr7Q7QUZNncrRX0ASslq9MYZYTse:tBpgcr7Z8NIFS0WYTL
MD5:	562AAE9348426470228B1ECAD67DAD13
SHA1:	6A7BB1790C9388AE2592B502BAB0ACEC8EDF29BE
SHA-256:	7F21C8273E165C0152DE21D0D41D8410DBDDE5351A569965897477607B958152
SHA-512:	459EB5CC7B87D5DDDB9B9544888F6E7F0239E04F3D7AA69CB5D58B83639F846D7D3A522D888BED65CAC34181DD7A15DD9229499565EC0AB4215A1B831CD887B1
Malicious:	false
Reputation:	low
Preview:	var CKM = {..use_iframe: false,..form_selector: "#ckm_form",..submit_selector: ":submit",..init_focus: false,..error_title: "Error",..required_error: "This field is required.",..validation_error: "Please fix all highlighted fields.",..ajax_timeout: 8000,..ajax_error: "An error occurred while saving your information. Please check your internet connection and try again.",..ajax_class: "valid-ajax",..required_class: "valid-required",..valid_class: "valid",..error_class: "error",..default_value_class: "default",..submitting: false,..add_validator: function(id, name, group_names, required){...$(function(){....var el = $(":input[name=" + name + "]", CKM.form_selector);....if (el.size() == 0 && group_names) {.....for (var n in group_names)......$(":input[name=" + group_names[n] + "]", CKM.form_selector).attr("rel", name);.....el = $(":input[rel=" + name + "]", CKM.form_selector);....}....el.data("field_id", id);....if (required) {.....el.addClass(CKM.required_class);.....el.data("error", requ

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4556)
Category:	downloaded
Size (bytes):	4750
Entropy (8bit):	5.392465070546338
Encrypted:	false
SSDEEP:	96:HWVD6rirE9YKdPrZGMJKogRUNBLjn70JW0qaVm6et8EdsLol6n:HWxE+KF91J2y76X0+0l6n
MD5:	EA58C407F351379702E1F7136CD573D8
SHA1:	118E2FA125B12F0B9BB553408FD6395ADA46640C
SHA-256:	586D09447A4D5650FD7EB1C33E5C88C0252A73C000140087F3943792411CF2D2
SHA-512:	3F55861D1EDF603C3150936F2B7D066EADE399C50E21717598477A3CD29900611C25490E452CC28E072BAC3EFFF06A5C6EDE9FFD286C701934541E8D59D37632
Malicious:	false
Reputation:	low
URL:	https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>. <script>var Utilities;function init(){const t=Utilities.getCookie("uuid"),e=Utilities.getLocalStorage("uuid"),i=parseInt(Utilities.getQueryString("method"),10),n=Utilities.determineMethod(!!t,!!e),o=Utilities.getQueryString("uuid")\|\|t\|\|e,r=!!Utilities.getQueryString("debug");r&&(console.log(`Arguments passed in:\n QueryString[uuid]: ${Utilities.getQueryString("uuid")}\n QueryString[method]: ${i}\n QueryString[lac] : ${Utilities.getQueryString("lac")}\n QueryString[lck] : ${Utilities.getQueryString("lck")}\n QueryString[token] : ${Utilities.getQueryString("token")}\n QueryString[apiurl] : ${Utilities.getQueryString("apiurl")}\n `),console.log(`Local State Prior To Run:\n Cookies[uuid]: ${t}\n LocalStorage[uuid]: ${e}\n PreStorageMethod: ${n}\n `),console.log(`Resolved UUID: ${o}`));const l=o\|\|Utilities.createUUID();Utilities.s

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 52600, version 2.62
Category:	downloaded
Size (bytes):	52600
Entropy (8bit):	7.991689959645081
Encrypted:	true
SSDEEP:	1536:4Na6ZviTd/j58sLdw5k66g1cpt8/rEiRXK22:TNzv5c2Mr2
MD5:	0C5E65DF81B6EC8D8D7051E1F23D60A3
SHA1:	6F371F5214FF25A4386CD88C5D9E70D74A7C54C9
SHA-256:	C06FA975C6B7A33C4CE5FDA6016173E0197748FB9AFFDD82E28FFCA17857D529
SHA-512:	37BA6CD9F71C6F2EDE01C5910AE347989DB460B933070F5E16AE608663464775485D58C40632DF9C2A58F3C4E99256F0DC64B0F415B88D2F59C3D2F75AC45F7E
Malicious:	false
Reputation:	low
URL:	https://walk-inbathtubshop.com/fonts/MyriadPro-Bold.woff
Preview:	wOFF.......x.......t...>....................BASE.......J....d.].FFTM...\........c.V.GDEF.......F...N....GPOS.......?..Q....GSUB...L............OS/2.......Y...`_M..cmap...h...P....x.Z.gasp................glyf...D...5.. .....head...l...6...6.Q.3hhea.......!...$....hmtx...D...!...>.'i.loca............I"..maxp........... ...Iname...\|........{.Upost.......s...1.jd........c..._.<..........u^......u^..]..................x.c`d``z.....+.....,/..".....h.....x.c`d``.`pc`g..& f.B...0....t...x.c`f.`...........................,.LL,..L.@yF.(ptqreP`P.....?.............0-.R...........x...[l.E....P.t.e..Zv...m.T.PZ.E.^P.%$.Q.$..1&b.^0&Hb.Oh...!.(...x.F.....<..h4.%....;....Y.....7s...$....o....yQ..^..f....C.e.$.l....s..Ai0c.n..3M...>..@3.....A...6..e....e...ge.."Q.B.....>\&=...E........v.t.@z.bi..Y.\|....o...].]/..i.".r..{.7....8.....1.Xbv).\|.]...X.fH.."...i..%..6N{.t..2..Y...;a.f7......a..yY..8q.@..s.J..5.......v..V..6i1....5..p.........f.T.....pG.....9..u#.VPf6r.C

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 491 x 105, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16897
Entropy (8bit):	7.971868923512247
Encrypted:	false
SSDEEP:	384:CYlWnv8XyUsxZaB2ooeuDz8zqD0pJB010ZMSis6/6EdN0fUGcFPY:3WnBvnaB2ooj0V0jHp0EFg
MD5:	6AD1F24BBCE3F25CA7418BE7757CC7BA
SHA1:	2A6B739663A18F030061893483D6183445C577C7
SHA-256:	98CE848AF4143DFBCA9EBB95AF70D2E81A51B8991A963674E8353CF612585407
SHA-512:	9753703C3BE44EDFC416C13556FFBD005B4DA49026A39E2A9914C3D8F5494F538BA166EC0F7E436C13DF2BB64369AA790B680F219A47036EBF0CADB3B0E39698
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......i.............tEXtSoftware.Adobe ImageReadyq.e<..A.IDATx...\|TU...{.3......& EVDQA..X+..].u.+.......k[....E.^."H.B(IHHBH/.L.7...y.>f..)...}>.3..+..W...{..!........:.D^.\\\\\\..\\\\\\\..\\\\\\..\\\\\\\..\\\\\\\..\\\\\\'........N.....mI.g.u9.F.............q.....@g.p.....p..u..x...G.].MW.....%...O.G._.E....1z0..@.'}!&5.bz.....A....%... y..G...C7t.(.@&6z.t..E..@h!..-.S...@34..U.0..Z.t.....iy......".UE#..O....-.L..\\\\\.A!.u....q.........q....$.e.@.....0.^H...WT.#PeYm8`n..ABj....K%..!n..!.........y.3.(..5.....W.y/."......P.y!.....+.]:j-S6[.ueA.1.U....)./..!-2H.$^...)....#.....}....Lu.xS!1'fA..;DQ.....\..k......(AE....Da<.j.c+f..x...Q.....S..dA....+...^>a.ktf.y!.........Y..`.........P.o...."=...._...r~n....T...n......2j... &...1.=.,..~..m..<.1.W.#.+..V.t...E`...OX.BK+C...-..U..s ............X.5. .;y.5.5.....u.a..bj..n..r...W..t...I...&.9..w......I...XWn....\|..............J.}...!'.711.h.O\|......W.$B....../`....w...V.Ff..EK....\|.SpJ....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	292424
Entropy (8bit):	5.58981832607667
Encrypted:	false
SSDEEP:	6144:TsIYnsmQ8oiZ1HcRCriua0Mf3/WrfMuT+bsno:gQm9oi7Hc8Amo
MD5:	F8BEC276BC84F301B22CE637CF08F508
SHA1:	E553219B1259D77F25473FA872CE266DCB237E0B
SHA-256:	D02AFC03B479ECBDD7DF5BA8835223865B0F2935A93E3D5C61DC4AF9D95AC0FC
SHA-512:	9DC5EC1DA0014D7A8D970E883AE7D69DD4A7880FD216E3B9327AB2BB39F1D6C3EEE5592487A6F960D236162DEC27138E055717C1062EA3D94D4C23C78E4C33CD
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-NC10B79WFD
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","walk\\-inbathtubshop\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-16T02:33:43.657440+0100	2823606	ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016	1	45.223.19.68	443	192.168.2.4	49842	TCP
2024-12-16T02:33:45.911870+0100	2823606	ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016	1	45.223.19.68	443	192.168.2.4	49846	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 02:33:00.012087107 CET	49675	443	192.168.2.4	173.222.162.32
Dec 16, 2024 02:33:04.510035992 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:04.510112047 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:04.510248899 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:04.510431051 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:04.510448933 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:06.176467896 CET	49739	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:06.177292109 CET	49740	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:06.221235037 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:06.221455097 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:06.221498013 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:06.223176003 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:06.223268032 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:06.224165916 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:06.224258900 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:06.278386116 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:06.278403044 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:06.296545982 CET	80	49739	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:06.296633005 CET	49739	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:06.296789885 CET	49739	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:06.297065020 CET	80	49740	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:06.297281027 CET	49740	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:06.324063063 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:06.416579008 CET	80	49739	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:07.517160892 CET	80	49739	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:07.565311909 CET	49739	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:07.846688032 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:07.846771955 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:07.846879959 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:07.847223043 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:07.847260952 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.101941109 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.102456093 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.102484941 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.104134083 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.104274988 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108310938 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108310938 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108311892 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108520031 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108611107 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.108629942 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.108762980 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108839989 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.108850002 CET	443	49742	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:09.108925104 CET	49742	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.109102964 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:09.109127998 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.335411072 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.335722923 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.335781097 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.337433100 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.337513924 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.338886023 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.338984013 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.339164019 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.339181900 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.391206980 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.831964970 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.832292080 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:10.832474947 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.832892895 CET	49743	443	192.168.2.4	172.67.196.220
Dec 16, 2024 02:33:10.832931995 CET	443	49743	172.67.196.220	192.168.2.4
Dec 16, 2024 02:33:11.221504927 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:11.221549034 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:11.221616983 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:11.221992016 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:11.222012043 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.523108006 CET	80	49739	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:12.523242950 CET	49739	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:12.622263908 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.622795105 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:12.622858047 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.624521971 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.624624014 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:12.627599001 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:12.627599955 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:12.627686977 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.627753973 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.670747995 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:12.670808077 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:12.715157986 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.122210979 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:13.122379065 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:13.122927904 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.122927904 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.122997046 CET	443	49744	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:13.124648094 CET	49739	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:13.124779940 CET	49744	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.125137091 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.125180960 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:13.125288963 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.125551939 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:13.125569105 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:13.244365931 CET	80	49739	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:14.485717058 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:14.485976934 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:14.485992908 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:14.487459898 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:14.487817049 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:14.487903118 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:14.488132000 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:14.535329103 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:15.086075068 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:15.086313009 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:15.086365938 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:15.086726904 CET	49745	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:15.086752892 CET	443	49745	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:15.468744993 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:15.468832970 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:15.468921900 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:15.469142914 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:15.469167948 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:15.946727991 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:15.946873903 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:15.947010040 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:16.408027887 CET	49723	80	192.168.2.4	199.232.214.172
Dec 16, 2024 02:33:16.500703096 CET	49737	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:33:16.500775099 CET	443	49737	172.217.19.228	192.168.2.4
Dec 16, 2024 02:33:16.528522015 CET	80	49723	199.232.214.172	192.168.2.4
Dec 16, 2024 02:33:16.528675079 CET	49723	80	192.168.2.4	199.232.214.172
Dec 16, 2024 02:33:16.830878973 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:16.831299067 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:16.831387997 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:16.832953930 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:16.833152056 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:16.834289074 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:16.834367990 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:16.834394932 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:16.834420919 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:16.886437893 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:16.886497974 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:16.932991028 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:17.488703966 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:17.488827944 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:17.488953114 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:17.489398956 CET	49748	443	192.168.2.4	44.226.223.11
Dec 16, 2024 02:33:17.489444017 CET	443	49748	44.226.223.11	192.168.2.4
Dec 16, 2024 02:33:18.048175097 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:18.048219919 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:18.048300982 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:18.048511982 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:18.048532963 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.432085037 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.432338953 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.432363033 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.434004068 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.434094906 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.435434103 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.435518026 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.435728073 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.435735941 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.480731010 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.953119040 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.953288078 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.953439951 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.953526974 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.953538895 CET	443	49751	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.953550100 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.953600883 CET	49751	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.955332041 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.955418110 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:19.955512047 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.955714941 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:19.955739975 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:21.450578928 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:21.451016903 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:21.451081991 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:21.452224970 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:21.452646971 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:21.452646971 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:21.452749968 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:21.452898026 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:21.497931004 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:22.122549057 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:22.122720957 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:22.122961998 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:22.123049974 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:22.123049974 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:22.123095036 CET	443	49753	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:22.123174906 CET	49753	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:22.349169970 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:22.349253893 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:22.349332094 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:22.349549055 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:22.349581003 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.091468096 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.091878891 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.091942072 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.093622923 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.093735933 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.094626904 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.094728947 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.094818115 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.094835997 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.138001919 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.598025084 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.598086119 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.598108053 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.598150015 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.598222017 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.598432064 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.598432064 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.598432064 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.598504066 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.598587036 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.661498070 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.661571980 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.661648989 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.661997080 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.662014961 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.664992094 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.665079117 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.665230989 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.666096926 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.666141033 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.670449018 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.670461893 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.670537949 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.670861959 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.670885086 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.670958042 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.671403885 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:24.671502113 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:24.671581030 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:24.671749115 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.671776056 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.671838999 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.671917915 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.671928883 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.672600985 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.672627926 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.672864914 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:24.672903061 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:24.673157930 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.673178911 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.682638884 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.682816982 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.682908058 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.682909012 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.683242083 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.683279037 CET	443	49755	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.683303118 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.683350086 CET	49755	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.683607101 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.683618069 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.683680058 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.687011003 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:24.687027931 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:24.833800077 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:24.833915949 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:24.833991051 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:24.834047079 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:24.834131002 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:24.834220886 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:24.836117029 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:24.836158991 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:24.836229086 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:24.836260080 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.052094936 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.052333117 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.052351952 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.052499056 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.052659988 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.052717924 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.053498983 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.053761959 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.053874016 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.053881884 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.053950071 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.054270983 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.054512978 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.054586887 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.054963112 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.055258989 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.055392981 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.055401087 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.058965921 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.059083939 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.060003042 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.060111046 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.060116053 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.060178041 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.077785015 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.082371950 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.082437992 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.083153963 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.083492994 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.083596945 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.083628893 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.092984915 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.093280077 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.093343019 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.095923901 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.096041918 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.096127033 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.096160889 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.096227884 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.096240997 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.097100019 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.097177029 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.097424984 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.097546101 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.097559929 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.097609043 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.099217892 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.099284887 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.099536896 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.099618912 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.099631071 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.099807978 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.099874020 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.100106955 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.100229025 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.100235939 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.100272894 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.100590944 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.100744963 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.100807905 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.102449894 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.102526903 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.103288889 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.103391886 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.103421926 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.105257034 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.105429888 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.105490923 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.107152939 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.107223988 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.107366085 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.107366085 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.107373953 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.107382059 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.107996941 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.108102083 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.108146906 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.123408079 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.123428106 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.138675928 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.138736963 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.143357038 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.147423983 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.153903008 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.153915882 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.153914928 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.153919935 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.153925896 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.153939009 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.153943062 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.153944969 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.153975010 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.185620070 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.201694965 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.201694965 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.201718092 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.201864004 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.551919937 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.552100897 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.552174091 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.552715063 CET	49757	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.552756071 CET	443	49757	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.553091049 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.553169966 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.553240061 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.553563118 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.553606987 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.605830908 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.607033014 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.607080936 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.607110023 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.607208014 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.607208967 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.607244015 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.607259989 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.607336044 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.608516932 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.615061045 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.623661041 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.623833895 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.623897076 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.632018089 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.632088900 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.632152081 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.656383991 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.673012972 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.673059940 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.673224926 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.673230886 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.673270941 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.674088001 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674148083 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674166918 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674185991 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674197912 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.674211025 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674232960 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.674364090 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674418926 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.674432993 CET	49763	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.674441099 CET	443	49763	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674803972 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.674891949 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.674969912 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.675528049 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.675606012 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.678144932 CET	49761	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.678148985 CET	443	49761	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.678401947 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.678442955 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.678505898 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.679060936 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.679085970 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.687284946 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.687364101 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.699487925 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.699552059 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.699623108 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.699666023 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.699714899 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.707506895 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.707583904 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.707598925 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.707653046 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.707676888 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.707722902 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.707813978 CET	49760	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.707842112 CET	443	49760	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.728413105 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728439093 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728456020 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728497982 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728507042 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.728533983 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728548050 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.728562117 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728566885 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.728586912 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.728593111 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.728635073 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.733383894 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.733447075 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.745219946 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745280981 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745301008 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745318890 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745347023 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.745357990 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745373964 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745376110 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.745404005 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745429993 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.745438099 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.745452881 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.748388052 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748440981 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748460054 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748483896 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748493910 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.748509884 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748522043 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.748549938 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748570919 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748586893 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748599052 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.748605967 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.748626947 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.749068975 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.749124050 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.749130964 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.749226093 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.749269962 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.750288010 CET	49756	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.750303984 CET	443	49756	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.750571012 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.750653982 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.750729084 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.751852989 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.751894951 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.782033920 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.798105001 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.798702955 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.799469948 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.799500942 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.799547911 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.799549103 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.799568892 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.799588919 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.799597979 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.799618959 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.799627066 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.799642086 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.799666882 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.802793026 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.802865982 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.802928925 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.809509993 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.809591055 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.809611082 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.818006039 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.818070889 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.818106890 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.819284916 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.819310904 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.819380045 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.819427013 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.819510937 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.819578886 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.819591999 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.819601059 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.819720984 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.819745064 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.826395035 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.826468945 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.826484919 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.843153000 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.843251944 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.843251944 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.843333960 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.843395948 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.845706940 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.845743895 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.845801115 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.845848083 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.846144915 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.846213102 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.851491928 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.851752043 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.851809978 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.851960897 CET	49766	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.851991892 CET	443	49766	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.863773108 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.863806009 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.863821030 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.863838911 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.863864899 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.863873959 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.864067078 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.864067078 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.864067078 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.864142895 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.864223003 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.865186930 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.865274906 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.865366936 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.865519047 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:26.865551949 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:26.892920017 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.892998934 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.893140078 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.893140078 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.893287897 CET	49759	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.893325090 CET	443	49759	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.893508911 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.893563032 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.893589973 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.893610954 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:26.893650055 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.893671036 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:26.893673897 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.893758059 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.893831968 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.894377947 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.894490957 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.897095919 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.897136927 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.897202015 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.897355080 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.897375107 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.952195883 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.952225924 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.952275991 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.952398062 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.952398062 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.952410936 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.952461958 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.995740891 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.995801926 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.995834112 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.995842934 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:26.995872974 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:26.995897055 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.009746075 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.009798050 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.009851933 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.009919882 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.009987116 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.009987116 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.023056030 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.023116112 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.023147106 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.023154020 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.023188114 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.023207903 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.043427944 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.043515921 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.043565989 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.043582916 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.043612957 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.043634892 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.044439077 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.044513941 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.044522047 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.044574022 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.044600964 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.044647932 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.044962883 CET	49758	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.044974089 CET	443	49758	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.045277119 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.045334101 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.045393944 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.045923948 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.045965910 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.048336983 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.048420906 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.048501968 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.048682928 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.048717976 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.072144985 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.072191954 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.072254896 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.072290897 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.072323084 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.072345972 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.118113041 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.118205070 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.118273020 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.118292093 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.118321896 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.118344069 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.199618101 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.199681997 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.199780941 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.199822903 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.199853897 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.199903011 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.220208883 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.220252037 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.220303059 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.220319033 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.220347881 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.220371008 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.239373922 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.239418030 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.239487886 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.239507914 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.239532948 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.239571095 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.250037909 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.250082016 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.250133038 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.250145912 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.250174999 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.250197887 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.263083935 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.263125896 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.263178110 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.263190031 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.263216019 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.263237000 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.273721933 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.273765087 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.273821115 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.273833990 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.273859978 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.273881912 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.285865068 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.285906076 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.285979033 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.286006927 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.286034107 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.286051989 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.384197950 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.384246111 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.384329081 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.384346962 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.384396076 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.384396076 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.390311003 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.390404940 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.390419006 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.390471935 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.400293112 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.400341034 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.400389910 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.400413990 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.400439024 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.400466919 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.409039021 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.409080029 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.409142971 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.409171104 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.409202099 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.409219980 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.418023109 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.418066978 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.418145895 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.418159008 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.418188095 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.418205976 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.419843912 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.425949097 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.425992966 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.426042080 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.426054001 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.426080942 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.426117897 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.434463024 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.434559107 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.434568882 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.434591055 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.434623957 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.434648991 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.470216036 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.470266104 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.470372915 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.470388889 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.470432043 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.470432043 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.576608896 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.576656103 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.576704025 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.576726913 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.576756954 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.576781034 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.584402084 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.584445000 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.584486961 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.584500074 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.584532022 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.584553003 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.591103077 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.591120958 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.591170073 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.591182947 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.591218948 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.591238976 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.598915100 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.598959923 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.598994017 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.599005938 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.599035025 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.599065065 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.606527090 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.606570005 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.606602907 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.606616974 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.606669903 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.606671095 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.613782883 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.613828897 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.613868952 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.613881111 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.613915920 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.613915920 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.621555090 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.621598959 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.621623993 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.621635914 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.621670008 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.621689081 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.662338018 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.662379980 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.662421942 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.662435055 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.662482023 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.662482023 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.768666029 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.768718958 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.768749952 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.768764973 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.768795967 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.768816948 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.775991917 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.776036024 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.776061058 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.776072979 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.776098967 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.776115894 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.777020931 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.777085066 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.777096987 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.777204037 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.777254105 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.778342962 CET	49765	443	192.168.2.4	151.101.194.137
Dec 16, 2024 02:33:27.778373003 CET	443	49765	151.101.194.137	192.168.2.4
Dec 16, 2024 02:33:27.901859045 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.902663946 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.902710915 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.903858900 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.904196978 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.904301882 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:27.904381037 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:27.927989960 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:27.928096056 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:27.928170919 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:27.928353071 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:27.928386927 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:27.947843075 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.038366079 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.038599014 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.038661003 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.039874077 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.040242910 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.040354013 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.040368080 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.040426970 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.040492058 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.040658951 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.040690899 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.044289112 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.044373989 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.044691086 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.044797897 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.044809103 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.044863939 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.089209080 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.089206934 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.089226007 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.138096094 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.138422966 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.138485909 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.138645887 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.142117023 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.142360926 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.142534971 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.142728090 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.142786026 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.164633036 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.164830923 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.164863110 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.166712046 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.166883945 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.166896105 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.168334961 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.168452024 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.168740034 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.168828964 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.168828964 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.168858051 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.168924093 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.169143915 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.169333935 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.171514988 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.171539068 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.183368921 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.185071945 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.185101986 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.211348057 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.215717077 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.215735912 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.215850115 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.231389046 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.231976032 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.232177973 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.232207060 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.233618975 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.233681917 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.233963013 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.234045029 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.234057903 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.252526045 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.252896070 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.252959013 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.254415989 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.254556894 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.254739046 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.254829884 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.254838943 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.257309914 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.257484913 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.257546902 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.259126902 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.259191036 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.259413004 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.259497881 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.259502888 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.262065887 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.278167009 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.278183937 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.295413017 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.303358078 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.309159040 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.309159994 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.309180021 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.309218884 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.324816942 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.356601954 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.356614113 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.396816969 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.397027016 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.397058964 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.398876905 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.399045944 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.399086952 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.400784969 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.400854111 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.401128054 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.401164055 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.401232004 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.401305914 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.401379108 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.401437998 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.401842117 CET	49768	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.401875019 CET	443	49768	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.402694941 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.402772903 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.403295994 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.403508902 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.403578997 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.403594017 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.451046944 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.451163054 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.451224089 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.502203941 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.541528940 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.541580915 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.541745901 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.541776896 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.541939020 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.542113066 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.542169094 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.542188883 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.542253971 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.542253971 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.542323112 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.542356968 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.542406082 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.543020010 CET	49769	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.543083906 CET	443	49769	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.545574903 CET	49770	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.545613050 CET	443	49770	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.640003920 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.640117884 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.640280008 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.640295029 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.640362024 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.640984058 CET	49771	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.641038895 CET	443	49771	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.671643019 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.671719074 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.671739101 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.671871901 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.671924114 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.671976089 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.671976089 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.671976089 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.672338009 CET	49773	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.672377110 CET	443	49773	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.672952890 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.672981977 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.673032999 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.673044920 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.673059940 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.673085928 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.673118114 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.674521923 CET	49772	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.674535036 CET	443	49772	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.759094000 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.759146929 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.759169102 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.759337902 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.759337902 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.759337902 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.759426117 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.759943962 CET	49775	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.759980917 CET	443	49775	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.764769077 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.764796972 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.764856100 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.765053988 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.765067101 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.765486002 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.765516043 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.765577078 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.765762091 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.765777111 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.769268036 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.769351006 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.769423962 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.769618988 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.769655943 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.784706116 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.784773111 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.784792900 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.784930944 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.784950018 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.785059929 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.785059929 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.785059929 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.785808086 CET	49774	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:28.785842896 CET	443	49774	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:28.899895906 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.899919987 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.899986029 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.900103092 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.900103092 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.901040077 CET	49777	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.901056051 CET	443	49777	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.927870989 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.927953005 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.928088903 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.928316116 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.928350925 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.942922115 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.942934990 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.943008900 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.943486929 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.943502903 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.952904940 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.952938080 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.952949047 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.952972889 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.952981949 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.952991009 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.953022957 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.953099966 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.953139067 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.953171015 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.953217030 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.982137918 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.982352018 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:28.982450008 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.982450962 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.982736111 CET	49776	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:28.982765913 CET	443	49776	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088390112 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088449955 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088469028 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088489056 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088526011 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088545084 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088649988 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.088649988 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.088649988 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.088649988 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.088687897 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088706017 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.088738918 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.137423038 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.143107891 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.143132925 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.143172979 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.143191099 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.143205881 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.143244028 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.143275976 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.143296957 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.148210049 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.160696030 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.160765886 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.164343119 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.164443016 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.164776087 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.164901018 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.164953947 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.204446077 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.204507113 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.251509905 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.294676065 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.294701099 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.294743061 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.294851065 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.294884920 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.294917107 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.294926882 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.325603008 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.325650930 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.325700998 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.325762033 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.325861931 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.325861931 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.355288982 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.355351925 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.355480909 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.355482101 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.355545998 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.355600119 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.378004074 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.378051043 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.378109932 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.378177881 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.378221035 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.378242970 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.378299952 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.378566980 CET	49778	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:29.378595114 CET	443	49778	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:29.450531960 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:29.450602055 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:29.450694084 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:29.450872898 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:29.450907946 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:29.477726936 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:29.477760077 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:29.477828979 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:29.477997065 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:29.478013992 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:29.582233906 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.582492113 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.582597017 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.582648993 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.582683086 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.582710981 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.582734108 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.590724945 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.590792894 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.590840101 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.599519014 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.599587917 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.599632025 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.607657909 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.607747078 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.607768059 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.651524067 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.651603937 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.699419975 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.702379942 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.746603012 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.775124073 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.778630018 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.778758049 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.778832912 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.786472082 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.786654949 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.786720991 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.794069052 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.794135094 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.794151068 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.802062035 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.802131891 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.802145958 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.809655905 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.809726954 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.809741020 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.824737072 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.824816942 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.824918985 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.824935913 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.824997902 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.832530975 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.840074062 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.840158939 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.840291023 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.840306997 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.840573072 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.846270084 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.869287968 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.869362116 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.869359970 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.869406939 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.869468927 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.967125893 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.969286919 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.969377995 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.969386101 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.969439030 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.969494104 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.974092960 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.978710890 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.978775978 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.978790998 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.983216047 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.983278036 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.983289957 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.987672091 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.987731934 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.987745047 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.992382050 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:29.992445946 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:29.992458105 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024363041 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024386883 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024430990 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024444103 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.024451971 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024470091 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024483919 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.024502039 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024502993 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.024519920 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.024519920 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.024550915 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.056359053 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.056404114 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.056447983 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.056479931 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.056507111 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.109457016 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.109647989 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.109661102 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.109848976 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.110750914 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.111049891 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.111148119 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.111150980 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.111213923 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.113723040 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.113895893 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.113933086 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.115051985 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.115351915 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.115394115 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.115533113 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.115741968 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.115912914 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.115935087 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.117053986 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.117300034 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.117371082 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.117376089 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.117470026 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.156047106 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.156056881 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.161180973 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.161201000 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.161240101 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.161258936 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.161266088 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.161293983 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.161319971 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.161360025 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.161377907 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.172107935 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.184129000 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.184175968 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.184220076 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.184238911 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.184266090 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.184283972 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.205051899 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.205095053 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.205142021 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.205157042 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.205185890 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.205204010 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.219306946 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.219362020 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.219393015 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.219404936 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.219432116 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.219453096 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.231761932 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.231801033 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.231838942 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.231851101 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.231878996 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.231916904 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.244438887 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.244481087 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.244522095 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.244543076 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.244589090 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.244609118 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.256798983 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.256838083 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.256886959 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.256899118 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.256922960 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.256952047 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.273149967 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.273384094 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.273447037 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.274610043 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.274914026 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.275016069 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.275126934 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.287707090 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.288016081 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.288084030 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.289757013 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.289832115 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.290246964 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.290247917 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.290333033 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.290416956 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.323333979 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.338701963 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.338762045 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.357719898 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.357774019 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.357816935 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.357840061 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.357866049 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.357887030 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.367295027 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.367353916 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.367372990 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.367386103 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.367418051 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.367444038 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.377418041 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.377459049 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.377509117 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.377521992 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.377552032 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.377578020 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.384736061 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.386686087 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.386727095 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.386770964 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.386784077 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.386817932 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.386837959 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.395287037 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.395348072 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.395380974 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.395392895 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.395420074 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.395440102 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.404387951 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.404427052 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.404472113 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.404484034 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.404531956 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.404531956 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.412267923 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.412307978 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.412348032 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.412359953 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.412389040 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.412410021 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.447648048 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.447690964 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.447741985 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.447761059 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.447897911 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.447899103 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.549787045 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.549837112 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.549875975 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.549891949 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.549921989 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.549941063 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.556674004 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.556716919 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.556766987 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.556777954 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.556813955 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.556835890 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.564448118 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.564488888 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.564524889 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.564537048 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.564568996 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.564585924 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.572359085 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.572401047 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.572437048 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.572448969 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.572479963 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.572501898 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.579653025 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.579695940 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.579721928 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.579735041 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.579761028 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.579780102 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.587563992 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.587605953 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.587635040 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.587646008 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.587673903 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.587694883 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.594470024 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.594510078 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.594547987 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.594559908 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.594585896 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.594607115 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.613704920 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.613766909 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.613810062 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.613825083 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.613890886 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.613933086 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.613936901 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.613989115 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.614381075 CET	49785	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.614408970 CET	443	49785	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.639555931 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.639605999 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.639633894 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.639656067 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.639695883 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.639695883 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.744177103 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.744218111 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.744267941 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.744292021 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.744316101 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.744343042 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.750622034 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.750665903 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.750699043 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.750710964 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.750740051 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.750760078 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.756845951 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.756916046 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.756942987 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.756985903 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.757025003 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.757121086 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.757184982 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.757275105 CET	49780	443	192.168.2.4	151.101.66.137
Dec 16, 2024 02:33:30.757302999 CET	443	49780	151.101.66.137	192.168.2.4
Dec 16, 2024 02:33:30.772762060 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.772805929 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.772865057 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.772892952 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.772918940 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.772969007 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.773727894 CET	49787	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.773744106 CET	443	49787	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800777912 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800839901 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800860882 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800911903 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.800926924 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800956964 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800976992 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.800976992 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.800995111 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.801027060 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.812593937 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812655926 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812678099 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812695980 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812704086 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.812731028 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812745094 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.812745094 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.812751055 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812783957 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812800884 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.812812090 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.812828064 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.850194931 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.850256920 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.850263119 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.850285053 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.850303888 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.850318909 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.850414038 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.850457907 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.853681087 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.853729010 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.853744984 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.853754044 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.853780985 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.853791952 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.856959105 CET	49784	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.856973886 CET	443	49784	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.867110014 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.867135048 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.867192030 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.867414951 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.867438078 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.981898069 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.981925011 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.981935978 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.981976986 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.981987000 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.982027054 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.982053995 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.982101917 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.982136011 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.982136965 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.982136965 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.982136965 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.982148886 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.982223034 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.985935926 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.985994101 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.986282110 CET	49788	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.986310005 CET	443	49788	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.993273020 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.993323088 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.993397951 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.993637085 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.993669033 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.999341965 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.999397039 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.999413967 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.999424934 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:30.999448061 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:30.999469995 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.003067017 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.003288984 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.003304958 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.004890919 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.004955053 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.005737066 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.005830050 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.005911112 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.005925894 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.027611971 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.027658939 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.027674913 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.027682066 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.027719975 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.027731895 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.057881117 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.057924032 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.057950020 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.057960033 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.057986975 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.058095932 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.058938026 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.112252951 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.112298965 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.112312078 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.112318039 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.112341881 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.112355947 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.199568033 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.199611902 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.199629068 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.199641943 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.199673891 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.199682951 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.204380035 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:31.204597950 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:31.204658031 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:31.206753969 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:31.206814051 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:31.207865000 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:31.207961082 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:31.208000898 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:31.214824915 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.214880943 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.214890003 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.214909077 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.214929104 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.215050936 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.215096951 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.215526104 CET	49783	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.215539932 CET	443	49783	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.220436096 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:31.220489025 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:31.220604897 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:31.220837116 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:31.220868111 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:31.227829933 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:31.227927923 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:31.227989912 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:31.228208065 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:31.228234053 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:31.228718996 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.228756905 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.228815079 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.229221106 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.229301929 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.229362965 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.229545116 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.229583979 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.229695082 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.229727030 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.255126953 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:31.255145073 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:31.264501095 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.264523983 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.264595985 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.264750004 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:31.264775991 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:31.300592899 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:31.324471951 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:31.324498892 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:31.324565887 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:31.324733019 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:31.324759007 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:31.572289944 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572324991 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572343111 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572357893 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572375059 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572401047 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572514057 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.572514057 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.572514057 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.572582960 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.572702885 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.572702885 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.731935024 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.731951952 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.732039928 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.732074022 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.732132912 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.790483952 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.790529013 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.790606976 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.790607929 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.790673018 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.791115046 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.901880980 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.901925087 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.902118921 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.902120113 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.902184963 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.902924061 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.920068979 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.920183897 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.920247078 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.925930023 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.926009893 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:31.926177979 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.930529118 CET	49790	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:31.930591106 CET	443	49790	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:32.082945108 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:32.082974911 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:32.083058119 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:32.083245993 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:32.083255053 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:32.210582972 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.212656021 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.212692022 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.213841915 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.216861963 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.217041016 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.217192888 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.259413958 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.262625933 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.262708902 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.262819052 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.262845039 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.262900114 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.262924910 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.262985945 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:32.262985945 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:32.262985945 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:32.262986898 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:32.263057947 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.263132095 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.264417887 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:32.264451027 CET	443	49791	18.66.161.21	192.168.2.4
Dec 16, 2024 02:33:32.264477015 CET	49791	443	192.168.2.4	18.66.161.21
Dec 16, 2024 02:33:32.265717030 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.340125084 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.367055893 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.367120028 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.368352890 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.369108915 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.369277954 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.369549990 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.411783934 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.454138041 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:32.507775068 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:32.572659969 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.577236891 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.596729994 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:32.609651089 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.614901066 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.630603075 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.646056890 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:32.653233051 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.749044895 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:32.749074936 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:32.751874924 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:32.753004074 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:32.753043890 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:32.753159046 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:32.755129099 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.755146027 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.755306959 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:32.755337954 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:32.755880117 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.755937099 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.756129026 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.756146908 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.756679058 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:32.756747007 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:32.756748915 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.756833076 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:32.756901026 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:32.757121086 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.757257938 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:32.757280111 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:32.757337093 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:32.757848978 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:32.757864952 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:32.758374929 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:32.758402109 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:32.758460999 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:32.758466005 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.758538008 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.759613991 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:32.759711027 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:32.759901047 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:32.759911060 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:32.759918928 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:32.759965897 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:32.759994030 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:32.760452986 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:32.760643959 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:32.761656046 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.761755943 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.761909962 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:32.761945009 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:32.762136936 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.762219906 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.762279034 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:32.762304068 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:32.762394905 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:32.762414932 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:32.762895107 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.763060093 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.764178991 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:32.764290094 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:32.764436007 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:32.764451027 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:32.764784098 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:32.764805079 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:32.764883995 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:32.765096903 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.765136003 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.765186071 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.765199900 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.765244007 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:32.765255928 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:32.802428961 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:32.802495003 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:32.802557945 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:32.803122044 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:32.803150892 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:32.807375908 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.807377100 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:32.807378054 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.812455893 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:32.812547922 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:32.813183069 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.911576986 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911631107 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911652088 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911683083 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.911700010 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911715031 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911725998 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.911736012 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.911741018 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911761045 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911791086 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.911801100 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.911813974 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.948777914 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.948832989 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.948846102 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.948857069 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.948890924 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.948900938 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.948977947 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:32.949023962 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.949687958 CET	49792	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:32.949698925 CET	443	49792	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033139944 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033210993 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033230066 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033247948 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033293962 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033283949 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.033312082 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033334970 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.033338070 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.033354998 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.033385038 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.033385038 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.036890984 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.036945105 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.036974907 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.037030935 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.037086010 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.037163019 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.037195921 CET	443	49793	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.037221909 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.037250042 CET	49793	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.093373060 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.093503952 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.093581915 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.093596935 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.093647003 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.093725920 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.093744993 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.093848944 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.093897104 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.093909979 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.101342916 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.101413965 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.101427078 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.109802961 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.109880924 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.109899998 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.151751041 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.179280043 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:33.179521084 CET	443	49799	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:33.179784060 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:33.179785013 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:33.179785013 CET	49799	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:33.213013887 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.226979971 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:33.227173090 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:33.227271080 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:33.227574110 CET	49794	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:33.227612972 CET	443	49794	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:33.235352039 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:33.235415936 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:33.235512018 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:33.235729933 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:33.235758066 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:33.260301113 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.310596943 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.314471960 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.314547062 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.314583063 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.317374945 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:33.317419052 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:33.317501068 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:33.317689896 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:33.317711115 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:33.320924997 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.320991039 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.321007967 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.328870058 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.328943014 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.328957081 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.340173006 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.340208054 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.340218067 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.340240955 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.340301991 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.340306044 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.340379953 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.340418100 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.340418100 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.340445042 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.341268063 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.341301918 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.341319084 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.341344118 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.341372013 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.341428995 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.341478109 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.341521978 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.341521978 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.341558933 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.342190027 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342255116 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342274904 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342317104 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342334986 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342354059 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342457056 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.342457056 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.342457056 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.342457056 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.342535973 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342570066 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.342613935 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.344635963 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.344702959 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.344716072 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.352654934 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.352756023 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.352767944 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.360639095 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.360727072 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.360739946 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.368662119 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.368776083 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.368794918 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.368827105 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.368887901 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.376765013 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.384793997 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.384876966 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.384888887 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.392704964 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.392803907 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.392858982 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.392931938 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.392972946 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.394280910 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.394314051 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.394362926 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.394383907 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.394412041 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.394438982 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.395653963 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.395704031 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.395735979 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.395752907 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.395783901 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.395826101 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.414557934 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:33.414597988 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:33.414660931 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:33.414853096 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:33.414870977 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:33.427851915 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.427865982 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.443646908 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.448122978 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:33.448333979 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:33.448344946 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:33.451868057 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:33.451946974 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:33.452256918 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:33.452368021 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:33.452421904 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:33.475646973 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.502646923 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.505314112 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.505374908 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.505388021 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.506614923 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:33.506623030 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:33.511446953 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.511507988 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.511524916 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.517118931 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.517189980 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.517201900 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.522531033 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.522607088 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.522619009 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.538250923 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.538321972 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.538372993 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.538387060 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.539167881 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.539191961 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.539232016 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.539249897 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.539396048 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.539396048 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.539396048 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.539397001 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.539470911 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.539527893 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.540630102 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.540659904 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.540889978 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.540890932 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.540955067 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.541017056 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.541398048 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.541440964 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.541470051 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.541501045 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.541524887 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.541547060 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.541559935 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.541690111 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.541743040 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.542233944 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.542233944 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.542265892 CET	443	49797	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.542318106 CET	49797	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.543633938 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.543708086 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.543725014 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.543776035 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.545566082 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.545648098 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.545653105 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.545696974 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.545790911 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.545825005 CET	443	49796	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.545850992 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.545874119 CET	49796	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.549130917 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.550837040 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:33.559271097 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.559351921 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.559366941 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.559418917 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.564614058 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.564635992 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.564709902 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.567703009 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.567749023 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.567840099 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.567904949 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.567975998 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.567975998 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.574966908 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.574985027 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.575027943 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.575057983 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.585393906 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.585469961 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.590728998 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.590816021 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.598681927 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.598726034 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.598896980 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.598896980 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.598965883 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.599020004 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.601335049 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.601391077 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.611690998 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.611756086 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.652224064 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.652297974 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.652452946 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.652452946 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.652518988 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.652837992 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.694689035 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.694762945 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.700053930 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.700115919 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.704900980 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.704978943 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.713449955 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.713542938 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.721394062 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.721607924 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.725172997 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.725246906 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.732573986 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.732645988 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.732662916 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.732731104 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.732750893 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.732840061 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.732899904 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.732961893 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.732961893 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.732995987 CET	443	49795	104.22.39.182	192.168.2.4
Dec 16, 2024 02:33:33.733058929 CET	49795	443	192.168.2.4	104.22.39.182
Dec 16, 2024 02:33:33.736723900 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.736752987 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.736926079 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.736926079 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.736990929 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.737107992 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.749589920 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.749654055 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.749694109 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.749804020 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.749804974 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.765516043 CET	49798	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:33.765583992 CET	443	49798	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:33.877012968 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:33.877057076 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:33.877130032 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:33.877418041 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:33.877471924 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:34.028506041 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028569937 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028590918 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028625965 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.028647900 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028673887 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.028683901 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028693914 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028716087 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.028723001 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.028743982 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.028768063 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.075434923 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:34.075469017 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:34.075545073 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:34.075774908 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:34.075795889 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:34.156800985 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.157016993 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.157063961 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.158528090 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.158606052 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.159049988 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.159136057 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.159231901 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.159336090 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.159373045 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.193638086 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.193664074 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.193715096 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.193727016 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.193737984 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.193788052 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.213731050 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.238612890 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.238634109 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.238687038 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.238692999 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.238742113 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.357412100 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.357465029 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.357520103 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.357530117 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.357558012 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.357585907 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.375029087 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.375127077 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.375133038 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.375181913 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.375186920 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.375279903 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.375402927 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.375411034 CET	443	49800	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.375425100 CET	49800	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.488682985 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.490751982 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.490783930 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.492238045 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.492309093 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.492630005 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.492728949 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.492736101 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.496543884 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.496751070 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.496809959 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.498336077 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.498413086 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.498696089 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.498780966 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.510699987 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.511044025 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.511305094 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.511322975 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.511580944 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.511610985 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.514929056 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.515014887 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.515059948 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.515136957 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.516079903 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.516197920 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.516298056 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.516360998 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.516381025 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.516463995 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.516474009 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.535378933 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.546633959 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.546643019 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.546642065 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.546674967 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:34.561916113 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.562169075 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.562227964 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.592122078 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.592236996 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:34.606251955 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:34.606456995 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:34.606491089 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:34.607271910 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:34.607322931 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.607939005 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:34.608027935 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:34.608141899 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:34.651352882 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:34.787004948 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.787345886 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.787942886 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.788245916 CET	49806	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.788278103 CET	443	49806	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.790947914 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.791032076 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.791275978 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.791426897 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.791464090 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.811033010 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.811085939 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.811194897 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.811830997 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:34.811860085 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:34.960489035 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.960724115 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:34.963480949 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.965584040 CET	49804	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:34.965601921 CET	443	49804	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:35.011217117 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.013370991 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.013385057 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.015029907 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.015119076 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.019995928 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.020097971 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.020176888 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.020184994 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.042725086 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.043937922 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.043945074 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.045507908 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.045581102 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.058475971 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.058687925 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.059089899 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.059102058 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.063007116 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.086675882 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.099570990 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.099633932 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.101150036 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.101258039 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.110631943 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.165441036 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165525913 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165545940 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165597916 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.165600061 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165621996 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165637016 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.165641069 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165652990 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.165673018 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.165683031 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.165699959 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.165803909 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.167741060 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.169413090 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.169496059 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.169734001 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.170268059 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:35.170355082 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:35.170881987 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:35.171248913 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:35.171359062 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:35.171828032 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:35.172007084 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:35.173007965 CET	49805	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:33:35.173037052 CET	443	49805	18.66.161.129	192.168.2.4
Dec 16, 2024 02:33:35.173037052 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:35.175720930 CET	49807	443	192.168.2.4	159.65.98.5
Dec 16, 2024 02:33:35.175766945 CET	443	49807	159.65.98.5	192.168.2.4
Dec 16, 2024 02:33:35.212606907 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.212666035 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.257769108 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.494162083 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.508744001 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.508763075 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.510401011 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.510478020 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.514472008 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.514715910 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.514825106 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.514833927 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.534446001 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.534499884 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.534533024 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.534574986 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.534584999 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.534651041 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.534714937 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.534740925 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.536700964 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.536717892 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.545620918 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.548696995 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.548711061 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.559483051 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.590924025 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.590986013 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.636842012 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.654331923 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.663904905 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.684930086 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.684962988 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.685023069 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.685039043 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.685081959 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.702516079 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.702578068 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.714070082 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.714118004 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.714139938 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.714143038 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.714171886 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.714200020 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.714229107 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.714236975 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.714323044 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.714375019 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.714643002 CET	49809	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.714658976 CET	443	49809	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.730305910 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.730396986 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.730405092 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.730433941 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.730484009 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.736717939 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.745014906 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.745079994 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.745098114 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.748210907 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.748302937 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.748395920 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.748811007 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.748842955 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.753283024 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.753346920 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.753361940 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.761396885 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.761460066 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.761473894 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.769597054 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.769664049 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.769684076 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.785768032 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.785871983 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.785943985 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.786010981 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.786097050 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.793925047 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.800970078 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.801049948 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.801112890 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.807960033 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.808146954 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.808209896 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.815046072 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.815310955 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.815399885 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.828594923 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.828651905 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.828671932 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.828718901 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.828730106 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.829618931 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.829689980 CET	443	49808	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.829760075 CET	49808	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.838159084 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:35.838187933 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:35.838269949 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:35.842019081 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:35.842036963 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:35.842410088 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.842498064 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.842582941 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.842780113 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.842818975 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.843070030 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:35.843154907 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:35.843234062 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:35.843405008 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:35.843441963 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:35.856719971 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.856740952 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.863394976 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.863435984 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.863507986 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.863722086 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:35.863733053 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:35.896527052 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.918297052 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.920948982 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.921041965 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.921057940 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.925771952 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.925838947 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.925853968 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.930615902 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.930681944 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.930696011 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.940315962 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.940387011 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.940401077 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.940459013 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.948964119 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.948985100 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.949029922 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.957675934 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.957695961 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.957745075 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.957761049 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.957792044 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.966293097 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.966360092 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.966373920 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.966434002 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.970845938 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.970882893 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.970927000 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.979398966 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.979475975 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.979496002 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.979561090 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.983225107 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.983261108 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.983350992 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.983690023 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:35.983716011 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:35.987967014 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.988003016 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.988086939 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:35.988111973 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.988169909 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.988276005 CET	49811	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:35.988293886 CET	443	49811	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:35.996551037 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:35.996628046 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.000991106 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.001060963 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.004614115 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.004647970 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.004723072 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.009552956 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.009630919 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.014138937 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.014235973 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.051390886 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.051430941 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.052325010 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.052370071 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.052460909 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.052825928 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.052845001 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.110424042 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.110534906 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.112180948 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.112262011 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.119208097 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.119352102 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.125705957 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.125796080 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.132091999 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.132181883 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.132205009 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.132313967 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.132333040 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.132406950 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.132466078 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.132633924 CET	49810	443	192.168.2.4	172.67.41.229
Dec 16, 2024 02:33:36.132661104 CET	443	49810	172.67.41.229	192.168.2.4
Dec 16, 2024 02:33:36.166002035 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.166224957 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.166268110 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.167418957 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.167805910 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.167898893 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.167937040 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.194703102 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.194773912 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.194855928 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.195027113 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.195061922 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.211352110 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.216454029 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.331705093 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.332143068 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.332206964 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.333348036 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.333909035 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.333909035 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.334131956 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.347887993 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.347974062 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.348090887 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.348432064 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:36.348516941 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:36.366323948 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:36.366437912 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:36.366517067 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:36.366692066 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:36.366729021 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:36.384937048 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.677391052 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.677741051 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.677808046 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.678857088 CET	49813	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.678899050 CET	443	49813	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.713170052 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.713257074 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.713551998 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.713551998 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.713718891 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.843611956 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.843871117 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.844068050 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.844691992 CET	49812	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:36.844753981 CET	443	49812	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:36.903758049 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:36.904544115 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:36.904607058 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:36.908221006 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:36.908329010 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:36.908613920 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:36.908713102 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:36.908886909 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:36.948329926 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:36.948389053 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:36.995172024 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:37.167540073 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.167783976 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.167845011 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.168613911 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.168952942 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.169049978 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.169080019 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.191005945 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.191642046 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:37.191705942 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.192025900 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.192318916 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:37.192403078 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:37.192431927 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.192455053 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.211365938 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.213915110 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.230460882 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:37.230639935 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:37.230856895 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:37.231262922 CET	49814	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:37.231363058 CET	443	49814	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:37.245181084 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:37.258739948 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.259064913 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.259094954 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.260546923 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.260616064 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.260965109 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.261044979 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.261075974 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.307327986 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.307504892 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.307512045 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.354454041 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.446484089 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:37.446923018 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:37.446939945 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:37.448374033 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:37.448438883 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:37.448723078 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:37.448786974 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:37.448847055 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:37.448853970 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:37.470240116 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.470441103 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.470480919 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.471206903 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.471565008 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.471673965 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.471674919 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.471700907 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.471744061 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.471780062 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.471797943 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.471812963 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.471853971 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.471955061 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.471986055 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.475622892 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.475801945 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476049900 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476049900 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476049900 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476114988 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.476174116 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.476176023 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476289988 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476325035 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.476438046 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.476469040 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.477020025 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.495042086 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:37.526258945 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.526269913 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.552508116 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.552767038 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.552828074 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.554270983 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.554459095 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.554600000 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.554685116 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.554718971 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.599329948 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.604444981 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.604505062 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.614517927 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.614870071 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.614979982 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.615065098 CET	49815	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.615094900 CET	443	49815	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.619941950 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.619982004 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.620065928 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.620287895 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.620304108 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.624351978 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.624741077 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.624834061 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.628309011 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.628385067 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.628654957 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.628750086 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.628766060 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.651283026 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.675396919 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.682626963 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.682687998 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.691061974 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.691375017 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.691438913 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.694917917 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.695090055 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.695158005 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:37.695888996 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.696065903 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.697042942 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.697194099 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.697221041 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.697267056 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.697840929 CET	49818	443	192.168.2.4	167.99.100.230
Dec 16, 2024 02:33:37.697874069 CET	443	49818	167.99.100.230	192.168.2.4
Dec 16, 2024 02:33:37.700028896 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.700232983 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.700288057 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.700485945 CET	49816	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:37.700503111 CET	443	49816	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:37.723407030 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.745304108 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.745367050 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:37.767690897 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.782356024 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.782418966 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.786065102 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.786163092 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.786834955 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.787061930 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.792205095 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:37.839061975 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:37.839106083 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:37.885920048 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.006371021 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.011667967 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.012211084 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.012408018 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.052691936 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.052705050 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.052725077 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.052782059 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.052797079 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.052807093 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.052824974 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.052843094 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.052901030 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.052949905 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.067498922 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.067634106 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.067810059 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.067898035 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.104212999 CET	49821	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.104255915 CET	443	49821	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.116170883 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:38.120305061 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:38.135951042 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:38.135968924 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.136168957 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.136168957 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.136251926 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.136728048 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:38.136759043 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:38.137131929 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.138318062 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:38.138406992 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:38.149041891 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:38.149307966 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.149830103 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:38.151133060 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:38.151366949 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:38.151436090 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:38.151444912 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:38.154726028 CET	49823	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.154752016 CET	443	49823	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.157329082 CET	49819	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.157346010 CET	443	49819	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.161397934 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.161484957 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.161552906 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.161803961 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.161854982 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.195324898 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.198416948 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:38.224133015 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.224356890 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.224414110 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.224455118 CET	49822	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.224472046 CET	443	49822	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.226703882 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.226764917 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.226836920 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.227075100 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:38.227103949 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:38.228037119 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.228121996 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.228352070 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.228465080 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.228497982 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.407344103 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.407437086 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.407617092 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.413322926 CET	49817	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.413386106 CET	443	49817	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.417217970 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.417301893 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.417382956 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.417540073 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.417628050 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.417692900 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.417819977 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.417896986 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.417973042 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.417999983 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.464683056 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.464747906 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.464771032 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.464801073 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.464865923 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.464900017 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.465274096 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.465369940 CET	443	49820	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:38.465426922 CET	49820	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:38.528496981 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.528546095 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.528609991 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.528934956 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.528961897 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.573487043 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.573750019 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.573937893 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:38.574182034 CET	49826	443	192.168.2.4	35.178.117.130
Dec 16, 2024 02:33:38.574213028 CET	443	49826	35.178.117.130	192.168.2.4
Dec 16, 2024 02:33:38.580715895 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.580914974 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.581105947 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.581105947 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.584378004 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.584462881 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.584815979 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.584815979 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.584954023 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:38.886040926 CET	49824	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:38.886104107 CET	443	49824	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.064764023 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.065032005 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.065045118 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.068182945 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.068274021 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.068645000 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.068723917 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.068826914 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.068834066 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.120286942 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.510200024 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.510380030 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.510560036 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.511428118 CET	49827	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.511440992 CET	443	49827	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.550873041 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:39.550896883 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:39.551084042 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:39.551117897 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:39.551273108 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:39.551949978 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:39.551992893 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:39.552156925 CET	443	49825	108.158.71.192	192.168.2.4
Dec 16, 2024 02:33:39.552213907 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:39.552232027 CET	49825	443	192.168.2.4	108.158.71.192
Dec 16, 2024 02:33:39.589762926 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.592924118 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.592983007 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.594127893 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.594969034 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.595098019 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.595149040 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.637687922 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.653947115 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.654171944 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.654215097 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.655374050 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.655694008 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.655802965 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.655870914 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.700031996 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.821048021 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:39.824510098 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:39.824589968 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:39.825715065 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:39.827219009 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:39.827260017 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:39.827270985 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:39.827441931 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:39.871911049 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:39.947243929 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.947921991 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.947987080 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.948474884 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.948842049 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.948928118 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.949035883 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.949136972 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.949186087 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.949260950 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:39.949278116 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:39.983493090 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:40.004049063 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.004518032 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.004611969 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.008184910 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.008296013 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.008687973 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.008687973 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.008784056 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.008858919 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.023328066 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:40.023396015 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:40.023608923 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:40.023669958 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:40.023685932 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:40.027388096 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:40.033734083 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.033828974 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.035113096 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.035113096 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.059679985 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.059741020 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.098400116 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.098577976 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.098874092 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.098983049 CET	49830	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.099020958 CET	443	49830	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.106314898 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.135648012 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.135883093 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.135910988 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.136924982 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.137150049 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.137206078 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.137913942 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.138207912 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.138309956 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.138323069 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.138456106 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.139453888 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.139550924 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.139802933 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.139873028 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.139900923 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.184550047 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.184616089 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.184664011 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.231683969 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.340828896 CET	49828	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.340890884 CET	443	49828	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.427282095 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:40.427524090 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:40.427771091 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:40.427771091 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:40.427838087 CET	443	49803	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:40.428704023 CET	49803	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:40.430789948 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:40.430876017 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:40.430985928 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:40.431289911 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:40.431392908 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:40.446815968 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.446904898 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.447846889 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.448185921 CET	49834	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.448249102 CET	443	49834	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.501065016 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.501295090 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.501384974 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.501744986 CET	49833	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.501773119 CET	443	49833	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.508667946 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.508754015 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.508860111 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.509056091 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:40.509080887 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:40.567702055 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.613182068 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.613214016 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.613259077 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.613259077 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.613297939 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.613313913 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.613327980 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.613327980 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.613363028 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.798124075 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.798192978 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.798207045 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.798240900 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.798257113 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.798285961 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.837811947 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.837857962 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.838004112 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.838005066 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.838028908 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.838083029 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.959382057 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.959469080 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.959486961 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.959558964 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.959599018 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.981144905 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.981234074 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.981292009 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.982609987 CET	49832	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:40.982651949 CET	443	49832	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:40.987145901 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.987191916 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.987215042 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.987238884 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:40.987265110 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:40.987266064 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.009598970 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.009649992 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.009659052 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.009681940 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.009692907 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.009711027 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.015059948 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.015113115 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.015121937 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.015166044 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.015227079 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.015269995 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.015506029 CET	49829	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.015523911 CET	443	49829	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.020313978 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.020347118 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.020399094 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.020582914 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:41.020598888 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:41.043836117 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.043889999 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.043951035 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.044188976 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.044214010 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.052444935 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.052527905 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.052597046 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.052783012 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.052819014 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.153575897 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:41.154140949 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:41.154211998 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:41.161983967 CET	49831	443	192.168.2.4	209.58.171.123
Dec 16, 2024 02:33:41.162033081 CET	443	49831	209.58.171.123	192.168.2.4
Dec 16, 2024 02:33:41.253485918 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.253735065 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.253766060 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.255193949 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.255265951 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.256262064 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.256345034 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.256407976 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.299369097 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.308029890 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.308051109 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.354902029 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.559530020 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.559571028 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.559629917 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.559920073 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.559937954 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.654082060 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:41.654520988 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:41.654584885 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:41.656145096 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:41.656462908 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:41.656570911 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:41.656929970 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:41.692478895 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.692523003 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.692552090 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.692574978 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.692620039 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.692686081 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.692775965 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.692823887 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.696667910 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.696688890 CET	443	49835	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.696733952 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.696763992 CET	49835	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.699822903 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:41.709361076 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.709413052 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.709510088 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.711675882 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:41.711719036 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:41.778541088 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.778582096 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.779016972 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.779016972 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:41.779063940 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:41.869049072 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:41.869091988 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:41.869363070 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:41.869363070 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:41.869451046 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:41.941554070 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:41.941864967 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:41.941925049 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:41.943443060 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:41.943864107 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:41.943865061 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:41.944328070 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:41.996157885 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:42.093588114 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:42.093767881 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:42.095148087 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:42.095221043 CET	443	49836	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:42.095257044 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:42.095288992 CET	49836	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:42.386404991 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:42.386514902 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:42.387130976 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:42.387130976 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:42.464185953 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.465254068 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.465320110 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.466809988 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.468050957 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.468050957 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.468095064 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.468158960 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.468189001 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.471357107 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.471828938 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.471894979 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.473022938 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.476975918 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.476975918 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.477036953 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.477230072 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.514708996 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.530780077 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.606014967 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:42.606323957 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:42.606355906 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:42.607378006 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:42.607760906 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:42.607760906 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:42.607846022 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:42.651815891 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:42.697762012 CET	49837	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:42.697825909 CET	443	49837	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:42.906760931 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.907147884 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.907491922 CET	443	49839	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.907588959 CET	49839	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.910438061 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.910681009 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.910696030 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.910764933 CET	443	49840	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.910803080 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.910835981 CET	49840	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.935909986 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:42.936203957 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:42.936270952 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:42.937555075 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:42.937841892 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:42.937930107 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:42.937943935 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:42.977581024 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.977859020 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.977888107 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.979182005 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:42.979212999 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:42.979589939 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.979654074 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.979971886 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.980077028 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:42.980083942 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:42.980217934 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.025274038 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.025301933 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.073540926 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.175705910 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.175771952 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.175792933 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.175848007 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.175868988 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.175888062 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.175900936 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.175916910 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.175916910 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.175932884 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.175947905 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.189826965 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.190129042 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.190139055 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.191585064 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.191673040 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.191977024 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.192058086 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.192097902 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.235378981 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.235759974 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.235769033 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.276640892 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.285962105 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.286240101 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.286302090 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.288505077 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.288589954 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.288908005 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.289002895 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.289087057 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.289109945 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.338170052 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.357053041 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.357110023 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.357311010 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.357311964 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.357342958 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.357389927 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.379012108 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.379134893 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.379214048 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.379213095 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.379246950 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.379307985 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.379388094 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.379447937 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.387139082 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.387219906 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.387252092 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.387331009 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.395445108 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.395513058 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.397031069 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.397077084 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.397114038 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.397146940 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.397166014 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.397188902 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.402065039 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.402139902 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.402154922 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.402214050 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.418201923 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.418438911 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.418474913 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.418510914 CET	443	49841	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.418529987 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.418554068 CET	49841	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.475605965 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.475703001 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.521755934 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.521806955 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.521881104 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.521914005 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.521934032 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.521965027 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.549336910 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.549468040 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.550404072 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.550447941 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.550512075 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.550512075 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.550542116 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.550584078 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.570636034 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.570708036 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.570727110 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.570952892 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.573918104 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.573957920 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.574091911 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.574091911 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.574122906 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.574347973 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.574934006 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.575001001 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.575007915 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.575035095 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.575089931 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.579523087 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.579691887 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.579730988 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.579768896 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.579864979 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.579885960 CET	443	49838	52.222.144.90	192.168.2.4
Dec 16, 2024 02:33:43.579900980 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.579935074 CET	49838	443	192.168.2.4	52.222.144.90
Dec 16, 2024 02:33:43.583245993 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.583348989 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.591502905 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.591578960 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.591598988 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.591645002 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.599931002 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.600003958 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.600174904 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.600228071 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.608407974 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.608506918 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.608561993 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.608577967 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.616802931 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.616878033 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.616893053 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.617115974 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.617177963 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.617189884 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.624897957 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.624969006 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.624980927 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.631805897 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.631900072 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.631956100 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.632019043 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.632038116 CET	443	49843	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:43.632055044 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.632091045 CET	49843	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:43.632999897 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.633066893 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.633080006 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.633100986 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.633152962 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.633166075 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.640930891 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.640984058 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.640996933 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.641175985 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.641221046 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.641232967 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.648993969 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.649091005 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.649102926 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.657552958 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.657680988 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.657856941 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.657922983 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.658076048 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.668971062 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.669044018 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.669075966 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.669131041 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.729656935 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.729846954 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.730051994 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.730530977 CET	49844	443	192.168.2.4	54.227.246.42
Dec 16, 2024 02:33:43.730571032 CET	443	49844	54.227.246.42	192.168.2.4
Dec 16, 2024 02:33:43.733936071 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:43.733959913 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:43.734050035 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:43.734270096 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:43.734287024 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:43.741400003 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.741488934 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.741559982 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.741621017 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.762862921 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.763005018 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.763056993 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.763219118 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.765666008 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.765738010 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.770867109 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.770940065 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.770966053 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.771028996 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.776070118 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.776185989 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.776241064 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.776304007 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.781728983 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.781807899 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.786884069 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.787072897 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.787096977 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.787127018 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.787302971 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.791793108 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.791897058 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.791960955 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.792117119 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.796766043 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.796857119 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.801582098 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.801686049 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.801750898 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.801815033 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.804702997 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.804795027 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.807651997 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.807749033 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.807784081 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.807847023 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.810683012 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.810771942 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.811244965 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.811345100 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.813838005 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.813932896 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.817096949 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.817178011 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.817245007 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.833942890 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.875375032 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.964770079 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.964854002 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:43.964951038 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.965205908 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:43.965243101 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:44.166903019 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:44.167090893 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:44.167382956 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:44.167382956 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:44.168032885 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:44.168052912 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:44.168278933 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:44.168467045 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:44.168473005 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:44.218514919 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:44.218559027 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:44.218647003 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:44.219016075 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:44.219033003 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:44.311151981 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:44.311235905 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:44.311359882 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:44.311635971 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:44.311686039 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:44.479979992 CET	49842	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:44.480021954 CET	443	49842	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.166841984 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.167220116 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.167246103 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.167769909 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.168067932 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.168162107 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.168206930 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.201968908 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.202595949 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.202656984 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.206224918 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.206386089 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.206794024 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.206911087 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.206923962 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.206978083 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.211376905 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.214313984 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.261214018 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.261239052 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.308073997 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.435242891 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:45.435350895 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:45.435544968 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:45.435765982 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:45.435785055 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:45.463850975 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.464360952 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.464379072 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.465831995 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.466165066 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.466272116 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.466275930 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.466348886 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.511178017 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.611557961 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.611736059 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.611918926 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.612514973 CET	49845	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.612525940 CET	443	49845	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.644387960 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.644551039 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.644646883 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.644736052 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.644773960 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.644802094 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.645040989 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.654146910 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.654316902 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.654315948 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.654390097 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.654453039 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.662718058 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.662885904 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.662920952 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.662986040 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.663054943 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.675471067 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.675992012 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.676007032 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.677324057 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.677723885 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.677793026 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.677793026 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.677805901 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.677870035 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.677871943 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.677895069 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.677961111 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.677978039 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.677995920 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.678072929 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:45.678117990 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.678292036 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:45.704037905 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.704258919 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.704353094 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.704416990 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.704623938 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.777395964 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.777530909 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.799911976 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:45.800492048 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:45.800564051 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:45.802077055 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:45.802526951 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:45.802572012 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:45.802588940 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:45.802748919 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:45.836266994 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.836395979 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.836566925 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.836632013 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.836693048 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.841690063 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.841854095 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.842009068 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.842231989 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.849616051 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.849698067 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.849724054 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.849750042 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.849811077 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.855437994 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:45.857930899 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.858144999 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.866178036 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.866297960 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.866398096 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.866462946 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.866518974 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.873768091 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.873904943 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.881855011 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.881925106 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.882136106 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.882195950 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.889851093 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.889904976 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.889910936 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.889941931 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.890000105 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.897746086 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.897823095 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.906111956 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.906239033 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.906236887 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.906281948 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.906349897 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.911650896 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.911823988 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.911873102 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.911932945 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.917670012 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.917738914 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.923665047 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.923784018 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.923805952 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:45.923836946 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:45.923901081 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.010937929 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.011024952 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.011152029 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.011179924 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.011501074 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.059540987 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.059649944 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.059648991 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.059866905 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.059928894 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.060132980 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.060934067 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.061125994 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.064860106 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.064934969 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.064955950 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.065321922 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.068567038 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.068649054 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.072463989 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.072534084 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.072756052 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.072814941 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.076406956 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.076468945 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.076488018 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.076544046 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.080321074 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.080384016 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.084229946 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.084297895 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.084328890 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.084441900 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.088201046 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.088263988 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.088282108 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.088341951 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.092370033 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.092454910 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.096302032 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.096411943 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.096539974 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.096602917 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.096720934 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.100174904 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.100372076 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.100428104 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.100488901 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.100553989 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.104100943 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.104202032 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.104221106 CET	443	49847	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.104294062 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.108176947 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.108376980 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.108436108 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.109688997 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.151423931 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.151700020 CET	49847	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.309357882 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.309449911 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:46.309583902 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.309887886 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.309969902 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:46.361630917 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:46.361752033 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:46.361825943 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.362056971 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.362056971 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.362098932 CET	443	49849	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:46.362185955 CET	49849	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:46.481900930 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.482072115 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.482150078 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.482624054 CET	49846	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.482664108 CET	443	49846	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.483107090 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.483175993 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.483243942 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.486989975 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:46.487023115 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:46.572910070 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:46.573432922 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:46.573523045 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:46.573581934 CET	49848	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:46.573600054 CET	443	49848	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:46.577182055 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:46.577263117 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:46.577383041 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:46.577552080 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:46.577586889 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:47.367161989 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.370738029 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.370820045 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.371866941 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.400198936 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.400326967 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.400357962 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.400676012 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.449419975 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.775132895 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:47.775480986 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:47.775516987 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:47.776132107 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:47.776602030 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:47.776695967 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:47.776829958 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:47.794404984 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:47.794578075 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:47.794636965 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:47.795139074 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:47.795466900 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:47.795557976 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:47.795588017 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:47.819351912 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:47.839809895 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:47.839833021 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:47.847733974 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.847908020 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.847975016 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.848054886 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.848054886 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.848114014 CET	443	49850	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:47.848165989 CET	49850	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:47.851845026 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:47.851877928 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:47.851938963 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:47.852130890 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:47.852144003 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:48.016613960 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.016860962 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:48.016884089 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.017752886 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.018044949 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:48.018151999 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:48.018172979 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.058670044 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:48.308773041 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:48.308995962 CET	443	49851	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:48.309195995 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:48.309195995 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:48.309195995 CET	49851	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:48.462109089 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.462326050 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.462621927 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:48.462800980 CET	49853	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:48.462840080 CET	443	49853	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:48.505321980 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:48.558584929 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:48.558618069 CET	443	49852	45.223.19.68	192.168.2.4
Dec 16, 2024 02:33:48.605424881 CET	49852	443	192.168.2.4	45.223.19.68
Dec 16, 2024 02:33:49.236515045 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.236886978 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.236908913 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.238040924 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.238322020 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.238446951 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.238518000 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.292216063 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.309279919 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:49.309350967 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:49.309505939 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:49.309689999 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:49.309712887 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:49.674926996 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.675085068 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.675148010 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.675559044 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.675586939 CET	443	49854	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:49.675601006 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:49.675632954 CET	49854	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:50.785429955 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:50.785680056 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:50.785741091 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:50.787239075 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:50.787528038 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:50.787638903 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:50.787651062 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:50.787672043 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:50.839095116 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:51.230890036 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:51.231184959 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:51.231290102 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:51.231396914 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:51.231396914 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:51.231441975 CET	443	49855	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:51.231509924 CET	49855	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:51.308095932 CET	49740	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:51.427870035 CET	80	49740	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:52.856806993 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:52.856837988 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:52.856937885 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:52.857227087 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:52.857237101 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:54.605513096 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:54.613346100 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:54.613368988 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:54.614532948 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:54.614837885 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:54.614969015 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:54.614978075 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:54.615009069 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:54.667794943 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:55.058753967 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:55.058979988 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:55.059077024 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:55.059179068 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:55.059194088 CET	443	49857	34.196.202.149	192.168.2.4
Dec 16, 2024 02:33:55.059204102 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:55.059259892 CET	49857	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:33:55.062073946 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:55.062156916 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:55.062243938 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:55.062447071 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:55.062482119 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.071072102 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:56.071099043 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:56.071178913 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:56.077092886 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:56.077126980 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:56.264601946 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:56.264694929 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:56.264771938 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:56.265155077 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:56.265181065 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:56.281584024 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.281857014 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:56.281917095 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.282424927 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.282773972 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:56.282869101 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.282892942 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:56.323081970 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:56.323100090 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.760888100 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.761065006 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.761764050 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:56.761764050 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:56.761797905 CET	443	49864	34.229.26.21	192.168.2.4
Dec 16, 2024 02:33:56.763673067 CET	49864	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:33:57.417501926 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.417761087 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:57.417783976 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.418256044 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.418644905 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:57.418728113 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.418802023 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:57.459378004 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.805866003 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.806114912 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:57.806157112 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.807260036 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.807624102 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:57.807791948 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.807832956 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:57.807926893 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:57.807950974 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.808167934 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:57.808195114 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.808278084 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:57.808379889 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:57.858782053 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.859000921 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.859052896 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:57.859117985 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:57.859129906 CET	443	49870	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:57.859138966 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:57.859174967 CET	49870	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:58.247344017 CET	80	49740	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:58.247623920 CET	49740	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:58.310025930 CET	49740	80	192.168.2.4	18.224.21.137
Dec 16, 2024 02:33:58.310092926 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:58.310133934 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:58.310234070 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:58.310574055 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:58.310596943 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:58.429968119 CET	80	49740	18.224.21.137	192.168.2.4
Dec 16, 2024 02:33:58.562284946 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:58.562514067 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:58.562617064 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:58.562676907 CET	49871	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:58.562701941 CET	443	49871	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:58.565572977 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:58.565623045 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:58.565726042 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:58.565928936 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:58.565953016 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:59.756922960 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:59.757244110 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:59.757275105 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:59.757814884 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:59.758227110 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:59.758310080 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:59.758378029 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:33:59.799356937 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:33:59.979146957 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:59.979718924 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:59.979782104 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:59.980274916 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:59.981117010 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:33:59.981225014 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:33:59.981264114 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:00.027137995 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:00.027196884 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:00.076044083 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:00.076128006 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:00.076330900 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:00.076555014 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:00.076577902 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:00.197823048 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:00.198051929 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:00.198177099 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:00.198425055 CET	49876	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:00.198456049 CET	443	49876	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:00.424791098 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:00.424985886 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:00.425214052 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:00.425621033 CET	49878	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:00.425662041 CET	443	49878	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:01.309782982 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:01.309855938 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:01.310080051 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:01.310338974 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:01.310372114 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:01.892705917 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:01.892936945 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:01.892965078 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:01.894093990 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:01.894424915 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:01.894539118 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:01.894553900 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:01.894613981 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:01.947961092 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:02.340343952 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:02.340552092 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:02.340634108 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:02.340773106 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:02.340815067 CET	443	49884	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:02.340847969 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:02.340881109 CET	49884	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:02.345019102 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:02.345102072 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:02.345191002 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:02.345447063 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:02.345483065 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:02.727441072 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:02.727756023 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:02.727818966 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:02.728303909 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:02.728785992 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:02.728882074 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:02.728979111 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:02.775331974 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:03.169363976 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:03.169586897 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:03.169905901 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:03.170588017 CET	49886	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:03.170651913 CET	443	49886	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:03.566467047 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:03.566793919 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:03.566855907 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:03.568017960 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:03.568645000 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:03.568753004 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:03.568836927 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:03.620064020 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:04.004774094 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:04.004960060 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:04.005027056 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:04.005486012 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:04.005486012 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:04.005532980 CET	443	49891	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:04.005584002 CET	49891	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:04.099526882 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:34:04.099714994 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:34:04.099776983 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:34:04.435408115 CET	49802	443	192.168.2.4	18.66.161.129
Dec 16, 2024 02:34:04.435507059 CET	443	49802	18.66.161.129	192.168.2.4
Dec 16, 2024 02:34:04.435695887 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:04.435750961 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:04.435833931 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:04.436028004 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:04.436048985 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:06.143238068 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:06.143647909 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:06.143711090 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:06.144820929 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:06.145207882 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:06.145386934 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:06.189505100 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:07.344477892 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:07.344569921 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:07.344906092 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:07.344906092 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:07.345026970 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:08.109100103 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:08.109189034 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:08.109314919 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:08.109754086 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:08.109834909 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:08.309413910 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:08.309499979 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:08.309621096 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:08.309812069 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:08.309853077 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:09.082658052 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.083159924 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:09.083203077 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.083724022 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.084057093 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:09.084148884 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.084235907 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:09.131321907 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.534187078 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.534255028 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.534411907 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:09.534606934 CET	49903	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:09.534641027 CET	443	49903	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:09.537786007 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:09.537878990 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:09.537964106 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:09.538181067 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:09.538206100 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:09.587663889 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.588267088 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.588330984 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.588840961 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.589314938 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.589314938 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.589416981 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.589478016 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.589493990 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.589514017 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.589551926 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.589679956 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.589751959 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.590008974 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:09.590080023 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:09.788543940 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:09.788995028 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:09.789056063 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:09.789546967 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:09.789871931 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:09.789971113 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:09.790008068 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:09.831408024 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:09.839667082 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.231915951 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:10.232099056 CET	443	49906	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:10.232492924 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.232492924 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.232492924 CET	49906	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.309376955 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.309465885 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:10.309565067 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.309767008 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:10.309803009 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:10.338004112 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:10.338174105 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:10.338521957 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:10.338951111 CET	49904	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:10.339015961 CET	443	49904	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:10.341291904 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:10.341336966 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:10.341403961 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:10.341553926 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:10.341577053 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:10.755841970 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:10.756263018 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:10.756328106 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:10.756834984 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:10.757129908 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:10.757221937 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:10.757234097 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:10.799341917 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:10.807653904 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:11.195544958 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:11.195651054 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:11.195749044 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:11.196321011 CET	49911	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:11.196337938 CET	443	49911	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:11.732580900 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:11.733097076 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:11.733160019 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:11.734294891 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:11.734596968 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:11.734718084 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:11.734734058 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:11.734786987 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:11.759984970 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:11.760364056 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:11.760395050 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:11.761537075 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:11.761847019 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:11.761946917 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:11.762021065 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:11.776943922 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:11.808131933 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:12.190722942 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:12.190974951 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:12.191159964 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:12.191299915 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:12.191373110 CET	443	49912	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:12.191411972 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:12.191435099 CET	49912	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:12.205187082 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:12.205380917 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:12.205661058 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:12.206214905 CET	49913	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:12.206244946 CET	443	49913	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:14.543886900 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:14.543967962 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:14.544049978 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:14.544744015 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:14.544770956 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:15.839557886 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:15.839726925 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:15.839813948 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:16.276460886 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.277124882 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:16.277203083 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.277681112 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.277970076 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:16.278084040 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:16.278095961 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.278112888 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.323169947 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:16.496592045 CET	49897	443	192.168.2.4	172.217.19.228
Dec 16, 2024 02:34:16.496675968 CET	443	49897	172.217.19.228	192.168.2.4
Dec 16, 2024 02:34:16.723479986 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.723563910 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.723639965 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:16.724560976 CET	49924	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:16.724601984 CET	443	49924	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:16.728936911 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:16.729020119 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:16.729116917 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:16.729547977 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:16.729628086 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:17.014909983 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:17.014992952 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:17.015275955 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:17.015423059 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:17.015460014 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:17.059336901 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:17.059376955 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:17.059442997 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:17.059686899 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:17.059711933 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:17.958518982 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:17.958803892 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:17.958827019 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:17.959327936 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:17.959592104 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:17.959677935 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:17.959700108 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:18.003340006 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:18.011207104 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:18.399823904 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:18.400007963 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:18.400059938 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:18.400563002 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:18.400583982 CET	443	49930	34.229.26.21	192.168.2.4
Dec 16, 2024 02:34:18.400598049 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:18.400625944 CET	49930	443	192.168.2.4	34.229.26.21
Dec 16, 2024 02:34:18.433882952 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.434287071 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:18.434348106 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.435842037 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.436317921 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:18.436482906 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:18.436497927 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.436523914 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.436636925 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:18.436964035 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.437120914 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:18.437161922 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.437299967 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:18.437326908 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:18.482089996 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.482428074 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.482491970 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.483649015 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.484061956 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.484210968 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.484225035 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.484249115 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.526973009 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.924218893 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.924392939 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.924662113 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.924761057 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.924761057 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:18.924803019 CET	443	49933	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:18.924871922 CET	49933	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:19.182862997 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:19.182943106 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:19.183316946 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:19.183465004 CET	49932	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:19.183504105 CET	443	49932	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:19.186353922 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:19.186383009 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:19.186530113 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:19.186702967 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:19.186716080 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:19.309567928 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:19.309595108 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:19.309814930 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:19.309920073 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:19.309937954 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:20.604988098 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:20.605542898 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:20.605567932 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:20.606700897 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:20.607134104 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:20.607280970 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:20.607305050 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:20.651168108 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:20.737191916 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:20.737544060 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:20.737569094 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:20.738027096 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:20.738439083 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:20.738519907 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:20.738589048 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:20.779340982 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:21.049245119 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:21.049422979 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:21.049495935 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:21.050118923 CET	49939	443	192.168.2.4	35.170.168.120
Dec 16, 2024 02:34:21.050142050 CET	443	49939	35.170.168.120	192.168.2.4
Dec 16, 2024 02:34:21.178443909 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:21.178544044 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:21.178704023 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:21.178957939 CET	49943	443	192.168.2.4	52.54.218.21
Dec 16, 2024 02:34:21.178978920 CET	443	49943	52.54.218.21	192.168.2.4
Dec 16, 2024 02:34:21.747809887 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:21.747898102 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:21.747971058 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:21.748475075 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:21.748550892 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.491422892 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.491745949 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:23.491771936 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.492942095 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.493350983 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:23.493488073 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:23.493514061 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.493537903 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.541940928 CET	49949	443	192.168.2.4	34.196.202.149
Dec 16, 2024 02:34:23.937336922 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.937427044 CET	443	49949	34.196.202.149	192.168.2.4
Dec 16, 2024 02:34:23.937478065 CET	49949	443	192.168.2.4	34.196.202.149

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 02:33:00.123605013 CET	53	54314	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:00.168925047 CET	53	51299	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:03.215411901 CET	53	59593	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:04.371335030 CET	50576	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:04.371630907 CET	58685	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:04.509078979 CET	53	50576	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:04.509393930 CET	53	58685	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:07.519543886 CET	60179	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:07.519673109 CET	53191	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:07.845733881 CET	53	60179	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:07.845994949 CET	53	53191	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:10.834887981 CET	58725	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:10.835026026 CET	51932	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:11.220654011 CET	53	58725	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:11.220679045 CET	53	51932	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:13.034972906 CET	138	138	192.168.2.4	192.168.2.255
Dec 16, 2024 02:33:15.089696884 CET	50654	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:15.090038061 CET	52374	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:15.467941999 CET	53	50654	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:15.468257904 CET	53	52374	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:17.491581917 CET	62592	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:17.491638899 CET	59298	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:18.047192097 CET	53	62592	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:18.047559023 CET	53	59298	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:20.072037935 CET	53	59475	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:22.125073910 CET	65272	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:22.125145912 CET	50491	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:22.339963913 CET	53	50491	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:22.348375082 CET	53	65272	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:24.667705059 CET	64651	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:24.669692993 CET	56896	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:24.769933939 CET	53	60435	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:24.803944111 CET	53	62969	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:24.804821014 CET	53	64651	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:24.807365894 CET	53	56896	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:26.680990934 CET	56900	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:26.681143045 CET	65526	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:26.711137056 CET	56623	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:26.711170912 CET	52796	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:26.818763018 CET	53	56900	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:26.818962097 CET	53	65526	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:26.864466906 CET	53	56623	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:26.864590883 CET	53	52796	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:27.788821936 CET	60648	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:27.788999081 CET	54265	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:27.927460909 CET	53	60648	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:27.927478075 CET	53	54265	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:28.297239065 CET	53	55644	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:28.338469982 CET	53	57896	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:28.907053947 CET	57885	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:28.907089949 CET	64055	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:28.907987118 CET	61549	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:28.908117056 CET	51174	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:29.101696014 CET	53	57968	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:29.448434114 CET	53	61549	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:29.449763060 CET	53	51174	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:29.477129936 CET	53	57885	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:29.477344036 CET	53	64055	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:30.990750074 CET	60388	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:30.991044044 CET	58290	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:30.991569996 CET	49890	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:30.991957903 CET	60209	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:31.222830057 CET	53	60388	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:31.226094961 CET	53	58290	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:31.323482037 CET	53	60209	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:31.324101925 CET	53	49890	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:31.938620090 CET	51773	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:31.938663960 CET	55709	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.004476070 CET	49770	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.004544020 CET	51039	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.076493979 CET	53	51773	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.078799009 CET	53	55709	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.210799932 CET	53	51039	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.217494965 CET	53	49770	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.219023943 CET	56347	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.220881939 CET	56284	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.220881939 CET	58232	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.221194983 CET	49376	443	192.168.2.4	18.159.105.57
Dec 16, 2024 02:33:32.272206068 CET	55627	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.272548914 CET	63815	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.274633884 CET	53558	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.274739981 CET	49633	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:32.357135057 CET	53	56347	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.413064003 CET	53	49633	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.413080931 CET	53	53558	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.495378017 CET	53	63815	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.515338898 CET	53	55627	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:32.755345106 CET	49376	443	192.168.2.4	18.159.105.57
Dec 16, 2024 02:33:33.180932045 CET	51202	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.181041956 CET	57407	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.232367992 CET	50796	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.232548952 CET	51960	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.315999985 CET	53	56284	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.316948891 CET	53	58232	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.369997978 CET	53	50796	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.370151043 CET	53	51960	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.405802011 CET	53	57407	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.414031029 CET	53	51202	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.417313099 CET	443	49376	18.159.105.57	192.168.2.4
Dec 16, 2024 02:33:33.417342901 CET	443	49376	18.159.105.57	192.168.2.4
Dec 16, 2024 02:33:33.739020109 CET	58875	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.739249945 CET	51028	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.752007008 CET	64004	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.752474070 CET	52111	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:33.876144886 CET	53	51028	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:33.876425028 CET	53	58875	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:34.073846102 CET	53	52111	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:34.073976994 CET	53	64004	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:34.989682913 CET	51397	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:34.989886999 CET	60263	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:35.127089024 CET	53	51397	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:35.127222061 CET	53	60263	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:35.720721006 CET	51995	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:35.720995903 CET	60290	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:35.844821930 CET	53135	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:35.845062017 CET	51944	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:35.860682011 CET	53	51995	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:35.862997055 CET	53	60290	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:35.982243061 CET	53	51944	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:35.982686996 CET	53	53135	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:36.055685997 CET	49890	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:36.055828094 CET	63333	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:36.068509102 CET	59874	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:36.068509102 CET	54319	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:36.193490028 CET	53	63333	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:36.194291115 CET	53	49890	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:36.345726013 CET	53	54319	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:36.365750074 CET	53	59874	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:38.821645021 CET	53	49352	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:39.587989092 CET	50943	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:39.588116884 CET	52627	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:40.022326946 CET	53	52627	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:40.022835970 CET	53	50943	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:41.730034113 CET	54005	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:41.730564117 CET	59563	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:41.867378950 CET	53	54005	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:41.868515015 CET	53	59563	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:43.824476004 CET	57781	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:43.824664116 CET	64677	53	192.168.2.4	1.1.1.1
Dec 16, 2024 02:33:43.961839914 CET	53	57781	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:43.964031935 CET	53	64677	1.1.1.1	192.168.2.4
Dec 16, 2024 02:33:59.979439974 CET	53	53204	1.1.1.1	192.168.2.4
Dec 16, 2024 02:34:02.040776968 CET	53	56522	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 16, 2024 02:33:33.370182991 CET	192.168.2.4	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Dec 16, 2024 02:33:33.417387962 CET	192.168.2.4	18.159.105.57	3bf7	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 16, 2024 02:33:04.371335030 CET	192.168.2.4	1.1.1.1	0x7c24	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:04.371630907 CET	192.168.2.4	1.1.1.1	0x31fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:07.519543886 CET	192.168.2.4	1.1.1.1	0x320e	Standard query (0)	www.ipv4now.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:07.519673109 CET	192.168.2.4	1.1.1.1	0x6650	Standard query (0)	www.ipv4now.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:10.834887981 CET	192.168.2.4	1.1.1.1	0x8164	Standard query (0)	cy6clk.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:10.835026026 CET	192.168.2.4	1.1.1.1	0xfd90	Standard query (0)	cy6clk.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:15.089696884 CET	192.168.2.4	1.1.1.1	0x33d4	Standard query (0)	clktrack7.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:15.090038061 CET	192.168.2.4	1.1.1.1	0x57e7	Standard query (0)	clktrack7.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:17.491581917 CET	192.168.2.4	1.1.1.1	0x51ff	Standard query (0)	track.walk-inbathtubshop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:17.491638899 CET	192.168.2.4	1.1.1.1	0x82a2	Standard query (0)	track.walk-inbathtubshop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:22.125073910 CET	192.168.2.4	1.1.1.1	0x6ddb	Standard query (0)	walk-inbathtubshop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:22.125145912 CET	192.168.2.4	1.1.1.1	0x215f	Standard query (0)	walk-inbathtubshop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:24.667705059 CET	192.168.2.4	1.1.1.1	0x52e6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:24.669692993 CET	192.168.2.4	1.1.1.1	0x9dab	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:26.680990934 CET	192.168.2.4	1.1.1.1	0x41f1	Standard query (0)	walk-inbathtubshop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:26.681143045 CET	192.168.2.4	1.1.1.1	0x49a7	Standard query (0)	walk-inbathtubshop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:26.711137056 CET	192.168.2.4	1.1.1.1	0xc3d7	Standard query (0)	track.walk-inbathtubshop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:26.711170912 CET	192.168.2.4	1.1.1.1	0xe73d	Standard query (0)	track.walk-inbathtubshop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:27.788821936 CET	192.168.2.4	1.1.1.1	0x2cd4	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:27.788999081 CET	192.168.2.4	1.1.1.1	0xd617	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:28.907053947 CET	192.168.2.4	1.1.1.1	0xeb3f	Standard query (0)	b-js.ringba.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:28.907089949 CET	192.168.2.4	1.1.1.1	0xbc90	Standard query (0)	b-js.ringba.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:28.907987118 CET	192.168.2.4	1.1.1.1	0x80a0	Standard query (0)	script.anura.io	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:28.908117056 CET	192.168.2.4	1.1.1.1	0xf868	Standard query (0)	script.anura.io	65	IN (0x0001)	false
Dec 16, 2024 02:33:30.990750074 CET	192.168.2.4	1.1.1.1	0x4f19	Standard query (0)	create.lidstatic.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:30.991044044 CET	192.168.2.4	1.1.1.1	0x2ec8	Standard query (0)	create.lidstatic.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:30.991569996 CET	192.168.2.4	1.1.1.1	0x925e	Standard query (0)	api.trustedform.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:30.991957903 CET	192.168.2.4	1.1.1.1	0xbd89	Standard query (0)	api.trustedform.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:31.938620090 CET	192.168.2.4	1.1.1.1	0x3471	Standard query (0)	script.anura.io	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.938663960 CET	192.168.2.4	1.1.1.1	0x9cd9	Standard query (0)	script.anura.io	65	IN (0x0001)	false
Dec 16, 2024 02:33:32.004476070 CET	192.168.2.4	1.1.1.1	0xaeca	Standard query (0)	stun.anura.io	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.004544020 CET	192.168.2.4	1.1.1.1	0x778	Standard query (0)	stun.anura.io	28	IN (0x0001)	false
Dec 16, 2024 02:33:32.219023943 CET	192.168.2.4	1.1.1.1	0x6306	Standard query (0)	stun.anura.io	28	IN (0x0001)	false
Dec 16, 2024 02:33:32.220881939 CET	192.168.2.4	1.1.1.1	0x1a45	Standard query (0)	red.walk-inbathtub-shop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.220881939 CET	192.168.2.4	1.1.1.1	0xff6e	Standard query (0)	red.walk-inbathtub-shop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:32.272206068 CET	192.168.2.4	1.1.1.1	0xe2ad	Standard query (0)	display.ringba.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.272548914 CET	192.168.2.4	1.1.1.1	0xb639	Standard query (0)	display.ringba.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:32.274633884 CET	192.168.2.4	1.1.1.1	0xdedf	Standard query (0)	b-js.ringba.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.274739981 CET	192.168.2.4	1.1.1.1	0xacf2	Standard query (0)	b-js.ringba.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:33.180932045 CET	192.168.2.4	1.1.1.1	0x89d0	Standard query (0)	cdn.trustedform.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.181041956 CET	192.168.2.4	1.1.1.1	0xa258	Standard query (0)	cdn.trustedform.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:33.232367992 CET	192.168.2.4	1.1.1.1	0xd362	Standard query (0)	red.walk-inbathtub-shop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.232548952 CET	192.168.2.4	1.1.1.1	0xce89	Standard query (0)	red.walk-inbathtub-shop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:33.739020109 CET	192.168.2.4	1.1.1.1	0xd848	Standard query (0)	create.lidstatic.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.739249945 CET	192.168.2.4	1.1.1.1	0xc199	Standard query (0)	create.lidstatic.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:33.752007008 CET	192.168.2.4	1.1.1.1	0x11df	Standard query (0)	create.leadid.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.752474070 CET	192.168.2.4	1.1.1.1	0xbdab	Standard query (0)	create.leadid.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:34.989682913 CET	192.168.2.4	1.1.1.1	0xf670	Standard query (0)	display.ringba.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.989886999 CET	192.168.2.4	1.1.1.1	0xc0d2	Standard query (0)	display.ringba.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:35.720721006 CET	192.168.2.4	1.1.1.1	0x7ed3	Standard query (0)	cdn.trustedform.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.720995903 CET	192.168.2.4	1.1.1.1	0xc58b	Standard query (0)	cdn.trustedform.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:35.844821930 CET	192.168.2.4	1.1.1.1	0xc8ec	Standard query (0)	red.walk-inbathtub-shop.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.845062017 CET	192.168.2.4	1.1.1.1	0x62da	Standard query (0)	red.walk-inbathtub-shop.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:36.055685997 CET	192.168.2.4	1.1.1.1	0x800c	Standard query (0)	create.leadid.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.055828094 CET	192.168.2.4	1.1.1.1	0x83b1	Standard query (0)	create.leadid.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:36.068509102 CET	192.168.2.4	1.1.1.1	0x1b6d	Standard query (0)	d2m2wsoho8qq12.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.068509102 CET	192.168.2.4	1.1.1.1	0xc063	Standard query (0)	d2m2wsoho8qq12.cloudfront.net	65	IN (0x0001)	false
Dec 16, 2024 02:33:39.587989092 CET	192.168.2.4	1.1.1.1	0xbd9b	Standard query (0)	deviceid.trueleadid.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:39.588116884 CET	192.168.2.4	1.1.1.1	0x5c55	Standard query (0)	deviceid.trueleadid.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:41.730034113 CET	192.168.2.4	1.1.1.1	0x458f	Standard query (0)	create.leadid.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.730564117 CET	192.168.2.4	1.1.1.1	0x718e	Standard query (0)	create.leadid.com	65	IN (0x0001)	false
Dec 16, 2024 02:33:43.824476004 CET	192.168.2.4	1.1.1.1	0xe0f5	Standard query (0)	deviceid.trueleadid.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:43.824664116 CET	192.168.2.4	1.1.1.1	0xf375	Standard query (0)	deviceid.trueleadid.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 16, 2024 02:33:04.509078979 CET	1.1.1.1	192.168.2.4	0x7c24	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:04.509393930 CET	1.1.1.1	192.168.2.4	0x31fa	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 16, 2024 02:33:07.845733881 CET	1.1.1.1	192.168.2.4	0x320e	No error (0)	www.ipv4now.com		172.67.196.220	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:07.845733881 CET	1.1.1.1	192.168.2.4	0x320e	No error (0)	www.ipv4now.com		104.21.60.135	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:07.845994949 CET	1.1.1.1	192.168.2.4	0x6650	No error (0)	www.ipv4now.com			65	IN (0x0001)	false
Dec 16, 2024 02:33:11.220654011 CET	1.1.1.1	192.168.2.4	0x8164	No error (0)	cy6clk.com		44.226.223.11	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:11.220654011 CET	1.1.1.1	192.168.2.4	0x8164	No error (0)	cy6clk.com		52.24.227.163	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:11.220654011 CET	1.1.1.1	192.168.2.4	0x8164	No error (0)	cy6clk.com		35.84.54.147	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:15.467941999 CET	1.1.1.1	192.168.2.4	0x33d4	No error (0)	clktrack7.com		44.226.223.11	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:15.467941999 CET	1.1.1.1	192.168.2.4	0x33d4	No error (0)	clktrack7.com		35.84.54.147	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:15.467941999 CET	1.1.1.1	192.168.2.4	0x33d4	No error (0)	clktrack7.com		52.24.227.163	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:18.047192097 CET	1.1.1.1	192.168.2.4	0x51ff	No error (0)	track.walk-inbathtubshop.com		159.65.98.5	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:22.348375082 CET	1.1.1.1	192.168.2.4	0x6ddb	No error (0)	walk-inbathtubshop.com		167.99.100.230	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:24.804821014 CET	1.1.1.1	192.168.2.4	0x52e6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:24.804821014 CET	1.1.1.1	192.168.2.4	0x52e6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:24.804821014 CET	1.1.1.1	192.168.2.4	0x52e6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:24.804821014 CET	1.1.1.1	192.168.2.4	0x52e6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:26.818763018 CET	1.1.1.1	192.168.2.4	0x41f1	No error (0)	walk-inbathtubshop.com		167.99.100.230	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:26.864466906 CET	1.1.1.1	192.168.2.4	0xc3d7	No error (0)	track.walk-inbathtubshop.com		159.65.98.5	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:27.927460909 CET	1.1.1.1	192.168.2.4	0x2cd4	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:27.927460909 CET	1.1.1.1	192.168.2.4	0x2cd4	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:27.927460909 CET	1.1.1.1	192.168.2.4	0x2cd4	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:27.927460909 CET	1.1.1.1	192.168.2.4	0x2cd4	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.448434114 CET	1.1.1.1	192.168.2.4	0x80a0	No error (0)	script.anura.io		35.178.117.130	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.448434114 CET	1.1.1.1	192.168.2.4	0x80a0	No error (0)	script.anura.io		35.176.216.82	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.477129936 CET	1.1.1.1	192.168.2.4	0xeb3f	No error (0)	b-js.ringba.com	dt1xsxznqnno4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:29.477129936 CET	1.1.1.1	192.168.2.4	0xeb3f	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.21	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.477129936 CET	1.1.1.1	192.168.2.4	0xeb3f	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.52	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.477129936 CET	1.1.1.1	192.168.2.4	0xeb3f	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.129	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.477129936 CET	1.1.1.1	192.168.2.4	0xeb3f	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.95	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:29.477344036 CET	1.1.1.1	192.168.2.4	0xbc90	No error (0)	b-js.ringba.com	dt1xsxznqnno4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:31.222830057 CET	1.1.1.1	192.168.2.4	0x4f19	No error (0)	create.lidstatic.com		104.22.39.182	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.222830057 CET	1.1.1.1	192.168.2.4	0x4f19	No error (0)	create.lidstatic.com		104.22.38.182	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.222830057 CET	1.1.1.1	192.168.2.4	0x4f19	No error (0)	create.lidstatic.com		172.67.41.229	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.226094961 CET	1.1.1.1	192.168.2.4	0x2ec8	No error (0)	create.lidstatic.com			65	IN (0x0001)	false
Dec 16, 2024 02:33:31.324101925 CET	1.1.1.1	192.168.2.4	0x925e	No error (0)	api.trustedform.com		52.54.218.21	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.324101925 CET	1.1.1.1	192.168.2.4	0x925e	No error (0)	api.trustedform.com		35.171.247.6	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.324101925 CET	1.1.1.1	192.168.2.4	0x925e	No error (0)	api.trustedform.com		52.44.208.141	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.324101925 CET	1.1.1.1	192.168.2.4	0x925e	No error (0)	api.trustedform.com		44.217.218.16	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.324101925 CET	1.1.1.1	192.168.2.4	0x925e	No error (0)	api.trustedform.com		3.90.196.213	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:31.324101925 CET	1.1.1.1	192.168.2.4	0x925e	No error (0)	api.trustedform.com		44.193.31.48	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.076493979 CET	1.1.1.1	192.168.2.4	0x3471	No error (0)	script.anura.io		35.178.117.130	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.076493979 CET	1.1.1.1	192.168.2.4	0x3471	No error (0)	script.anura.io		35.176.216.82	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.217494965 CET	1.1.1.1	192.168.2.4	0xaeca	No error (0)	stun.anura.io		18.159.105.57	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.217494965 CET	1.1.1.1	192.168.2.4	0xaeca	No error (0)	stun.anura.io		18.158.229.59	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.413064003 CET	1.1.1.1	192.168.2.4	0xacf2	No error (0)	b-js.ringba.com	dt1xsxznqnno4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:32.413080931 CET	1.1.1.1	192.168.2.4	0xdedf	No error (0)	b-js.ringba.com	dt1xsxznqnno4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:32.413080931 CET	1.1.1.1	192.168.2.4	0xdedf	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.129	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.413080931 CET	1.1.1.1	192.168.2.4	0xdedf	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.52	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.413080931 CET	1.1.1.1	192.168.2.4	0xdedf	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.95	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.413080931 CET	1.1.1.1	192.168.2.4	0xdedf	No error (0)	dt1xsxznqnno4.cloudfront.net		18.66.161.21	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.515338898 CET	1.1.1.1	192.168.2.4	0xe2ad	No error (0)	display.ringba.com		34.196.202.149	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.515338898 CET	1.1.1.1	192.168.2.4	0xe2ad	No error (0)	display.ringba.com		34.229.26.21	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:32.515338898 CET	1.1.1.1	192.168.2.4	0xe2ad	No error (0)	display.ringba.com		18.213.81.220	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.315999985 CET	1.1.1.1	192.168.2.4	0x1a45	No error (0)	red.walk-inbathtub-shop.com	zgnka.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.315999985 CET	1.1.1.1	192.168.2.4	0x1a45	No error (0)	zgnka.ttrk.io	sin.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.315999985 CET	1.1.1.1	192.168.2.4	0x1a45	No error (0)	sin.ttrk.io		209.58.171.123	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.316948891 CET	1.1.1.1	192.168.2.4	0xff6e	No error (0)	red.walk-inbathtub-shop.com	zgnka.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.316948891 CET	1.1.1.1	192.168.2.4	0xff6e	No error (0)	zgnka.ttrk.io	sin.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.369997978 CET	1.1.1.1	192.168.2.4	0xd362	No error (0)	red.walk-inbathtub-shop.com	zgnka.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.369997978 CET	1.1.1.1	192.168.2.4	0xd362	No error (0)	zgnka.ttrk.io	sin.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.369997978 CET	1.1.1.1	192.168.2.4	0xd362	No error (0)	sin.ttrk.io		209.58.171.123	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.370151043 CET	1.1.1.1	192.168.2.4	0xce89	No error (0)	red.walk-inbathtub-shop.com	zgnka.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.370151043 CET	1.1.1.1	192.168.2.4	0xce89	No error (0)	zgnka.ttrk.io	sin.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:33.414031029 CET	1.1.1.1	192.168.2.4	0x89d0	No error (0)	cdn.trustedform.com		52.222.144.90	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.414031029 CET	1.1.1.1	192.168.2.4	0x89d0	No error (0)	cdn.trustedform.com		52.222.144.101	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.414031029 CET	1.1.1.1	192.168.2.4	0x89d0	No error (0)	cdn.trustedform.com		52.222.144.12	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.414031029 CET	1.1.1.1	192.168.2.4	0x89d0	No error (0)	cdn.trustedform.com		52.222.144.56	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.876144886 CET	1.1.1.1	192.168.2.4	0xc199	No error (0)	create.lidstatic.com			65	IN (0x0001)	false
Dec 16, 2024 02:33:33.876425028 CET	1.1.1.1	192.168.2.4	0xd848	No error (0)	create.lidstatic.com		172.67.41.229	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.876425028 CET	1.1.1.1	192.168.2.4	0xd848	No error (0)	create.lidstatic.com		104.22.39.182	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:33.876425028 CET	1.1.1.1	192.168.2.4	0xd848	No error (0)	create.lidstatic.com		104.22.38.182	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.073976994 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	create.leadid.com		35.170.168.120	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.073976994 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	create.leadid.com		44.206.91.249	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.073976994 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	create.leadid.com		54.88.59.227	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.073976994 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	create.leadid.com		50.17.139.157	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.073976994 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	create.leadid.com		54.227.246.42	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:34.073976994 CET	1.1.1.1	192.168.2.4	0x11df	No error (0)	create.leadid.com		54.243.61.7	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.127089024 CET	1.1.1.1	192.168.2.4	0xf670	No error (0)	display.ringba.com		34.229.26.21	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.127089024 CET	1.1.1.1	192.168.2.4	0xf670	No error (0)	display.ringba.com		34.196.202.149	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.127089024 CET	1.1.1.1	192.168.2.4	0xf670	No error (0)	display.ringba.com		18.213.81.220	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.860682011 CET	1.1.1.1	192.168.2.4	0x7ed3	No error (0)	cdn.trustedform.com		52.222.144.90	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.860682011 CET	1.1.1.1	192.168.2.4	0x7ed3	No error (0)	cdn.trustedform.com		52.222.144.12	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.860682011 CET	1.1.1.1	192.168.2.4	0x7ed3	No error (0)	cdn.trustedform.com		52.222.144.56	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.860682011 CET	1.1.1.1	192.168.2.4	0x7ed3	No error (0)	cdn.trustedform.com		52.222.144.101	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:35.982243061 CET	1.1.1.1	192.168.2.4	0x62da	No error (0)	red.walk-inbathtub-shop.com	zgnka.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:35.982243061 CET	1.1.1.1	192.168.2.4	0x62da	No error (0)	zgnka.ttrk.io	sin.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:35.982686996 CET	1.1.1.1	192.168.2.4	0xc8ec	No error (0)	red.walk-inbathtub-shop.com	zgnka.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:35.982686996 CET	1.1.1.1	192.168.2.4	0xc8ec	No error (0)	zgnka.ttrk.io	sin.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:35.982686996 CET	1.1.1.1	192.168.2.4	0xc8ec	No error (0)	sin.ttrk.io		209.58.171.123	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.194291115 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	create.leadid.com		35.170.168.120	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.194291115 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	create.leadid.com		54.227.246.42	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.194291115 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	create.leadid.com		54.88.59.227	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.194291115 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	create.leadid.com		50.17.139.157	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.194291115 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	create.leadid.com		44.206.91.249	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.194291115 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	create.leadid.com		54.243.61.7	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.365750074 CET	1.1.1.1	192.168.2.4	0x1b6d	No error (0)	d2m2wsoho8qq12.cloudfront.net		108.158.71.192	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.365750074 CET	1.1.1.1	192.168.2.4	0x1b6d	No error (0)	d2m2wsoho8qq12.cloudfront.net		108.158.71.206	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.365750074 CET	1.1.1.1	192.168.2.4	0x1b6d	No error (0)	d2m2wsoho8qq12.cloudfront.net		108.158.71.155	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:36.365750074 CET	1.1.1.1	192.168.2.4	0x1b6d	No error (0)	d2m2wsoho8qq12.cloudfront.net		108.158.71.47	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:40.022326946 CET	1.1.1.1	192.168.2.4	0x5c55	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:40.022835970 CET	1.1.1.1	192.168.2.4	0xbd9b	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:40.022835970 CET	1.1.1.1	192.168.2.4	0xbd9b	No error (0)	dw4luqp.ng.impervadns.net		45.223.19.68	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.867378950 CET	1.1.1.1	192.168.2.4	0x458f	No error (0)	create.leadid.com		54.227.246.42	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.867378950 CET	1.1.1.1	192.168.2.4	0x458f	No error (0)	create.leadid.com		44.206.91.249	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.867378950 CET	1.1.1.1	192.168.2.4	0x458f	No error (0)	create.leadid.com		54.88.59.227	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.867378950 CET	1.1.1.1	192.168.2.4	0x458f	No error (0)	create.leadid.com		54.243.61.7	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.867378950 CET	1.1.1.1	192.168.2.4	0x458f	No error (0)	create.leadid.com		35.170.168.120	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:41.867378950 CET	1.1.1.1	192.168.2.4	0x458f	No error (0)	create.leadid.com		50.17.139.157	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:43.961839914 CET	1.1.1.1	192.168.2.4	0xe0f5	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 02:33:43.961839914 CET	1.1.1.1	192.168.2.4	0xe0f5	No error (0)	dw4luqp.ng.impervadns.net		45.223.19.68	A (IP address)	IN (0x0001)	false
Dec 16, 2024 02:33:43.964031935 CET	1.1.1.1	192.168.2.4	0xf375	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.ipv4now.com

cy6clk.com

clktrack7.com

track.walk-inbathtubshop.com

walk-inbathtubshop.com

https:

code.jquery.com

script.anura.io

b-js.ringba.com

create.lidstatic.com

api.trustedform.com

display.ringba.com

cdn.trustedform.com

red.walk-inbathtub-shop.com

create.leadid.com

d2m2wsoho8qq12.cloudfront.net

deviceid.trueleadid.com

18.224.21.137

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	18.224.21.137	80	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 02:33:06.296789885 CET	462	OUT	GET /FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450 HTTP/1.1 Host: 18.224.21.137 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 16, 2024 02:33:07.517160892 CET	306	IN	HTTP/1.1 302 Found Date: Mon, 16 Dec 2024 01:33:07 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 X-Powered-By: PHP/5.4.16 Location: https://www.ipv4now.com/9W598/24NCH8Z/?sub1=quotesMD Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	18.224.21.137	80	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 02:33:51.308095932 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	172.67.196.220	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:10 UTC	686	OUT	GET /9W598/24NCH8Z/?sub1=quotesMD HTTP/1.1 Host: www.ipv4now.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:10 UTC	1305	IN	HTTP/1.1 302 Found Date: Mon, 16 Dec 2024 01:33:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://cy6clk.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD set-cookie: uniqueClick_24NCH8Z=ba965561-e8fb-479a-80eb-682aa8d7aead:1734312790; Path=/; Expires=Wed, 15 Jan 2025 01:33:10 GMT; SameSite=None set-cookie: transaction_id=1b6c78f3bf2f467f9e4224e9434d68c2; Path=/; Expires=Sun, 16 Mar 2025 01:33:10 GMT; SameSite=None vary: Origin x-eflow-request-id: c6af5bbe-4a49-4fe2-b386-4bf6bc5b5392 Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OmhsmKJpX1%2BDzCcnN8A7luVarZnApquXSGTIqEVzNmLuZzOXwnlzNEbxmPLULjXWfw5LfTVfkvL6hO84ZneI8qFK%2FOhFqjNmdxpVgOCwVvSjYb7t2k8U8P1UpeWQSxrnnbQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f2aec7d49c0729e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2620&min_rtt=1972&rtt_var=1202&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1264&delivery_rate=1480730&cwnd=165&unsent_bytes=0&cid=0183f49f799ebc81&ts=515&x=0"
2024-12-16 01:33:10 UTC	64	IN	Data Raw: 38 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 79 36 63 6c 6b 2e 63 6f 6d 2f 3f 61 3d 34 38 33 26 61 6d 70 3b 6f 63 3d 31 34 34 38 26 61 6d 70 3b 63 3d 37 35 38 37 26 61 6d Data Ascii: 88<a href="https://cy6clk.com/?a=483&oc=1448&c=7587&am
2024-12-16 01:33:10 UTC	78	IN	Data Raw: 70 3b 73 31 3d 37 26 61 6d 70 3b 73 32 3d 31 62 36 63 37 38 66 33 62 66 32 66 34 36 37 66 39 65 34 32 32 34 65 39 34 33 34 64 36 38 63 32 26 61 6d 70 3b 73 33 3d 71 75 6f 74 65 73 4d 44 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: p;s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD">Found</a>.
2024-12-16 01:33:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	44.226.223.11	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:12 UTC	727	OUT	GET /?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD HTTP/1.1 Host: cy6clk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:13 UTC	493	IN	HTTP/1.1 302 Found Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Bitness, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Wow64 Cache-Control: private Content-Length: 546 Content-Type: text/html; charset=utf-8 Date: Mon, 16 Dec 2024 01:33:12 GMT Location: https://cy6clk.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g Connection: close
2024-12-16 01:33:13 UTC	546	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 79 36 63 6c 6b 2e 63 6f 6d 2f 3f 61 3d 34 38 33 26 61 6d 70 3b 6f 63 3d 31 34 34 38 26 61 6d 70 3b 63 3d 37 35 38 37 26 61 6d 70 3b 73 31 3d 37 26 61 6d 70 3b 73 32 3d 31 62 36 63 37 38 66 33 62 66 32 66 34 36 37 66 39 65 34 32 32 34 65 39 34 33 34 64 36 38 63 32 26 61 6d 70 3b 73 33 3d 71 75 6f 74 65 73 4d 44 26 61 6d 70 3b 63 68 2d 72 65 64 69 72 3d 31 26 61 6d 70 3b 63 6b 6d 78 69 64 3d 63 74 66 6f 36 6d 37 6e 30 30 30 32 37 37 36 72 6c 6c 32 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://cy6clk.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g">here</a>.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	44.226.223.11	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:14 UTC	1017	OUT	GET /?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g HTTP/1.1 Host: cy6clk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:15 UTC	355	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 329 Content-Type: text/html; charset=utf-8 Date: Mon, 16 Dec 2024 01:33:14 GMT Location: https://clktrack7.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9 Connection: close
2024-12-16 01:33:15 UTC	329	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6b 74 72 61 63 6b 37 2e 63 6f 6d 2f 3f 61 3d 34 38 33 26 61 6d 70 3b 6f 63 3d 31 34 34 38 26 61 6d 70 3b 63 3d 37 35 38 37 26 61 6d 70 3b 73 31 3d 37 26 61 6d 70 3b 73 32 3d 31 62 36 63 37 38 66 33 62 66 32 66 34 36 37 66 39 65 34 32 32 34 65 39 34 33 34 64 36 38 63 32 26 61 6d 70 3b 73 33 3d 71 75 6f 74 65 73 4d 44 26 61 6d 70 3b 63 68 2d 72 65 64 69 72 3d 31 26 61 6d 70 3b 63 6b 6d 78 69 64 3d 63 74 66 6f 36 6d 37 6e 30 30 30 32 37 37 36 72 6c 6c 32 67 26 61 6d 70 3b 63 6b 6d 67 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://clktrack7.com/?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	44.226.223.11	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:16 UTC	814	OUT	GET /?a=483&oc=1448&c=7587&s1=7&s2=1b6c78f3bf2f467f9e4224e9434d68c2&s3=quotesMD&ch-redir=1&ckmxid=ctfo6m7n0002776rll2g&ckmguid=fad9696e-7bfb-4e1a-b770-10aa9bb437a9 HTTP/1.1 Host: clktrack7.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:17 UTC	803	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 199 Content-Type: text/html; charset=utf-8 Date: Mon, 16 Dec 2024 01:33:17 GMT Location: https://track.walk-inbathtubshop.com/?a=5286&c=2734&s1=483&s2=92464844 P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: sid=pdCpfYHbAc7cXej70HNAJPMlVQtWlWWTP+suDQneLE6XEn0c2Jb4Ow==; domain=.clktrack7.com; path=/; SameSite=None; secure; HttpOnly Set-Cookie: trk=EQ1Ma4q7HFTcXej70HNAJPMlVQtWlWWTP+suDQneLE6XEn0c2Jb4Ow==; domain=.clktrack7.com; expires=Wed, 16-Dec-2026 01:33:17 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: c1122=pdCpfYHbAc7Yt+P9AZ/21nrj3P/E853NTg84XgHe0CU=; domain=.clktrack7.com; expires=Wed, 15-Jan-2025 01:33:17 GMT; path=/; SameSite=None; secure; HttpOnly Connection: close
2024-12-16 01:33:17 UTC	199	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 2f 3f 61 3d 35 32 38 36 26 61 6d 70 3b 63 3d 32 37 33 34 26 61 6d 70 3b 73 31 3d 34 38 33 26 61 6d 70 3b 73 32 3d 39 32 34 36 34 38 34 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://track.walk-inbathtubshop.com/?a=5286&c=2734&s1=483&s2=92464844">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	159.65.98.5	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:19 UTC	704	OUT	GET /?a=5286&c=2734&s1=483&s2=92464844 HTTP/1.1 Host: track.walk-inbathtubshop.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:19 UTC	470	IN	HTTP/1.1 302 Found date: Mon, 16 Dec 2024 01:33:19 GMT content-type: text/html; charset=utf-8 content-length: 515 cache-control: private location: https://track.walk-inbathtubshop.com/?a=5286&c=2734&s1=483&s2=92464844&ch-redir=1&ckmxid=ctfo6no10001qs3t6oag accept-ch: Sec-Ch-Ua, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Bitness, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Wow64 connection: close
2024-12-16 01:33:19 UTC	515	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 2f 3f 61 3d 35 32 38 36 26 61 6d 70 3b 63 3d 32 37 33 34 26 61 6d 70 3b 73 31 3d 34 38 33 26 61 6d 70 3b 73 32 3d 39 32 34 36 34 38 34 34 26 61 6d 70 3b 63 68 2d 72 65 64 69 72 3d 31 26 61 6d 70 3b 63 6b 6d 78 69 64 3d 63 74 66 6f 36 6e 6f 31 30 30 30 31 71 73 33 74 36 6f 61 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0a 0a 3c 21 44 4f 43 54 59 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://track.walk-inbathtubshop.com/?a=5286&c=2734&s1=483&s2=92464844&ch-redir=1&ckmxid=ctfo6no10001qs3t6oag">here</a>.</h2></body></html><!DOCTY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	159.65.98.5	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:21 UTC	994	OUT	GET /?a=5286&c=2734&s1=483&s2=92464844&ch-redir=1&ckmxid=ctfo6no10001qs3t6oag HTTP/1.1 Host: track.walk-inbathtubshop.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:22 UTC	877	IN	HTTP/1.1 302 Found date: Mon, 16 Dec 2024 01:33:21 GMT content-type: text/html; charset=utf-8 content-length: 221 cache-control: private location: https://walk-inbathtubshop.com?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" set-cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; domain=.track.walk-inbathtubshop.com; path=/; SameSite=None; secure; HttpOnly set-cookie: tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; domain=.track.walk-inbathtubshop.com; expires=Wed, 16-Dec-2026 01:33:21 GMT; path=/; SameSite=None; secure; HttpOnly set-cookie: c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==; domain=.track.walk-inbathtubshop.com; expires=Tue, 17-Dec-2024 01:33:21 GMT; path=/; SameSite=None; secure; HttpOnly connection: close
2024-12-16 01:33:22 UTC	221	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 3f 61 69 64 32 3d 35 32 38 36 26 61 6d 70 3b 63 69 64 32 3d 37 30 30 36 30 30 31 35 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 35 32 38 36 26 61 6d 70 3b 6f 69 64 32 3d 39 39 32 26 61 6d 70 3b 73 31 3d 34 38 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://walk-inbathtubshop.com?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49755	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:24 UTC	723	OUT	GET /?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:24 UTC	174	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-12-16 01:33:24 UTC	16210	IN	Data Raw: 35 62 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 20 0a 09 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 09 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 09 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0a 09 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b Data Ascii: 5b1a<!DOCTYPE html><html><head> ... Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+
2024-12-16 01:33:24 UTC	7125	IN	Data Raw: 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 63 72 65 64 69 74 72 61 74 69 6e 67 22 20 76 61 6c 75 65 3d 22 45 78 63 65 6c 6c 65 6e 74 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 69 6e 75 65 22 20 69 64 3d 22 63 72 65 64 69 74 5f 65 78 63 65 6c 6c 65 6e 74 5f 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 23 39 65 63 65 32 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 3e 45 78 63 65 6c 6c 65 6e 74 3c 62 72 3e 3c 73 70 61 6e 3e 37 30 30 2b 20 2d 20 36 34 30 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: type="radio" name="creditrating" value="Excellent"><div class="continue" id="credit_excellent_btn" style="background:#9ece2a !important;color:#fff !important;">Excellent<br><span>700+ - 640</span></div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49756	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	631	OUT	GET /js/jquery-ui/jquery-ui.min.css HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	244	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:26 GMT Content-Type: text/css Content-Length: 18389 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-47d5" Accept-Ranges: bytes
2024-12-16 01:33:26 UTC	16140	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 32 20 2d 20 32 30 31 34 2d 31 32 2d 32 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 73 70 69 6e 6e 65 72 2e 63 73 73 2c 20 74 68 65 6d 65 2e 63 73 73 0a 2a 20 54 6f 20 76 69 65 77 20 61 6e 64 20 6d 6f 64 69 66 79 20 74 68 69 73 20 74 68 65 6d 65 2c 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 74 68 65 6d 65 72 6f 6c 6c 65 72 2f 3f 66 66 44 65 66 61 75 6c 74 3d 56 65 72 64 61 6e 61 25 32 43 41 72 69 61 6c 25 32 43 73 61 6e 73 2d 73 65 72 69 66 26 66 77 44 65 66 61 75 6c 74 3d 6e 6f 72 6d 61 6c 26 66 73 44 65 66 61 75 6c 74 3d 31 Data Ascii: /! jQuery UI - v1.11.2 - 2014-12-24 http://jqueryui.com* Includes: core.css, button.css, spinner.css, theme.css* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
2024-12-16 01:33:26 UTC	2249	IN	Data Raw: 65 72 79 2d 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 36 70 78 20 2d 31 37 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 39 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 6d 69 6e 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 31 39 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 63 6c 6f 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 70 78 20 2d 31 39 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 74 72 69 61 6e 67 6c 65 2d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 70 78 20 2d 31 39 Data Ascii: ery-3{background-position:-96px -176px}.ui-icon-circle-plus{background-position:0 -192px}.ui-icon-circle-minus{background-position:-16px -192px}.ui-icon-circle-close{background-position:-32px -192px}.ui-icon-circle-triangle-e{background-position:-48px -19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	610	OUT	GET /style.css HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	240	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:26 GMT Content-Type: text/css Content-Length: 112 Last-Modified: Fri, 13 Apr 2018 20:29:13 GMT Connection: close ETag: "5ad11319-70" Accept-Ranges: bytes
2024-12-16 01:33:26 UTC	112	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 2f 72 65 73 65 74 2e 63 73 73 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 2f 61 6c 6c 2e 63 73 73 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 2f 6d 65 64 69 61 2e 63 73 73 29 3b Data Ascii: @import url(css/fonts.css);@import url(css/reset.css);@import url(css/all.css);@import url(css/media.css);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	610	OUT	GET /js/jquery-1.11.1.min.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	259	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:26 GMT Content-Type: application/javascript Content-Length: 95786 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-1762a" Accept-Ranges: bytes
2024-12-16 01:33:26 UTC	16125	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-12-16 01:33:26 UTC	16384	IN	Data Raw: 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 62 5b 30 5d 3d 61 2c 64 28 62 2c 6e 75 6c 6c 2c 66 2c 63 29 2c 21 63 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 62 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: !(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:hb(function(a){return function(b){return fb(a,b).length>0}}),contains:hb(function(a){return function(b){return(b.textContent\|\|b.innerText\|\|e(b)).indexOf(a)>-1}}),lang:hb(function(a){
2024-12-16 01:33:26 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 66 26 26 28 66 3d 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 29 29 3a 66 3d 67 2c 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 6d 2e 61 63 63 65 70 74 44 61 74 61 28 61 29 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 67 3d 66 3f 6d 2e 63 61 63 68 65 3a 61 2c 68 3d 66 3f 61 5b 6d 2e 65 78 70 61 6e 64 6f 5d 3a 6d 2e 65 78 70 61 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6d 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d 62 2e 63 6f 6e 63 61 74 28 6d 2e 6d 61 70 28 62 2c 6d 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 62 20 69 6e 20 64 3f 62 3d 5b 62 5d 3a 28 62 3d 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 2c 62 3d Data Ascii: null==f&&(f=g[m.camelCase(b)])):f=g,f}}function R(a,b,c){if(m.acceptData(a)){var d,e,f=a.nodeType,g=f?m.cache:a,h=f?a[m.expando]:m.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){m.isArray(b)?b=b.concat(m.map(b,m.camelCase)):b in d?b=[b]:(b=m.camelCase(b),b=
2024-12-16 01:33:26 UTC	16384	IN	Data Raw: 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 30 2c 66 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4b 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4b 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d 63 5b 65 5d 29 3b 65 2b 2b 29 21 62 7c 7c 6d 2e 6e 6f 64 65 4e 61 6d 65 28 64 2c 62 29 3f 66 2e 70 75 73 68 28 64 29 3a 6d 2e 6d 65 72 67 65 28 66 2c 75 62 28 64 2c 62 29 29 3b 72 65 74 75 72 Data Ascii: (a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==K?a.getElementsByTagName(b\|\|""):typeof a.querySelectorAll!==K?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=c[e]);e++)!b\|\|m.nodeName(d,b)?f.push(d):m.merge(f,ub(d,b));retur
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 61 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 7d 2c 6d 2e 66 78 3d 5a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 6d 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 24 62 2c 5f 62 2c 61 63 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 62 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 63 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 63 3d 5b 69 63 5d 2c 65 63 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 61 2c 62 29 2c 64 3d 63 2e 63 75 72 28 29 2c 65 3d 62 63 2e 65 78 65 63 28 62 29 2c 66 3d 65 Data Ascii: .5-Math.cos(aMath.PI)/2}},m.fx=Zb.prototype.init,m.fx.step={};var $b,_b,ac=/^(?:toggle\|show\|hide)$/,bc=new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cc=/queueHooks$/,dc=[ic],ec={"*":[function(a,b){var c=this.createTween(a,b),d=c.cur(),e=bc.exec(b),f=e
2024-12-16 01:33:27 UTC	14125	IN	Data Raw: 66 28 68 5b 67 5d 26 26 68 5b 67 5d 2e 74 65 73 74 28 65 29 29 7b 69 2e 75 6e 73 68 69 66 74 28 67 29 3b 62 72 65 61 6b 7d 69 66 28 69 5b 30 5d 69 6e 20 63 29 66 3d 69 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 67 20 69 6e 20 63 29 7b 69 66 28 21 69 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 2b 22 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 29 2c 63 5b 66 5d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 50 63 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3d 7b 7d 2c 6b 3d 61 2e 64 61 74 61 54 79 70 65 73 2e 73 6c 69 63 65 28 29 3b 69 66 28 6b 5b 31 5d 29 Data Ascii: f(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]\|\|a.converters[g+" "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f),c[f]):void 0}function Pc(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49760	159.65.98.5	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	732	OUT	GET /d.js HTTP/1.1 Host: track.walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==
2024-12-16 01:33:26 UTC	230	IN	HTTP/1.1 200 OK date: Mon, 16 Dec 2024 01:33:26 GMT content-type: application/javascript content-length: 7695 last-modified: Sat, 15 Jun 2024 01:49:49 GMT accept-ranges: bytes etag: "80dc754ec6beda1:0" connection: close
2024-12-16 01:33:26 UTC	4114	IN	Data Raw: 76 61 72 20 43 4b 4d 20 3d 20 7b 0a 09 75 73 65 5f 69 66 72 61 6d 65 3a 20 66 61 6c 73 65 2c 0a 09 66 6f 72 6d 5f 73 65 6c 65 63 74 6f 72 3a 20 22 23 63 6b 6d 5f 66 6f 72 6d 22 2c 0a 09 73 75 62 6d 69 74 5f 73 65 6c 65 63 74 6f 72 3a 20 22 3a 73 75 62 6d 69 74 22 2c 0a 09 69 6e 69 74 5f 66 6f 63 75 73 3a 20 66 61 6c 73 65 2c 0a 09 65 72 72 6f 72 5f 74 69 74 6c 65 3a 20 22 45 72 72 6f 72 22 2c 0a 09 72 65 71 75 69 72 65 64 5f 65 72 72 6f 72 3a 20 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 0a 09 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 3a 20 22 50 6c 65 61 73 65 20 66 69 78 20 61 6c 6c 20 68 69 67 68 6c 69 67 68 74 65 64 20 66 69 65 6c 64 73 2e 22 2c 0a 09 61 6a 61 78 5f 74 69 6d 65 6f 75 74 3a 20 38 30 30 30 2c 0a Data Ascii: var CKM = {use_iframe: false,form_selector: "#ckm_form",submit_selector: ":submit",init_focus: false,error_title: "Error",required_error: "This field is required.",validation_error: "Please fix all highlighted fields.",ajax_timeout: 8000,
2024-12-16 01:33:26 UTC	3581	IN	Data Raw: 67 72 6f 75 70 20 2b 20 22 5d 22 2c 20 63 6b 6d 5f 66 6f 72 6d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 20 65 6c 29 7b 0a 09 09 09 09 09 69 66 20 28 65 6c 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 21 3d 20 24 28 65 6c 29 2e 61 74 74 72 28 22 6d 61 78 6c 65 6e 67 74 68 22 29 20 2d 20 30 29 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 28 66 69 6e 20 3d 20 66 61 6c 73 65 29 3b 0a 09 09 09 09 09 76 61 6c 20 2b 3d 20 65 6c 2e 76 61 6c 75 65 3b 0a 09 09 09 09 7d 29 3b 0a 09 09 09 09 69 66 20 28 21 66 69 6e 29 20 7b 0a 09 09 09 09 09 69 66 20 28 43 4b 4d 2e 73 75 62 6d 69 74 74 69 6e 67 29 0a 09 09 09 09 09 09 66 6f 72 6d 61 74 5f 69 6e 76 61 6c 69 64 28 6d 65 2c 20 6d 65 2e 64 61 74 61 28 22 65 72 72 6f 72 22 29 20 7c 7c 20 43 4b 4d 2e 72 65 71 75 69 Data Ascii: group + "]", ckm_form).each(function(i, el){if (el.value.length != $(el).attr("maxlength") - 0)return (fin = false);val += el.value;});if (!fin) {if (CKM.submitting)format_invalid(me, me.data("error") \|\| CKM.requi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49759	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	616	OUT	GET /js/jquery-ui/jquery-ui.min.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	258	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:26 GMT Content-Type: application/javascript Content-Length: 24224 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-5ea0" Accept-Ranges: bytes
2024-12-16 01:33:26 UTC	16126	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 32 20 2d 20 32 30 31 34 2d 31 32 2d 32 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 73 70 69 6e 6e 65 72 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 Data Ascii: /! jQuery UI - v1.11.2 - 2014-12-24 http://jqueryui.com* Includes: core.js, widget.js, button.js, spinner.js* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */(function(e){"function"==typeof define&&define.amd?define(["jquery
2024-12-16 01:33:26 UTC	8098	IN	Data Raw: 70 75 73 68 28 22 75 69 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 69 63 6f 6e 22 2b 28 61 3f 22 73 22 3a 73 2e 70 72 69 6d 61 72 79 3f 22 2d 70 72 69 6d 61 72 79 22 3a 22 2d 73 65 63 6f 6e 64 61 72 79 22 29 29 2c 73 2e 70 72 69 6d 61 72 79 26 26 74 2e 70 72 65 70 65 6e 64 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 20 75 69 2d 69 63 6f 6e 20 22 2b 73 2e 70 72 69 6d 61 72 79 2b 22 27 3e 3c 2f 73 70 61 6e 3e 22 29 2c 73 2e 73 65 63 6f 6e 64 61 72 79 26 26 74 2e 61 70 70 65 6e 64 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 20 75 69 2d 69 63 6f 6e 20 22 2b 73 2e 73 65 63 6f 6e 64 61 72 79 2b 22 27 3e 3c 2f 73 70 61 6e 3e 22 Data Ascii: push("ui-button-text-icon"+(a?"s":s.primary?"-primary":"-secondary")),s.primary&&t.prepend("<span class='ui-button-icon-primary ui-icon "+s.primary+"'></span>"),s.secondary&&t.append("<span class='ui-button-icon-secondary ui-icon "+s.secondary+"'></span>"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	604	OUT	GET /js/form_custom.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	256	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:26 GMT Content-Type: application/javascript Content-Length: 3451 Last-Modified: Fri, 13 Apr 2018 20:29:16 GMT Connection: close ETag: "5ad1131c-d7b" Accept-Ranges: bytes
2024-12-16 01:33:26 UTC	3451	IN	Data Raw: 24 2e 66 6e 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 0d 0a 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 0d 0a 09 09 76 61 72 20 63 6c 61 73 73 65 73 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 63 6c 61 73 73 22 29 3b 0d 0a 09 09 63 6c 61 73 73 65 73 20 3d 20 63 6c 61 73 73 65 73 2e 73 70 6c 69 74 28 27 20 27 29 3b 0d 0a 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 74 69 6f 6e 73 0d 0a 20 20 20 20 09 76 61 72 20 24 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 2c 20 6e 75 6d 62 65 72 4f 66 4f 70 74 69 6f 6e 73 20 3d 20 24 28 74 68 69 73 29 2e 63 68 69 6c 64 72 65 6e 28 27 6f 70 74 69 6f 6e 27 29 2e 6c 65 6e 67 Data Ascii: $.fn.customSelect = function() { return this.each(function() {var classes = $(this).attr("class");classes = classes.split(' ');// Cache the number of options var $this = $(this), numberOfOptions = $(this).children('option').leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	597	OUT	GET /js/main.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:26 GMT Content-Type: application/javascript Content-Length: 9290 Last-Modified: Fri, 16 Apr 2021 17:50:17 GMT Connection: close ETag: "6079ce59-244a" Accept-Ranges: bytes
2024-12-16 01:33:26 UTC	9290	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4d 4d 5f 6f 70 65 6e 42 72 57 69 6e 64 6f 77 28 74 68 65 55 52 4c 2c 77 69 6e 4e 61 6d 65 2c 66 65 61 74 75 72 65 73 29 20 7b 0a 2f 2f 76 32 2e 30 0a 09 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 74 68 65 55 52 4c 2c 77 69 6e 4e 61 6d 65 2c 66 65 61 74 75 72 65 73 29 3b 0a 7d 09 09 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 44 4e 43 50 68 6f 6e 65 4e 75 6d 62 65 72 28 70 68 6f 6e 65 29 7b 0a 09 76 61 72 20 6a 71 78 68 72 20 3d 20 24 2e 61 6a 61 78 28 7b 0a 09 09 75 72 6c 3a 20 22 2f 76 61 6c 69 64 61 74 65 2e 70 68 70 3f 70 68 6f 6e 65 3d 22 20 2b 20 70 68 6f 6e 65 2c 0a 09 09 64 61 74 61 54 79 70 65 3a 20 22 6a 73 6f 6e 22 2c 0a 09 09 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 09 20 20 0a 09 09 09 63 6f Data Ascii: function MM_openBrWindow(theURL,winName,features) {//v2.0window.open(theURL,winName,features);}function isDNCPhoneNumber(phone){var jqxhr = $.ajax({url: "/validate.php?phone=" + phone,dataType: "json",success: function(data) { co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49766	151.101.194.137	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	576	OUT	GET /ui/1.11.4/themes/smoothness/jquery-ui.css HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	582	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35212 Server: nginx Content-Type: text/css Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-898c" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 993102 Date: Mon, 16 Dec 2024 01:33:26 GMT X-Served-By: cache-lga21926-LGA, cache-ewr-kewr1740032-EWR X-Cache: HIT, HIT X-Cache-Hits: 1291, 0 X-Timer: S1734312806.451237,VS0,VE2 Vary: Accept-Encoding
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 34 20 2d 20 32 30 31 35 2d 30 33 2d 31 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 6d 65 6e 75 2e 63 73 73 2c 20 73 6c 69 64 65 72 2e 63 73 73 2c 20 Data Ascii: /! jQuery UI - v1.11.4 - 2015-03-11 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slider.css,
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 30 61 30 61 26 69 63 6f 6e 43 6f 6c 6f 72 45 72 72 6f 72 3d 63 64 30 61 30 61 26 62 67 43 6f 6c 6f 72 4f 76 65 72 6c 61 79 3d 61 61 61 61 61 61 26 62 67 54 65 78 74 75 72 65 4f 76 65 72 6c 61 79 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 4f 76 65 72 6c 61 79 3d 30 26 6f 70 61 63 69 74 79 4f 76 65 72 6c 61 79 3d 33 30 26 62 67 43 6f 6c 6f 72 53 68 61 64 6f 77 3d 61 61 61 61 61 61 26 62 67 54 65 78 74 75 72 65 53 68 61 64 6f 77 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 30 26 6f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 33 30 26 74 68 69 63 6b 6e 65 73 73 53 68 61 64 6f 77 3d 38 70 78 26 6f 66 66 73 65 74 54 6f 70 53 68 61 64 6f 77 3d 2d 38 70 78 26 6f 66 66 73 65 74 4c 65 66 74 53 68 61 64 6f 77 3d 2d 38 70 78 26 63 Data Ascii: 0a0a&iconColorError=cd0a0a&bgColorOverlay=aaaaaa&bgTextureOverlay=flat&bgImgOpacityOverlay=0&opacityOverlay=30&bgColorShadow=aaaaaa&bgTextureShadow=flat&bgImgOpacityShadow=0&opacityShadow=30&thicknessShadow=8px&offsetTopShadow=-8px&offsetLeftShadow=-8px&c
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 6e 74 3a 20 2d 39 39 39 39 39 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 0a 2f 2a 20 4d 69 73 63 20 76 69 73 75 61 6c 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 20 4f 76 65 72 6c 61 79 73 20 2a 2f 0a 2e 75 69 2d 77 69 64 67 65 74 2d 6f 76 65 72 6c 61 79 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 Data Ascii: nt: -99999px;overflow: hidden;background-repeat: no-repeat;}/* Misc visuals----------------------------------// Overlays */.ui-widget-overlay {position: fixed;top: 0;left: 0;width: 100%;height: 100%;}.ui-accordion .ui-accordion-h
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6f 6e 6c 79 20 7b 0a 09 77 69 64 74 68 3a 20 32 2e 34 65 6d 3b 0a 7d 0a 2e 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 73 2d 6f 6e 6c 79 20 7b 0a 09 77 69 64 74 68 3a 20 33 2e 34 65 6d 3b 0a 7d 0a 62 75 74 74 6f 6e 2e 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 73 2d 6f 6e 6c 79 20 7b 0a 09 77 69 64 74 68 3a 20 33 2e 37 65 6d 3b 0a 7d 0a 0a 2f 2a 20 62 75 74 74 6f 6e 20 74 65 78 74 20 65 6c 65 6d 65 6e 74 20 2a 2f 0a 2e 75 69 2d 62 75 74 74 6f 6e 20 2e 75 69 2d 62 75 74 74 6f 6e 2d 74 65 78 74 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 2e 75 69 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 6f 6e 6c 79 20 2e 75 69 2d 62 75 74 74 6f 6e 2d 74 Data Ascii: -button-icon-only {width: 2.4em;}.ui-button-icons-only {width: 3.4em;}button.ui-button-icons-only {width: 3.7em;}/* button text element */.ui-button .ui-button-text {display: block;line-height: normal;}.ui-button-text-only .ui-button-t
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 65 63 6f 6e 64 61 72 79 2c 0a 2e 75 69 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 69 63 6f 6e 73 20 2e 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2c 0a 2e 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 73 2d 6f 6e 6c 79 20 2e 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 20 7b 0a 09 72 69 67 68 74 3a 20 2e 35 65 6d 3b 0a 7d 0a 0a 2f 2a 20 62 75 74 74 6f 6e 20 73 65 74 73 20 2a 2f 0a 2e 75 69 2d 62 75 74 74 6f 6e 73 65 74 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 37 70 78 3b 0a 7d 0a 2e 75 69 2d 62 75 74 74 6f 6e 73 65 74 20 2e 75 69 2d 62 75 74 74 6f 6e 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 2e 33 65 6d 3b 0a 7d 0a 0a 2f 2a 20 77 Data Ascii: econdary,.ui-button-text-icons .ui-button-icon-secondary,.ui-button-icons-only .ui-button-icon-secondary {right: .5em;}/* button sets /.ui-buttonset {margin-right: 7px;}.ui-buttonset .ui-button {margin-left: 0;margin-right: -.3em;}/ w
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 67 69 6e 3a 20 31 70 78 20 30 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 79 65 61 72 20 7b 0a 09 77 69 64 74 68 3a 20 34 35 25 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 39 65 6d 3b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 2e 34 65 6d 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 74 68 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 37 65 6d 20 2e Data Ascii: gin: 1px 0;}.ui-datepicker select.ui-datepicker-month,.ui-datepicker select.ui-datepicker-year {width: 45%;}.ui-datepicker table {width: 100%;font-size: .9em;border-collapse: collapse;margin: 0 0 .4em;}.ui-datepicker th {padding: .7em .
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6d 69 64 64 6c 65 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 7b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 62 75 74 74 6f 6e 70 61 6e 65 20 7b 0a 09 63 6c 65 61 72 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 72 6f 77 2d 62 72 65 61 6b 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b Data Ascii: .ui-datepicker-header,.ui-datepicker-multi .ui-datepicker-group-middle .ui-datepicker-header {border-left-width: 0;}.ui-datepicker-multi .ui-datepicker-buttonpane {clear: left;}.ui-datepicker-row-break {clear: both;width: 100%;font-size: 0;
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 73 69 73 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 2d 63 6c 6f 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 72 69 67 68 74 3a 20 2e 33 65 6d 3b 0a 09 74 6f 70 3a 20 35 30 25 3b 0a 09 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 30 70 78 20 30 20 30 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 35 65 6d 20 31 65 6d 3b 0a 09 62 61 63 6b 67 72 6f 75 6e Data Ascii: sis;}.ui-dialog .ui-dialog-titlebar-close {position: absolute;right: .3em;top: 50%;width: 20px;margin: -10px 0 0 0;padding: 1px;height: 20px;}.ui-dialog .ui-dialog-content {position: relative;border: 0;padding: .5em 1em;backgroun
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 69 2d 6d 65 6e 75 20 2e 75 69 2d 73 74 61 74 65 2d 66 6f 63 75 73 2c 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 7d 0a 0a 2f 2a 20 69 63 6f 6e 20 73 75 70 70 6f 72 74 20 2a 2f 0a 2e 75 69 2d 6d 65 6e 75 2d 69 63 6f 6e 73 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 69 2d 6d 65 6e 75 2d 69 63 6f 6e 73 20 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 20 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 0a 2f 2a 20 6c 65 66 74 2d 61 6c 69 67 6e 65 64 20 2a 2f 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 69 63 6f 6e 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 62 6f Data Ascii: i-menu .ui-state-focus,.ui-menu .ui-state-active {margin: -1px;}/* icon support /.ui-menu-icons {position: relative;}.ui-menu-icons .ui-menu-item {padding-left: 2em;}/ left-aligned */.ui-menu .ui-icon {position: absolute;top: 0;bo
2024-12-16 01:33:26 UTC	1378	IN	Data Raw: 6b 53 68 62 75 65 62 30 77 74 49 35 30 7a 6d 30 32 70 62 76 77 66 57 45 4d 57 42 51 31 7a 4b 47 6c 4c 49 68 73 6b 69 45 50 6d 39 52 36 76 52 58 78 56 34 5a 7a 57 54 32 79 48 4f 47 70 57 4d 79 6f 72 62 6c 4b 6c 4e 70 38 48 6d 48 45 62 2f 6c 43 58 6a 63 57 37 62 6d 74 58 50 38 58 74 32 32 39 4f 56 57 52 31 66 6f 64 32 65 57 71 4e 66 48 75 4d 6a 58 43 50 6b 49 47 4e 69 6c 65 4f 69 49 6d 56 6d 43 4f 45 6d 6f 53 66 6e 33 79 58 6c 4a 57 6d 6f 48 47 68 71 70 36 69 6c 59 75 57 59 70 6d 54 71 4b 55 67 41 41 49 66 6b 45 43 51 45 41 41 51 41 73 41 41 41 41 41 43 67 41 4b 41 41 41 41 70 69 45 48 36 6b 62 35 38 62 69 51 33 46 4e 57 74 4d 46 57 57 33 65 4e 56 63 6f 6a 75 46 47 66 71 6e 5a 71 53 65 62 75 53 30 36 77 35 56 38 30 2f 58 30 32 70 4b 65 38 7a 46 77 50 36 45 Data Ascii: kShbueb0wtI50zm02pbvwfWEMWBQ1zKGlLIhskiEPm9R6vRXxV4ZzWT2yHOGpWMyorblKlNp8HmHEb/lCXjcW7bmtXP8Xt229OVWR1fod2eWqNfHuMjXCPkIGNileOiImVmCOEmoSfn3yXlJWmoHGhqp6ilYuWYpmTqKUgAAIfkECQEAAQAsAAAAACgAKAAAApiEH6kb58biQ3FNWtMFWW3eNVcojuFGfqnZqSebuS06w5V80/X02pKe8zFwP6E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49765	151.101.194.137	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:26 UTC	543	OUT	GET /ui/1.12.1/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:26 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 520714 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-7f20a" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 16 Dec 2024 01:33:26 GMT Age: 2224581 X-Served-By: cache-lga21932-LGA, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 1260, 1 X-Timer: S1734312806.451269,VS0,VE4 Vary: Accept-Encoding
2024-12-16 01:33:26 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-12-16 01:33:26 UTC	16384	IN	Data Raw: 6c 65 6d 65 6e 74 20 61 72 67 75 6d 65 6e 74 2c 20 73 68 75 66 66 6c 65 20 61 6e 64 20 75 73 65 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 0a 09 09 69 66 20 28 20 21 68 61 6e 64 6c 65 72 73 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 72 73 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 64 65 6c 65 67 61 74 65 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 77 69 64 67 65 74 28 29 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 64 65 6c 65 67 61 74 65 45 6c 65 6d 65 6e 74 20 3d 20 24 28 20 65 6c 65 6d 65 6e 74 20 29 3b 0a 09 09 09 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 20 3d 20 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 2e 61 64 64 28 20 65 6c 65 6d 65 6e 74 20 Data Ascii: lement argument, shuffle and use this.elementif ( !handlers ) {handlers = element;element = this.element;delegateElement = this.widget();} else {element = delegateElement = $( element );this.bindings = this.bindings.add( element
2024-12-16 01:33:26 UTC	16384	IN	Data Raw: 09 09 6f 66 66 73 65 74 4c 65 66 74 20 3d 20 77 69 74 68 69 6e 2e 69 73 57 69 6e 64 6f 77 20 3f 20 77 69 74 68 69 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 20 3a 20 77 69 74 68 69 6e 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 0a 09 09 09 09 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 3d 20 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 2d 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 0a 09 09 09 09 6f 76 65 72 4c 65 66 74 20 3d 20 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 2d 20 6f 66 66 73 65 74 4c 65 66 74 2c 0a 09 09 09 09 6f 76 65 72 52 69 67 68 74 20 3d 20 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 2b 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 20 2d 20 6f 75 74 65 72 Data Ascii: offsetLeft = within.isWindow ? within.scrollLeft : within.offset.left,collisionPosLeft = position.left - data.collisionPosition.marginLeft,overLeft = collisionPosLeft - offsetLeft,overRight = collisionPosLeft + data.collisionWidth - outer
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 28 20 72 20 2d 20 67 20 29 20 2f 20 64 69 66 66 20 29 20 2b 20 32 34 30 3b 0a 09 7d 0a 0a 09 2f 2f 20 43 68 72 6f 6d 61 20 28 64 69 66 66 29 20 3d 3d 20 30 20 6d 65 61 6e 73 20 67 72 65 79 73 63 61 6c 65 20 77 68 69 63 68 2c 20 62 79 20 64 65 66 69 6e 69 74 69 6f 6e 2c 20 73 61 74 75 72 61 74 69 6f 6e 20 3d 20 30 25 0a 09 2f 2f 20 6f 74 68 65 72 77 69 73 65 2c 20 73 61 74 75 72 61 74 69 6f 6e 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 72 61 74 69 6f 20 6f 66 20 63 68 72 6f 6d 61 20 28 64 69 66 66 29 20 74 6f 20 6c 69 67 68 74 6e 65 73 73 20 28 61 64 64 29 0a 09 69 66 20 28 20 64 69 66 66 20 3d 3d 3d 20 30 20 29 20 7b 0a 09 09 73 20 3d 20 30 3b 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 6c 20 3c 3d 20 30 2e 35 20 29 20 7b 0a 09 09 73 20 3d 20 64 69 Data Ascii: ( r - g ) / diff ) + 240;}// Chroma (diff) == 0 means greyscale which, by definition, saturation = 0%// otherwise, saturation is based on the ratio of chroma (diff) to lightness (add)if ( diff === 0 ) {s = 0;} else if ( l <= 0.5 ) {s = di
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 09 72 65 74 75 72 6e 20 7b 0a 09 09 09 78 3a 20 78 2c 0a 09 09 09 79 3a 20 79 0a 09 09 7d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 43 72 65 61 74 65 73 20 61 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 65 6c 65 6d 65 6e 74 20 73 6f 20 74 68 61 74 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 65 6c 65 6d 65 6e 74 20 63 61 6e 20 62 65 20 6d 61 64 65 20 61 62 73 6f 6c 75 74 65 0a 09 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 76 61 72 20 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 09 09 09 63 73 73 50 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 65 6e 74 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 65 6e 74 2e 70 6f 73 69 74 69 6f Data Ascii: return {x: x,y: y};},// Creates a placeholder element so that the original element can be made absolutecreatePlaceholder: function( element ) {var placeholder,cssPosition = element.css( "position" ),position = element.positio
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 6f 74 68 20 7c 7c 20 64 69 72 65 63 74 69 6f 6e 20 3d 3d 3d 20 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 0a 09 09 76 65 72 74 69 63 61 6c 20 3d 20 62 6f 74 68 20 7c 7c 20 64 69 72 65 63 74 69 6f 6e 20 3d 3d 3d 20 22 76 65 72 74 69 63 61 6c 22 3b 0a 0a 09 73 74 61 72 74 20 3d 20 65 6c 65 6d 65 6e 74 2e 63 73 73 43 6c 69 70 28 29 3b 0a 09 61 6e 69 6d 61 74 65 2e 63 6c 69 70 20 3d 20 7b 0a 09 09 74 6f 70 3a 20 76 65 72 74 69 63 61 6c 20 3f 20 28 20 73 74 61 72 74 2e 62 6f 74 74 6f 6d 20 2d 20 73 74 61 72 74 2e 74 6f 70 20 29 20 2f 20 32 20 3a 20 73 74 61 72 74 2e 74 6f 70 2c 0a 09 09 72 69 67 68 74 3a 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 3f 20 28 20 73 74 61 72 74 2e 72 69 67 68 74 20 2d 20 73 74 61 72 74 2e 6c 65 66 74 20 29 20 2f 20 32 20 3a 20 73 74 61 72 74 Data Ascii: oth \|\| direction === "horizontal",vertical = both \|\| direction === "vertical";start = element.cssClip();animate.clip = {top: vertical ? ( start.bottom - start.top ) / 2 : start.top,right: horizontal ? ( start.right - start.left ) / 2 : start
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 2f 2f 3e 3e 6c 61 62 65 6c 3a 20 53 68 61 6b 65 20 45 66 66 65 63 74 0a 2f 2f 3e 3e 67 72 6f 75 70 3a 20 45 66 66 65 63 74 73 0a 2f 2f 3e 3e 64 65 73 63 72 69 70 74 69 6f 6e 3a 20 53 68 61 6b 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 68 6f 72 69 7a 6f 6e 74 61 6c 6c 79 20 6f 72 20 76 65 72 74 69 63 61 6c 6c 79 20 6e 20 74 69 6d 65 73 2e 0a 2f 2f 3e 3e 64 6f 63 73 3a 20 68 74 74 70 3a 2f 2f 61 70 69 2e 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 73 68 61 6b 65 2d 65 66 66 65 63 74 2f 0a 2f 2f 3e 3e 64 65 6d 6f 73 3a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 65 66 66 65 Data Ascii: under the MIT license. * http://jquery.org/license *///>>label: Shake Effect//>>group: Effects//>>description: Shakes an element horizontally or vertically n times.//>>docs: http://api.jqueryui.com/shake-effect///>>demos: http://jqueryui.com/effe
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 7d 0a 09 09 74 68 69 73 2e 5f 72 65 66 72 65 73 68 28 29 3b 0a 09 7d 2c 0a 0a 09 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 7b 0a 09 09 09 68 65 61 64 65 72 3a 20 74 68 69 73 2e 61 63 74 69 76 65 2c 0a 09 09 09 70 61 6e 65 6c 3a 20 21 74 68 69 73 2e 61 63 74 69 76 65 2e 6c 65 6e 67 74 68 20 3f 20 24 28 29 20 3a 20 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 28 29 0a 09 09 7d 3b 0a 09 7d 2c 0a 0a 09 5f 63 72 65 61 74 65 49 63 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 76 61 72 20 69 63 6f 6e 2c 20 63 68 69 6c 64 72 65 6e 2c 0a 09 09 09 69 63 6f 6e 73 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 73 3b 0a 0a 09 09 69 66 20 28 20 69 63 6f Data Ascii: }this._refresh();},_getCreateEventData: function() {return {header: this.active,panel: !this.active.length ? $() : this.active.next()};},_createIcons: function() {var icon, children,icons = this.options.icons;if ( ico
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 65 2e 63 6c 6f 73 65 73 74 28 20 22 2e 75 69 2d 6d 65 6e 75 22 20 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 0a 09 09 09 09 09 09 2f 2f 20 52 65 64 69 72 65 63 74 20 66 6f 63 75 73 20 74 6f 20 74 68 65 20 6d 65 6e 75 0a 09 09 09 09 09 09 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 20 22 66 6f 63 75 73 22 2c 20 5b 20 74 72 75 65 20 5d 20 29 3b 0a 0a 09 09 09 09 09 09 2f 2f 20 49 66 20 74 68 65 20 61 63 74 69 76 65 20 69 74 65 6d 20 69 73 20 6f 6e 20 74 68 65 20 74 6f 70 20 6c 65 76 65 6c 2c 20 6c 65 74 20 69 74 20 73 74 61 79 20 61 63 74 69 76 65 2e 0a 09 09 09 09 09 09 2f 2f 20 4f 74 68 65 72 77 69 73 65 2c 20 62 6c 75 72 20 74 68 65 20 61 63 74 69 76 65 20 69 74 65 6d 20 73 69 6e 63 65 20 69 74 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 76 Data Ascii: e.closest( ".ui-menu" ).length ) {// Redirect focus to the menuthis.element.trigger( "focus", [ true ] );// If the active item is on the top level, let it stay active.// Otherwise, blur the active item since it is no longer v
2024-12-16 01:33:27 UTC	16384	IN	Data Raw: 3a 20 6e 75 6c 6c 2c 0a 09 09 63 6c 6f 73 65 3a 20 6e 75 6c 6c 2c 0a 09 09 66 6f 63 75 73 3a 20 6e 75 6c 6c 2c 0a 09 09 6f 70 65 6e 3a 20 6e 75 6c 6c 2c 0a 09 09 72 65 73 70 6f 6e 73 65 3a 20 6e 75 6c 6c 2c 0a 09 09 73 65 61 72 63 68 3a 20 6e 75 6c 6c 2c 0a 09 09 73 65 6c 65 63 74 3a 20 6e 75 6c 6c 0a 09 7d 2c 0a 0a 09 72 65 71 75 65 73 74 49 6e 64 65 78 3a 20 30 2c 0a 09 70 65 6e 64 69 6e 67 3a 20 30 2c 0a 0a 09 5f 63 72 65 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 09 09 2f 2f 20 53 6f 6d 65 20 62 72 6f 77 73 65 72 73 20 6f 6e 6c 79 20 72 65 70 65 61 74 20 6b 65 79 64 6f 77 6e 20 65 76 65 6e 74 73 2c 20 6e 6f 74 20 6b 65 79 70 72 65 73 73 20 65 76 65 6e 74 73 2c 0a 09 09 2f 2f 20 73 6f 20 77 65 20 75 73 65 20 74 68 65 20 73 75 70 70 72 65 Data Ascii: : null,close: null,focus: null,open: null,response: null,search: null,select: null},requestIndex: 0,pending: 0,_create: function() {// Some browsers only repeat keydown events, not keypress events,// so we use the suppre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:27 UTC	565	OUT	GET /css/fonts.css HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: text/css Content-Length: 775 Last-Modified: Thu, 11 Oct 2018 03:53:04 GMT Connection: close ETag: "5bbec920-307" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	775	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 79 72 69 61 64 50 72 6f 2d 52 65 67 75 6c 61 72 27 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 4d 79 72 69 61 64 50 72 6f 2d 52 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 4d 79 72 69 61 64 50 72 6f 2d 52 65 67 75 6c 61 72 2e 65 6f 74 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 4d 79 72 69 61 64 50 72 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 75 72 Data Ascii: @font-face { font-family: 'MyriadPro-Regular'; src: url('../fonts/MyriadPro-Regular.eot'); src: url('../fonts/MyriadPro-Regular.eot') format('embedded-opentype'), url('../fonts/MyriadPro-Regular.woff') format('woff'), ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49769	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	565	OUT	GET /css/reset.css HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	242	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: text/css Content-Length: 2725 Last-Modified: Thu, 11 Oct 2018 03:53:01 GMT Connection: close ETag: "5bbec91d-aa5" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	2725	IN	Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0a 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 0a 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 0a 73 6d 61 6c 6c 2c 20 73 74 72 69 6b 65 2c 20 73 74 72 6f 6e 67 2c 20 73 75 62 2c 20 73 75 70 2c 20 74 74 2c 20 76 61 72 2c 0a 62 2c 20 75 2c 20 69 2c 20 63 65 6e 74 65 72 2c 0a 66 69 65 6c 64 73 65 74 2c 20 66 6f 72 6d 2c 20 6c 61 62 65 6c 2c 20 6c 65 67 65 6e 64 2c 0a 74 61 62 6c 65 2c 20 63 61 70 74 69 6f 6e 2c 20 Data Ascii: html, body, div, span, applet, object, iframe,blockquote, pre,a, abbr, acronym, address, big, cite, code,del, dfn, em, img, ins, kbd, q, s, samp,small, strike, strong, sub, sup, tt, var,b, u, i, center,fieldset, form, label, legend,table, caption,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49770	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	563	OUT	GET /css/all.css HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	243	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: text/css Content-Length: 4435 Last-Modified: Thu, 11 Oct 2018 03:53:03 GMT Connection: close ETag: "5bbec91f-1153" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	4435	IN	Data Raw: 2e 77 72 61 70 70 65 72 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 32 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 63 6f 6e 74 65 6e 74 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6c 72 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 74 6f 70 5f 77 72 61 70 7b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 37 32 30 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 Data Ascii: .wrapper{max-width: 1200px;width:100%;margin: 0 auto;min-height: 820px;position: relative;}.content {max-width: 1200px;width: 100%;position: relative;text-align:center;}.clr{clear: both;}.top_wrap{min-height:720px;width: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49771	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	565	OUT	GET /css/media.css HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://walk-inbathtubshop.com/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	242	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: text/css Content-Length: 2995 Last-Modified: Thu, 11 Oct 2018 03:53:00 GMT Connection: close ETag: "5bbec91c-bb3" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	2995	IN	Data Raw: 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 35 30 70 78 29 7b 0a 09 2e 6c 65 66 74 5f 62 6c 6f 63 6b 7b 0a 09 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 09 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 09 09 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 09 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0a 09 7d 0a 0a 09 2e 6c 65 66 74 5f 62 6c 6f 63 6b 20 75 6c 7b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 09 7d 0a 0a 09 2e 72 69 67 68 74 5f 62 6c 6f 63 6b 7b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 7d 0a 0a 09 2e 69 6e Data Ascii: @media(max-width: 1050px){.left_block{width: auto;margin-right: 20px;margin-left: 20px;float: none;text-align: center;padding:10px;}.left_block ul{text-align: left;}.right_block{margin: 0;text-align: center;}.in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49772	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	363	OUT	GET /js/form_custom.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	256	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: application/javascript Content-Length: 3451 Last-Modified: Fri, 13 Apr 2018 20:29:16 GMT Connection: close ETag: "5ad1131c-d7b" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	3451	IN	Data Raw: 24 2e 66 6e 2e 63 75 73 74 6f 6d 53 65 6c 65 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 0d 0a 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 0d 0a 09 09 76 61 72 20 63 6c 61 73 73 65 73 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 63 6c 61 73 73 22 29 3b 0d 0a 09 09 63 6c 61 73 73 65 73 20 3d 20 63 6c 61 73 73 65 73 2e 73 70 6c 69 74 28 27 20 27 29 3b 0d 0a 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 74 69 6f 6e 73 0d 0a 20 20 20 20 09 76 61 72 20 24 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 2c 20 6e 75 6d 62 65 72 4f 66 4f 70 74 69 6f 6e 73 20 3d 20 24 28 74 68 69 73 29 2e 63 68 69 6c 64 72 65 6e 28 27 6f 70 74 69 6f 6e 27 29 2e 6c 65 6e 67 Data Ascii: $.fn.customSelect = function() { return this.each(function() {var classes = $(this).attr("class");classes = classes.split(' ');// Cache the number of options var $this = $(this), numberOfOptions = $(this).children('option').leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49773	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	356	OUT	GET /js/main.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: application/javascript Content-Length: 9290 Last-Modified: Fri, 16 Apr 2021 17:50:17 GMT Connection: close ETag: "6079ce59-244a" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	9290	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4d 4d 5f 6f 70 65 6e 42 72 57 69 6e 64 6f 77 28 74 68 65 55 52 4c 2c 77 69 6e 4e 61 6d 65 2c 66 65 61 74 75 72 65 73 29 20 7b 0a 2f 2f 76 32 2e 30 0a 09 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 74 68 65 55 52 4c 2c 77 69 6e 4e 61 6d 65 2c 66 65 61 74 75 72 65 73 29 3b 0a 7d 09 09 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 44 4e 43 50 68 6f 6e 65 4e 75 6d 62 65 72 28 70 68 6f 6e 65 29 7b 0a 09 76 61 72 20 6a 71 78 68 72 20 3d 20 24 2e 61 6a 61 78 28 7b 0a 09 09 75 72 6c 3a 20 22 2f 76 61 6c 69 64 61 74 65 2e 70 68 70 3f 70 68 6f 6e 65 3d 22 20 2b 20 70 68 6f 6e 65 2c 0a 09 09 64 61 74 61 54 79 70 65 3a 20 22 6a 73 6f 6e 22 2c 0a 09 09 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 09 20 20 0a 09 09 09 63 6f Data Ascii: function MM_openBrWindow(theURL,winName,features) {//v2.0window.open(theURL,winName,features);}function isDNCPhoneNumber(phone){var jqxhr = $.ajax({url: "/validate.php?phone=" + phone,dataType: "json",success: function(data) { co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49774	159.65.98.5	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	551	OUT	GET /d.js HTTP/1.1 Host: track.walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==
2024-12-16 01:33:28 UTC	230	IN	HTTP/1.1 200 OK date: Mon, 16 Dec 2024 01:33:28 GMT content-type: application/javascript content-length: 7695 last-modified: Sat, 15 Jun 2024 01:49:49 GMT accept-ranges: bytes etag: "80dc754ec6beda1:0" connection: close
2024-12-16 01:33:28 UTC	7695	IN	Data Raw: 76 61 72 20 43 4b 4d 20 3d 20 7b 0a 09 75 73 65 5f 69 66 72 61 6d 65 3a 20 66 61 6c 73 65 2c 0a 09 66 6f 72 6d 5f 73 65 6c 65 63 74 6f 72 3a 20 22 23 63 6b 6d 5f 66 6f 72 6d 22 2c 0a 09 73 75 62 6d 69 74 5f 73 65 6c 65 63 74 6f 72 3a 20 22 3a 73 75 62 6d 69 74 22 2c 0a 09 69 6e 69 74 5f 66 6f 63 75 73 3a 20 66 61 6c 73 65 2c 0a 09 65 72 72 6f 72 5f 74 69 74 6c 65 3a 20 22 45 72 72 6f 72 22 2c 0a 09 72 65 71 75 69 72 65 64 5f 65 72 72 6f 72 3a 20 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 0a 09 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 3a 20 22 50 6c 65 61 73 65 20 66 69 78 20 61 6c 6c 20 68 69 67 68 6c 69 67 68 74 65 64 20 66 69 65 6c 64 73 2e 22 2c 0a 09 61 6a 61 78 5f 74 69 6d 65 6f 75 74 3a 20 38 30 30 30 2c 0a Data Ascii: var CKM = {use_iframe: false,form_selector: "#ckm_form",submit_selector: ":submit",init_focus: false,error_title: "Error",required_error: "This field is required.",validation_error: "Please fix all highlighted fields.",ajax_timeout: 8000,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49776	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	375	OUT	GET /js/jquery-ui/jquery-ui.min.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	258	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: application/javascript Content-Length: 24224 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-5ea0" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	16126	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 32 20 2d 20 32 30 31 34 2d 31 32 2d 32 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 73 70 69 6e 6e 65 72 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 Data Ascii: /! jQuery UI - v1.11.2 - 2014-12-24 http://jqueryui.com* Includes: core.js, widget.js, button.js, spinner.js* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */(function(e){"function"==typeof define&&define.amd?define(["jquery
2024-12-16 01:33:28 UTC	8098	IN	Data Raw: 70 75 73 68 28 22 75 69 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 69 63 6f 6e 22 2b 28 61 3f 22 73 22 3a 73 2e 70 72 69 6d 61 72 79 3f 22 2d 70 72 69 6d 61 72 79 22 3a 22 2d 73 65 63 6f 6e 64 61 72 79 22 29 29 2c 73 2e 70 72 69 6d 61 72 79 26 26 74 2e 70 72 65 70 65 6e 64 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 20 75 69 2d 69 63 6f 6e 20 22 2b 73 2e 70 72 69 6d 61 72 79 2b 22 27 3e 3c 2f 73 70 61 6e 3e 22 29 2c 73 2e 73 65 63 6f 6e 64 61 72 79 26 26 74 2e 61 70 70 65 6e 64 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 20 75 69 2d 69 63 6f 6e 20 22 2b 73 2e 73 65 63 6f 6e 64 61 72 79 2b 22 27 3e 3c 2f 73 70 61 6e 3e 22 Data Ascii: push("ui-button-text-icon"+(a?"s":s.primary?"-primary":"-secondary")),s.primary&&t.prepend("<span class='ui-button-icon-primary ui-icon "+s.primary+"'></span>"),s.secondary&&t.append("<span class='ui-button-icon-secondary ui-icon "+s.secondary+"'></span>"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49775	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	604	OUT	GET /js/jquery.mask.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: application/javascript Content-Length: 7223 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-1c37" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	7223	IN	Data Raw: 2f 2f 2f 20 3c 72 65 66 65 72 65 6e 63 65 20 70 61 74 68 3d 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 6c 69 62 2f 6a 71 75 65 72 79 2d 31 2e 32 2e 36 2e 6a 73 22 20 2f 3e 0a 2f 2a 0a 09 4d 61 73 6b 65 64 20 49 6e 70 75 74 20 70 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 0a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 2d 32 30 30 39 20 4a 6f 73 68 20 42 75 73 68 20 28 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 29 0a 09 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 28 68 74 74 70 3a 2f 2f 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6d 61 73 6b 65 64 2d 69 6e 70 75 74 2d 70 6c 75 67 69 6e 2f 23 6c 69 63 65 6e 73 65 29 20 0a 09 56 65 72 73 69 6f 6e 3a 20 31 2e 32 2e 32 20 28 Data Ascii: /// <reference path="../../../lib/jquery-1.2.6.js" />/*Masked Input plugin for jQueryCopyright (c) 2007-2009 Josh Bush (digitalbush.com)Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) Version: 1.2.2 (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49778	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	369	OUT	GET /js/jquery-1.11.1.min.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:29 UTC	259	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: application/javascript Content-Length: 95786 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-1762a" Accept-Ranges: bytes
2024-12-16 01:33:29 UTC	16125	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-12-16 01:33:29 UTC	16384	IN	Data Raw: 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 62 5b 30 5d 3d 61 2c 64 28 62 2c 6e 75 6c 6c 2c 66 2c 63 29 2c 21 63 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 62 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: !(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:hb(function(a){return function(b){return fb(a,b).length>0}}),contains:hb(function(a){return function(b){return(b.textContent\|\|b.innerText\|\|e(b)).indexOf(a)>-1}}),lang:hb(function(a){
2024-12-16 01:33:29 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 66 26 26 28 66 3d 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 29 29 3a 66 3d 67 2c 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 6d 2e 61 63 63 65 70 74 44 61 74 61 28 61 29 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 67 3d 66 3f 6d 2e 63 61 63 68 65 3a 61 2c 68 3d 66 3f 61 5b 6d 2e 65 78 70 61 6e 64 6f 5d 3a 6d 2e 65 78 70 61 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6d 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d 62 2e 63 6f 6e 63 61 74 28 6d 2e 6d 61 70 28 62 2c 6d 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 62 20 69 6e 20 64 3f 62 3d 5b 62 5d 3a 28 62 3d 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 2c 62 3d Data Ascii: null==f&&(f=g[m.camelCase(b)])):f=g,f}}function R(a,b,c){if(m.acceptData(a)){var d,e,f=a.nodeType,g=f?m.cache:a,h=f?a[m.expando]:m.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){m.isArray(b)?b=b.concat(m.map(b,m.camelCase)):b in d?b=[b]:(b=m.camelCase(b),b=
2024-12-16 01:33:29 UTC	16384	IN	Data Raw: 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 30 2c 66 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4b 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4b 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d 63 5b 65 5d 29 3b 65 2b 2b 29 21 62 7c 7c 6d 2e 6e 6f 64 65 4e 61 6d 65 28 64 2c 62 29 3f 66 2e 70 75 73 68 28 64 29 3a 6d 2e 6d 65 72 67 65 28 66 2c 75 62 28 64 2c 62 29 29 3b 72 65 74 75 72 Data Ascii: (a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==K?a.getElementsByTagName(b\|\|""):typeof a.querySelectorAll!==K?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=c[e]);e++)!b\|\|m.nodeName(d,b)?f.push(d):m.merge(f,ub(d,b));retur
2024-12-16 01:33:29 UTC	16384	IN	Data Raw: 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 61 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 7d 2c 6d 2e 66 78 3d 5a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 6d 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 24 62 2c 5f 62 2c 61 63 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 62 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 63 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 63 3d 5b 69 63 5d 2c 65 63 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 61 2c 62 29 2c 64 3d 63 2e 63 75 72 28 29 2c 65 3d 62 63 2e 65 78 65 63 28 62 29 2c 66 3d 65 Data Ascii: .5-Math.cos(aMath.PI)/2}},m.fx=Zb.prototype.init,m.fx.step={};var $b,_b,ac=/^(?:toggle\|show\|hide)$/,bc=new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cc=/queueHooks$/,dc=[ic],ec={"*":[function(a,b){var c=this.createTween(a,b),d=c.cur(),e=bc.exec(b),f=e
2024-12-16 01:33:29 UTC	14125	IN	Data Raw: 66 28 68 5b 67 5d 26 26 68 5b 67 5d 2e 74 65 73 74 28 65 29 29 7b 69 2e 75 6e 73 68 69 66 74 28 67 29 3b 62 72 65 61 6b 7d 69 66 28 69 5b 30 5d 69 6e 20 63 29 66 3d 69 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 67 20 69 6e 20 63 29 7b 69 66 28 21 69 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 2b 22 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 29 2c 63 5b 66 5d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 50 63 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3d 7b 7d 2c 6b 3d 61 2e 64 61 74 61 54 79 70 65 73 2e 73 6c 69 63 65 28 29 3b 69 66 28 6b 5b 31 5d 29 Data Ascii: f(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]\|\|a.converters[g+" "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f),c[f]):void 0}function Pc(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49777	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:28 UTC	614	OUT	GET /js/jquery.ui.touch-punch.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:28 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:28 GMT Content-Type: application/javascript Content-Length: 5074 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-13d2" Accept-Ranges: bytes
2024-12-16 01:33:28 UTC	5074	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 e2 80 93 32 30 31 34 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 44 65 74 65 63 74 20 74 6f 75 63 68 20 73 75 70 70 6f 72 74 0a 20 20 24 2e 73 75 70 70 6f 72 74 Data Ascii: /! jQuery UI Touch Punch 0.2.3 * * Copyright 20112014, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */(function ($) { // Detect touch support $.support

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49780	151.101.66.137	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:29 UTC	361	OUT	GET /ui/1.12.1/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:29 UTC	616	IN	HTTP/1.1 200 OK Connection: close Content-Length: 520714 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-7f20a" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 16 Dec 2024 01:33:29 GMT Age: 2224585 X-Served-By: cache-lga21932-LGA, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 1260, 272 X-Timer: S1734312809.429372,VS0,VE0 Vary: Accept-Encoding
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 7d 3b 0a 0a 76 61 72 20 76 65 72 73 69 6f 6e 20 3d 20 24 2e 75 69 2e 76 65 72 73 69 6f 6e 20 3d 20 22 31 2e 31 32 2e 31 22 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 2f 2f 3e 3e 6c 61 62 65 6c 3a 20 57 69 64 67 65 74 0a 2f 2f 3e 3e 67 72 6f 75 70 3a 20 43 Data Ascii: };var version = $.ui.version = "1.12.1";/! jQuery UI Widget 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license *///>>label: Widget//>>group: C
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 3b 0a 09 7d 0a 0a 09 69 66 20 28 20 24 2e 69 73 41 72 72 61 79 28 20 70 72 6f 74 6f 74 79 70 65 20 29 20 29 20 7b 0a 09 09 70 72 6f 74 6f 74 79 70 65 20 3d 20 24 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 20 6e 75 6c 6c 2c 20 5b 20 7b 7d 20 5d 2e 63 6f 6e 63 61 74 28 20 70 72 6f 74 6f 74 79 70 65 20 29 20 29 3b 0a 09 7d 0a 0a 09 2f 2f 20 43 72 65 61 74 65 20 73 65 6c 65 63 74 6f 72 20 66 6f 72 20 70 6c 75 67 69 6e 0a 09 24 2e 65 78 70 72 5b 20 22 3a 22 20 5d 5b 20 66 75 6c 6c 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 21 21 24 2e 64 61 74 61 28 20 65 6c 65 6d 2c 20 66 75 6c 6c 4e 61 6d 65 20 29 3b 0a 09 7d 3b 0a 0a 09 24 5b 20 6e 61 6d 65 73 70 61 Data Ascii: ;}if ( $.isArray( prototype ) ) {prototype = $.extend.apply( null, [ {} ].concat( prototype ) );}// Create selector for plugin$.expr[ ":" ][ fullName.toLowerCase() ] = function( elem ) {return !!$.data( elem, fullName );};$[ namespa
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 69 74 69 6e 67 20 66 72 6f 6d 0a 09 62 61 73 65 50 72 6f 74 6f 74 79 70 65 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 62 61 73 65 50 72 6f 74 6f 74 79 70 65 2e 6f 70 74 69 6f 6e 73 20 29 3b 0a 09 24 2e 65 61 63 68 28 20 70 72 6f 74 6f 74 79 70 65 2c 20 66 75 6e 63 74 69 6f 6e 28 20 70 72 6f 70 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 69 66 20 28 20 21 24 2e 69 73 46 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 29 20 7b 0a 09 09 09 70 72 6f 78 69 65 64 50 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 20 3d 20 76 61 6c 75 65 3b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 09 09 70 72 6f 78 69 65 64 50 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: iting frombasePrototype.options = $.widget.extend( {}, basePrototype.options );$.each( prototype, function( prop, value ) {if ( !$.isFunction( value ) ) {proxiedPrototype[ prop ] = value;return;}proxiedPrototype[ prop ] = ( function()
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 79 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 0a 09 2f 2f 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 69 73 20 77 69 64 67 65 74 2e 20 57 65 27 72 65 20 65 73 73 65 6e 74 69 61 6c 6c 79 20 74 72 79 69 6e 67 20 74 6f 20 72 65 70 6c 61 63 65 20 6f 6e 65 0a 09 2f 2f 20 6c 65 76 65 6c 20 69 6e 20 74 68 65 20 70 72 6f 74 6f 74 79 70 65 20 63 68 61 69 6e 2e 0a 09 69 66 20 28 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 29 20 7b 0a 09 09 24 2e 65 61 63 68 28 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 2e 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 2c 20 63 68 69 6c 64 20 29 20 7b 0a 09 09 09 76 61 72 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 20 3d 20 63 68 69 Data Ascii: y inherit from// the new version of this widget. We're essentially trying to replace one// level in the prototype chain.if ( existingConstructor ) {$.each( existingConstructor._childConstructors, function( i, child ) {var childPrototype = chi
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 44 6f 6e 27 74 20 65 78 74 65 6e 64 20 73 74 72 69 6e 67 73 2c 20 61 72 72 61 79 73 2c 20 65 74 63 2e 20 77 69 74 68 20 6f 62 6a 65 63 74 73 0a 09 09 09 09 09 09 24 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 76 61 6c 75 65 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 43 6f 70 79 20 65 76 65 72 79 74 68 69 6e 67 20 65 6c 73 65 20 62 79 20 72 65 66 65 72 65 6e 63 65 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6b 65 79 20 5d 20 3d 20 76 61 6c 75 65 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 24 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 61 6d 65 2c 20 6f 62 6a 65 63 74 20 29 20 7b 0a 09 76 61 72 20 Data Ascii: Don't extend strings, arrays, etc. with objects$.widget.extend( {}, value );// Copy everything else by reference} else {target[ key ] = value;}}}}return target;};$.widget.bridge = function( name, object ) {var
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 26 26 20 6d 65 74 68 6f 64 56 61 6c 75 65 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 56 61 6c 75 65 20 26 26 20 6d 65 74 68 6f 64 56 61 6c 75 65 2e 6a 71 75 65 72 79 20 3f 0a 09 09 09 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 2e 70 75 73 68 53 74 61 63 6b 28 20 6d 65 74 68 6f 64 56 61 6c 75 65 2e 67 65 74 28 29 20 29 20 3a 0a 09 09 09 09 09 09 09 6d 65 74 68 6f 64 56 61 6c 75 65 3b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 0a 09 09 09 2f 2f 20 41 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 68 61 73 68 65 73 20 74 6f 20 62 65 20 70 61 73 73 65 64 20 Data Ascii: && methodValue !== undefined ) {returnValue = methodValue && methodValue.jquery ?returnValue.pushStack( methodValue.get() ) :methodValue;return false;}} );}} else {// Allow multiple hashes to be passed
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 73 2e 65 6c 65 6d 65 6e 74 2c 20 7b 0a 09 09 09 09 72 65 6d 6f 76 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 3d 3d 3d 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 09 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 29 3b 0a 09 09 09 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 20 3f 0a 0a 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 77 69 74 68 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 09 09 09 09 65 6c 65 6d 65 6e 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 20 3a 0a 0a 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 69 73 20 77 69 6e 64 6f 77 20 Data Ascii: s.element, {remove: function( event ) {if ( event.target === element ) {this.destroy();}}} );this.document = $( element.style ?// Element within the documentelement.ownerDocument :// Element is window
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3b 0a 09 7d 2c 0a 0a 09 6f 70 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 6b 65 79 3b 0a 09 09 76 61 72 20 70 61 72 74 73 3b 0a 09 09 76 61 72 20 63 75 72 4f 70 74 69 6f 6e 3b 0a 09 09 76 61 72 20 69 3b 0a 0a 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 44 6f 6e 27 74 20 72 65 74 75 72 6e 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 68 61 73 68 0a 09 09 09 72 65 74 75 72 6e 20 24 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 29 3b 0a 09 09 7d 0a 0a Data Ascii: n this.element;},option: function( key, value ) {var options = key;var parts;var curOption;var i;if ( arguments.length === 0 ) {// Don't return a reference to the internal hashreturn $.widget.extend( {}, this.options );}
2024-12-16 01:33:29 UTC	1378	IN	Data Raw: 64 22 20 29 20 7b 0a 09 09 09 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 44 69 73 61 62 6c 65 64 28 20 76 61 6c 75 65 20 29 3b 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 7d 2c 0a 0a 09 5f 73 65 74 4f 70 74 69 6f 6e 43 6c 61 73 73 65 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 63 6c 61 73 73 4b 65 79 2c 20 65 6c 65 6d 65 6e 74 73 2c 20 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3b 0a 0a 09 09 66 6f 72 20 28 20 63 6c 61 73 73 4b 65 79 20 69 6e 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 20 3d 20 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 20 63 6c 61 73 73 4b 65 79 20 5d 3b 0a 09 09 09 69 66 20 28 20 76 61 6c 75 Data Ascii: d" ) {this._setOptionDisabled( value );}return this;},_setOptionClasses: function( value ) {var classKey, elements, currentElements;for ( classKey in value ) {currentElements = this.classesElementLookup[ classKey ];if ( valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:30 UTC	709	OUT	GET /images/bg.jpg HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://walk-inbathtubshop.com/css/reset.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:30 UTC	248	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:30 GMT Content-Type: image/jpeg Content-Length: 126411 Last-Modified: Fri, 13 Apr 2018 20:29:16 GMT Connection: close ETag: "5ad1131c-1edcb" Accept-Ranges: bytes
2024-12-16 01:33:30 UTC	16136	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 02 d5 05 9c 03 01 11 00 02 11 01 03 11 01 ff c4 00 ac 00 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed
2024-12-16 01:33:30 UTC	16384	IN	Data Raw: 7d a5 f8 7d 27 db dd 92 cb df b9 72 e2 3d a2 5b 8f 44 fd 27 e5 a2 6c cf 2f b8 9d 5c 5a fd 9e 4d 8c 04 2b fd 38 9c 63 1f 00 17 3c b5 1c 33 e5 0a 3d ce 55 50 1b c8 fd 21 94 b7 4b a8 4c 95 cb db fb 04 3b b7 1a 5c 83 77 b5 cd 04 fb 72 88 c3 71 d0 ad 4d d8 ba bf 3f ee 3d 90 f6 ee e1 c8 e1 7d c4 04 2e 9c a5 3e 38 1e 99 c3 4d b2 fc de 0a dd e3 5a eb 5d 3f 64 fd a3 2f b8 a5 dc 61 c7 e7 cb 85 cb e1 d6 5e 89 82 41 81 0f 19 0f 92 ce bc ae f7 0f b4 ff 00 68 fb a7 70 fb 26 ee 5f 0a ce eb 54 fb 4c ac 7b 2b b0 6f f3 3e 26 32 7c 17 4b eb 6f 66 70 4f 67 ae 7c d7 b3 fe f8 f7 6a 7e e4 ec fc 23 c0 e3 57 69 a4 ca 63 98 25 19 4c 06 c0 00 31 5e 4d fa b6 fb 3b f5 f7 69 7e 2b f9 c7 93 c8 bc 5e 6b 62 ef 88 cd c8 59 9d 5b 3a 6d b4 8e 9e dd fb f9 59 ee 50 36 ce 04 16 96 45 8b ab 25 Data Ascii: }}'r=[D'l/\ZM+8c<3=UP!KL;\wrqM?=}.>8MZ]?d/a^Ahp&_TL{+o>&2\|KofpOg\|j~#Wic%L1^M;i~+^kbY[:mYP6E%
2024-12-16 01:33:30 UTC	16384	IN	Data Raw: 08 a9 f6 99 32 60 8c 0a 22 08 40 f0 64 03 06 c9 30 a5 8b 33 a6 01 e6 c9 dc 7e 09 81 36 55 55 98 4e 11 97 c4 05 47 15 dd 8f 81 32 65 1d d5 9d 76 e2 3f 04 1c 96 76 5e 64 06 ee 3d a2 c8 8c a3 91 41 1f ba ee fc 41 13 64 24 18 e3 a8 65 07 4d 1f 70 c4 13 ee 45 89 cd 07 5d 3d eb 8f 61 db bb 6b a0 ec a2 f2 70 89 dc 0e 7f 04 c2 97 26 42 36 c0 be 5f c1 04 89 93 b8 c4 b8 28 1d 64 b0 19 97 41 a8 f5 6c 1a 97 c1 06 d1 93 44 8d 46 4e 81 01 26 13 25 a5 a8 4c b2 c8 08 d9 6b b6 03 22 3a a6 46 e2 2c 03 e4 13 23 39 39 91 73 97 55 4c 14 66 f9 8c 06 48 61 71 94 26 31 3b 42 18 02 21 c9 19 2b 83 04 19 9b 54 c1 85 40 49 b3 c4 a6 0c 14 81 d8 63 e1 9e aa 23 68 0f d1 18 e2 30 41 8e c1 17 3d 50 11 25 83 92 dd 15 0c ca 13 90 1b 5b a1 50 33 09 c3 2c 47 42 83 29 57 00 5c 61 25 a4 2a c3 Data Ascii: 2`"@d03~6UUNG2ev?v^d=AAd$eMpE]=akp&B6_(dAlDFN&%Lk":F,#99sULfHaq&1;B!+T@Ic#h0A=P%[P3,GB)W\a%*
2024-12-16 01:33:31 UTC	16384	IN	Data Raw: 22 31 7f 5f 55 2c 4f 31 54 78 73 63 29 4a 33 8e 30 98 c8 a6 1a 9b 9c 79 57 4e d9 6e 9b 03 84 26 cc ad d5 ac 88 5d 6f ba 31 93 47 03 20 35 59 c4 5f 27 45 77 5d 74 6c 98 80 ae d1 84 4c b0 32 65 3c 62 fe 4a e6 df c9 91 7b ac f3 9f 91 0a 78 33 7b 2d aa 8c 2c b1 cc 8b 8a c6 e7 25 f2 57 18 6b 36 ae ba 78 b5 93 6c 66 44 e4 3e 9c 49 f8 84 49 d6 de a9 44 07 31 db 32 30 23 a7 8a c6 d1 da 5c 34 95 d6 53 11 39 63 a8 58 b1 b9 b3 a0 44 9a 84 e5 e5 33 c4 2c e1 d2 50 77 47 69 8c 45 98 f9 87 82 98 6e 57 55 67 cc 5a cf d3 23 0a fc 56 6c 75 95 16 dd 65 15 42 b1 01 7e e7 c4 68 ac 8c ed b3 18 5f 1b 60 d2 8f b7 2c a3 1f 11 aa b8 62 6e bf 76 d8 35 73 1e 6d 7e 0a 61 a9 b3 a6 17 5a 3c b3 8b 45 b0 51 a9 58 cb 74 83 c0 e4 4b ab 23 1b 79 65 11 be e8 4b 70 91 0d d1 4b a2 eb d9 63 a6 Data Ascii: "1_U,O1Txsc)J30yWNn&]o1G 5Y_'Ew]tlL2e<bJ{x3{-,%Wk6xlfD>IID120#\4S9cXD3,PwGiEnWUgZ#VlueB~h_`,bnv5sm~aZ<EQXtK#yeKpKc
2024-12-16 01:33:31 UTC	16384	IN	Data Raw: 0a 61 2a ed b4 11 18 c3 e8 fa 9d 71 af 56 98 75 dd 5c e1 4d 1b a5 ef 0b 47 94 1c c2 e7 9e 5e 8c 6b 59 4b b7 6e b1 85 b1 13 18 ec 39 2d 65 c3 7e b8 54 4f b7 c4 ce ab b9 32 85 cf b8 6d f5 2c ed 94 eb b1 36 77 40 65 be b7 9d f1 2d 1b 80 f3 3e 9f c1 66 fd 9d 31 6d e1 d1 47 14 ca 52 e5 f2 ad dc 65 89 ac be f9 4b a2 ce 5d a6 95 cd c9 91 b2 df 72 15 7b 10 8f ff 00 eb f5 f1 5d 74 71 de 61 50 31 2d 64 70 90 c1 96 eb 3a 53 e7 79 e2 e7 fe db 10 cb 2d ed 1c d2 94 e5 0a f1 27 69 76 5b 8e 38 cb 09 4c 8b 0e 61 8f a5 6b 2e 5b 6d 65 c3 78 72 01 83 98 b1 1a ac d5 9d 95 44 82 d2 ae 07 74 b5 59 cb 73 6a ef e2 f1 48 88 9d 84 19 8f 4f 82 e7 76 e5 eb d3 af 32 65 d0 7b 7d 16 c5 b9 10 8d bb b1 0c 31 05 66 ef 5e 8d 7d 6d 55 67 0e 8a 21 1f 6e 3b 26 3d 32 1a 2c 5d 9a fc 72 7c 39 39 Data Ascii: a*qVu\MG^kYKn9-e~TO2m,6w@e->f1mGReK]r{]tqaP1-dp:Sy-'iv[8Lak.[mexrDtYsjHOv2e{}1f^}mUg!n;&=2,]r\|99
2024-12-16 01:33:31 UTC	16384	IN	Data Raw: 66 36 8f 0b 9f f6 9f 1e f7 97 19 e9 97 e4 39 1f 82 fa 7e a7 ec f6 d7 39 7e 6b f6 5f ea fd 7d b8 bd 7c 3e 77 9b da 79 bc 32 61 64 08 03 eb 00 90 be e7 47 bf a6 ff 00 2f c3 7b ff 00 a0 ed e8 b9 c6 63 84 c0 ee cd c2 f7 71 b4 e1 f1 36 bb 6b c7 c0 c8 f5 f0 59 d7 4b f5 66 53 38 e4 19 6b 15 9c 7d cf 79 01 8a b1 7f 1a 09 24 2b 57 6c 7d 14 c5 94 64 dc a2 29 ce 4c 88 08 03 d5 f2 53 01 bc 70 29 80 c9 7f 86 a9 52 8d a0 7a 7f 8a 80 da 0d 90 86 4f 99 4b 5b 8e 8b 78 d1 a4 08 6e 12 94 f1 70 5f 05 ce 6d 96 76 9c b2 b0 46 04 57 10 e7 32 b7 08 51 9c c1 91 81 35 cc 0c 00 c9 2e ad 65 10 13 96 24 93 2f a8 94 91 8d ab 5a a7 28 4f 70 00 81 99 29 64 4c ab dc 9c e3 23 22 07 e5 53 0b 91 08 3f 98 cb 16 c8 2b f0 cd 31 00 06 e3 80 3f 52 c6 cc e5 b5 7e d3 87 99 35 c3 12 3a ae 74 cb a6 Data Ascii: f69~9~k_}\|>wy2adG/{cq6kYKfS8k}y$+Wl}d)LSp)RzOK[xnp_mvFW2Q5.e$/Z(Op)dL#"S?+1?R~5:t
2024-12-16 01:33:31 UTC	16384	IN	Data Raw: 4f 0b 8f ca ac c3 91 01 38 e8 5b 15 eb ea f7 76 eb 7c ff 00 7b d0 ea ee 9f da 72 f9 de e1 f6 98 c6 7c 19 fb 72 ff 00 c5 2c 7e 6b ec 7a bf b6 ce bc bf 21 ef ff 00 a9 df fb ea f0 a7 c7 e4 d1 2d 96 d6 44 c6 64 8c 17 d4 eb f6 f5 d9 f8 6f 6b d1 ed ea db 16 5c 23 dc 93 12 0e 23 a2 f4 cb 2b c7 f8 f0 da 99 92 08 38 60 ee b1 63 8f 64 e5 bd 73 02 b3 a9 3a f4 59 ba b9 d8 a1 65 70 0e 7c c4 a9 e0 48 9b 39 7c b8 44 c6 b9 11 5c b4 19 24 eb 8f 46 9b 59 ae 19 56 2c da 4b 9c 31 c5 99 5f 17 3f 1c aa 22 1b e0 f2 62 73 64 b0 bc 3a a9 34 71 e5 22 20 6e 9c f2 94 b2 0b 8e d2 da ba f6 4c 72 ce db 22 24 77 44 6e f0 d1 75 d6 33 c5 60 6d 11 2d 28 f9 b4 92 de 17 c2 b1 b6 e1 21 e5 24 78 ad 4d 5b 92 c7 2d 93 94 81 77 3e 2a cd 5d 35 8c a3 3b 03 88 02 da ba dc 6f 08 91 20 be 4b 59 53 71 Data Ascii: O8[v\|{r\|r,~kz!-Ddok\##+8`cds:Yep\|H9\|D\$FYV,K1_?"bsd:4q" nLr"$wDnu3`m-(!$xM[-w>*]5;o KYSq
2024-12-16 01:33:31 UTC	11971	IN	Data Raw: 8e 52 1c 4e bf 56 a9 83 64 ca c2 74 c1 1b 9f 07 13 86 12 65 16 0a c1 25 9b 72 8d 36 a2 70 aa 62 73 0f 17 69 45 15 b4 2f 26 f0 64 3c 84 e0 3c 16 6b 5a ed 85 c6 c1 55 f3 94 70 84 b2 0b 2e d3 b6 34 3c 8a a5 c6 9d 3e df 94 97 12 70 ee b3 85 ec df 84 f1 69 a2 cc 2c 9c 85 c2 58 c4 e5 b5 66 b7 eb f2 f5 2c e3 dd 12 23 54 3f 49 b0 f8 ae 3b 6e f7 de ae 1c 32 a8 7a eb 91 9d 8f 8c 64 30 5d 7c 9e 2f c5 83 97 14 b7 b8 62 23 30 3c f8 e8 99 5b c2 63 6c 8d 32 ae 51 1b 23 88 25 47 3d 8e 33 db 00 20 e1 fc ca d8 d6 bb c9 f0 e9 ab 97 6c 25 ba 25 a5 3e ba ae 76 3a 7e 5d ab a6 89 d7 c8 b3 cd 06 b8 69 a1 5c ac 7a ba b4 f2 f9 72 4e db 84 ce 2c c7 25 d7 5d 1e 7d bb 6b a7 8a 68 b4 6f b6 5b 4c 72 f1 58 de 3b 74 f6 36 32 3e d0 9c 08 93 1f 2b ac 4d 5e d9 d9 0e 3e e5 f5 e4 d3 86 2f d5 Data Ascii: RNVdte%r6pbsiE/&d<<kZUp.4<>pi,Xf,#T?I;n2zd0]\|/b#0<[cl2Q#%G=3 l%%>v:~]i\zrN,%]}kho[LrX;t62>+M^>/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49785	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:30 UTC	457	OUT	GET /js/jquery.mask.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:30 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:30 GMT Content-Type: application/javascript Content-Length: 7223 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-1c37" Accept-Ranges: bytes
2024-12-16 01:33:30 UTC	7223	IN	Data Raw: 2f 2f 2f 20 3c 72 65 66 65 72 65 6e 63 65 20 70 61 74 68 3d 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 6c 69 62 2f 6a 71 75 65 72 79 2d 31 2e 32 2e 36 2e 6a 73 22 20 2f 3e 0a 2f 2a 0a 09 4d 61 73 6b 65 64 20 49 6e 70 75 74 20 70 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 0a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 2d 32 30 30 39 20 4a 6f 73 68 20 42 75 73 68 20 28 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 29 0a 09 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 28 68 74 74 70 3a 2f 2f 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6d 61 73 6b 65 64 2d 69 6e 70 75 74 2d 70 6c 75 67 69 6e 2f 23 6c 69 63 65 6e 73 65 29 20 0a 09 56 65 72 73 69 6f 6e 3a 20 31 2e 32 2e 32 20 28 Data Ascii: /// <reference path="../../../lib/jquery-1.2.6.js" />/*Masked Input plugin for jQueryCopyright (c) 2007-2009 Josh Bush (digitalbush.com)Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) Version: 1.2.2 (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49784	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:30 UTC	756	OUT	GET /images/logo.png HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:30 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:30 GMT Content-Type: image/png Content-Length: 28476 Last-Modified: Thu, 11 Oct 2018 03:48:27 GMT Connection: close ETag: "5bbec80b-6f3c" Accept-Ranges: bytes
2024-12-16 01:33:30 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7e 00 00 00 6f 08 06 00 00 00 72 c5 cd 77 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 6e de 49 44 41 54 78 da ec 5d 05 7c 14 47 17 df b8 13 21 46 04 48 02 c4 81 60 41 83 bb 53 1c 4a 29 d2 92 52 2a 94 96 52 b4 b4 b4 d0 42 5b e0 43 0a 14 a7 78 0a 14 77 49 08 81 b8 10 77 77 d7 8b 7c f3 36 6f 61 b9 9e ec 25 47 48 60 df 8f fd dd 91 bb 9d 9b 9d 79 f3 de ff c9 bc 51 a8 ab ab a3 78 e2 89 27 9e 78 e2 89 27 9e 78 7a fb 49 91 1f 02 9e 78 e2 89 27 9e 78 e2 89 27 1e f8 f1 c4 13 4f 3c f1 c4 13 4f 3c f1 c4 03 3f 9e 78 e2 89 27 9e 78 e2 89 27 9e 78 e0 c7 13 4f 3c f1 c4 13 4f 3c f1 c4 13 0f fc 78 e2 89 27 9e 78 e2 89 27 9e 78 7a 73 a4 cc 0f c1 Data Ascii: PNGIHDR~orwtEXtSoftwareAdobe ImageReadyqe<nIDATx]\|G!FH`ASJ)R*RB[CxwIww\|6oa%GH`yQx'x'xzIx'x'O<O<?x'x'xO<O<x'x'xzs
2024-12-16 01:33:30 UTC	12337	IN	Data Raw: 0a fc d0 33 07 79 7d 69 94 f8 02 c8 cc 26 8f 74 2e 39 84 ac 23 da 32 a8 c6 87 79 e9 03 a1 17 ce 9d bb 87 80 3e 37 71 5f fa 62 c5 8a 9b a8 8c e0 79 92 71 b2 4c de 22 39 05 a1 84 72 f2 9c f7 bc 3d 3d 1d b8 2c 3c 0e 21 5f f8 7f 86 a3 93 53 10 b9 32 e5 b0 38 f3 70 ec 4b 29 9e 9a 37 fc 7b 15 f4 b5 91 04 fa 80 e6 0c 77 f2 6e d3 5a 1b d6 74 30 02 bf 7c 04 90 fc f1 80 3c 35 07 a2 f3 cf e2 d2 f2 39 6d e8 83 e2 e7 16 46 ad f2 29 d6 19 b2 90 a2 14 e0 eb db d1 a5 47 0f 3f 28 79 d4 d0 dc 68 56 f8 17 94 3f 78 02 b5 e1 60 84 13 47 8f 8e 92 74 1f d1 ad 69 14 b7 d2 27 6f 8a 00 64 15 77 b2 b5 4d e0 9a 4e 96 95 95 05 45 8c 5f 4b a5 87 9e ae ae 49 94 0c 47 bd 35 82 e8 33 cd f1 59 38 91 ad 9d 5d 22 ea dc 2a 51 8c 2a 6f 82 1f 4a ef e7 e6 16 c9 c5 1d 0b 61 43 2c d5 02 ca 3a 57 Data Ascii: 3y}i&t.9#2y>7q_byqL"9r==,<!_S28pK)7{wnZt0\|<59mF)G?(yhV?x`Gti'odwMNE_KIG53Y8]"QoJaC,:W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49787	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:30 UTC	467	OUT	GET /js/jquery.ui.touch-punch.js HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:30 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:30 GMT Content-Type: application/javascript Content-Length: 5074 Last-Modified: Fri, 13 Apr 2018 20:29:17 GMT Connection: close ETag: "5ad1131d-13d2" Accept-Ranges: bytes
2024-12-16 01:33:30 UTC	5074	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 e2 80 93 32 30 31 34 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 44 65 74 65 63 74 20 74 6f 75 63 68 20 73 75 70 70 6f 72 74 0a 20 20 24 2e 73 75 70 70 6f 72 74 Data Ascii: /! jQuery UI Touch Punch 0.2.3 * * Copyright 20112014, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */(function ($) { // Detect touch support $.support

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49788	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:30 UTC	761	OUT	GET /images/starthere.png HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:30 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:30 GMT Content-Type: image/png Content-Length: 16897 Last-Modified: Fri, 13 Apr 2018 20:29:16 GMT Connection: close ETag: "5ad1131c-4201" Accept-Ranges: bytes
2024-12-16 01:33:30 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 eb 00 00 00 69 08 06 00 00 00 1a fc 0b c6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 41 a3 49 44 41 54 78 da ec 9d 07 7c 54 55 f6 c7 cf 7b d3 33 a9 10 12 02 a1 f7 26 20 45 56 44 51 41 14 15 58 2b b8 96 5d dd 75 ed 2b 96 dd c5 bf bb ea aa d8 bb a8 6b 5b b1 a0 88 05 45 94 5e 94 22 48 89 42 28 49 48 48 42 48 2f 93 4c 9f 37 ef fe ef 79 ef 3e 66 12 93 29 e9 e0 fd 7d 3e ef 33 93 c9 2b f7 dd 57 be f7 9c 7b ee b9 02 21 04 b8 b8 b8 b8 b8 b8 b8 3a af 44 5e 05 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 27 a1 f4 bc 0a b8 b8 b8 b8 4e 1d Data Ascii: PNGIHDRitEXtSoftwareAdobe ImageReadyqe<AIDATx\|TU{3& EVDQAX+]u+k[E^"HB(IHHBH/L7y>f)}>3+W{!:D^\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'N
2024-12-16 01:33:30 UTC	758	IN	Data Raw: d6 d0 be 07 fd 56 eb 81 fc 03 e5 64 e3 0b 3f c2 fa 4f 0f 28 a9 5f c3 41 3a 38 bb 23 a1 a0 ee 94 13 66 70 58 73 71 71 71 71 a9 ca de d1 41 07 16 c1 5f 55 5e 2d 0b 38 e4 19 04 19 a1 ed a1 0c 35 5b ea 67 30 a3 50 56 0c 6d 99 b0 d1 57 a2 c2 58 fc cd e9 a5 96 74 19 ac 7d 6b 0f 6c 7e ff 17 25 0d ae 96 65 af 21 a4 9d 8d 42 7a a1 91 28 b9 c8 db 35 a9 20 87 35 17 17 17 17 57 94 b2 6f 78 ad c3 8e 6d f3 80 d3 60 80 3a 49 82 78 bf 8c 79 51 64 30 9a d8 cc 9c ba 40 b0 98 32 cd b5 a8 cc af a1 04 c1 d9 25 28 c9 ac 80 f5 ef 65 c0 86 37 f6 40 41 13 90 0e b6 a6 4f f4 49 2b 90 7e 84 ee 5c ec fc b3 4f 72 58 73 71 71 71 71 29 8a ed 3d b0 83 0c 6b 01 7c 0e d9 16 5f 75 a4 ba c0 05 f1 88 4e 0f 45 ab 31 49 0e 64 05 65 52 62 c7 28 a8 1d 12 94 1d 2a 87 0d 2f ef 86 55 1f ec 6b d4 92 Data Ascii: Vd?O(_A:8#fpXsqqqqA_U^-85[g0PVmWXt}kl~%e!Bz(5 5Woxm`:IxyQd0@2%(e7@AOI+~\OrXsqqqq)=k\|_uNE1IdeRb(*/Uk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	35.178.117.130	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:31 UTC	618	OUT	GET /request.js?instance=3661425590&source=5286&campaign=992&exid=70060015&variable=anura&673249116261 HTTP/1.1 Host: script.anura.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:31 UTC	414	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Expires: Sun, 28 Dec 1980 18:57:00 EST Cache-Control: private Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache X-Content-Type-Options: nosniff
2024-12-16 01:33:31 UTC	15970	IN	Data Raw: 37 65 33 66 0d 0a 76 61 72 20 61 6e 75 72 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 54 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 20 76 61 72 20 72 74 20 3d 20 7b 61 64 62 6c 6f 63 6b 65 72 3a 30 2c 77 61 69 74 3a 30 2c 73 63 68 65 6d 65 3a 27 68 74 74 70 73 3a 27 2c 68 6f 73 74 3a 27 73 63 72 69 70 74 2e 61 6e 75 72 61 2e 69 6f 27 2c 61 62 68 6f 73 74 3a 27 61 64 73 2e 61 6e 75 72 61 2e 69 6f 27 2c 72 65 73 70 6f 6e 73 65 3a 27 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 27 2c 72 65 73 75 6c 74 3a 27 72 65 73 75 6c 74 2e 6a 73 6f 6e 27 2c 63 6f 6e 74 72 6f 6c 3a 27 32 32 32 32 30 33 37 33 32 27 2c 64 74 77 3a 27 64 65 62 75 67 67 65 72 3b 27 2c 74 6f 6b 65 6e 3a 27 65 79 4a 30 65 58 41 69 4f 69 Data Ascii: 7e3fvar anura = (function(){var RT = (function(){ 'use strict'; var rt = {adblocker:0,wait:0,scheme:'https:',host:'script.anura.io',abhost:'ads.anura.io',response:'response.json',result:'result.json',control:'222203732',dtw:'debugger;',token:'eyJ0eXAiOi
2024-12-16 01:33:31 UTC	16357	IN	Data Raw: 61 2e 70 61 72 61 6d 73 3d 41 28 6e 75 6c 6c 29 3b 61 2e 70 61 72 61 6d 73 2e 63 6f 3d 66 2e 24 28 29 3b 61 2e 70 61 72 61 6d 73 2e 69 77 3d 66 2e 43 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6f 77 3d 66 2e 65 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 61 77 3d 66 2e 4f 28 29 3b 61 2e 70 61 72 61 6d 73 2e 68 69 3d 66 2e 42 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 70 6c 3d 66 2e 69 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6d 74 3d 66 2e 56 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6a 72 3d 66 2e 49 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6a 65 3d 66 2e 47 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 61 78 3d 66 2e 50 28 29 3b 61 2e 70 61 72 61 6d 73 2e 67 78 3d 66 2e 79 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 75 64 3d 0a 66 2e 49 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6d 7a 3d Data Ascii: a.params=A(null);a.params.co=f.$();a.params.iw=f.Ca();a.params.ow=f.eb();a.params.aw=f.O();a.params.hi=f.Ba();a.params.pl=f.ib();a.params.mt=f.Va();a.params.jr=f.Ia();a.params.je=f.Ga();a.params.ax=f.P();a.params.gx=f.ya();a.params.ud=f.Ib();a.params.mz=
2024-12-16 01:33:31 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 63 72 65 65 6e 58 2b 22 2c 22 2b 64 2e 73 63 72 65 65 6e 59 3a 64 2e 73 63 72 65 65 6e 4c 65 66 74 2b 22 2c 22 2b 64 2e 73 63 72 65 65 6e 54 6f 70 7d 3b 66 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 73 4e 61 4e 28 64 2e 69 6e 6e 65 72 57 69 64 74 68 29 7c 7c 69 73 4e 61 4e 28 64 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 29 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 22 42 61 63 6b 43 6f 6d 70 61 74 22 21 3d 3d 77 2e 63 6f 6d 70 61 74 4d 6f 64 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 69 73 4e 61 4e 28 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: 7fd8creenX+","+d.screenY:d.screenLeft+","+d.screenTop};f.Ca=function(){if(isNaN(d.innerWidth)\|\|isNaN(d.innerHeight))if("undefined"!==typeof w.compatMode&&"BackCompat"!==w.compatMode){if("undefined"!==typeof w.documentElement&&!isNaN(w.documentElement.cl
2024-12-16 01:33:31 UTC	16352	IN	Data Raw: 65 72 6e 61 6c 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 26 26 2d 31 3c 64 2e 65 78 74 65 72 6e 61 6c 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 73 65 71 75 65 6e 74 75 6d 22 29 26 26 61 2e 70 75 73 68 28 5b 22 73 2e 73 65 71 75 65 6e 74 75 6d 22 5d 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 26 26 0a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 2e 74 6f 53 74 72 69 6e 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ernal.toString().toLowerCase().indexOf&&-1<d.external.toString().toLowerCase().indexOf("sequentum")&&a.push(["s.sequentum"]);"function"===typeof d.close&&"function"===typeof d.close.toString&&"function"===typeof d.close.toString().toLowerCase&&"function"
2024-12-16 01:33:31 UTC	8377	IN	Data Raw: 32 30 62 31 0d 0a 2e 70 75 73 68 28 22 63 6c 65 61 6e 22 29 7d 7d 7d 63 61 74 63 68 28 72 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 59 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6e 75 6c 6c 3d 3d 3d 61 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 26 26 28 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 45 61 28 29 26 26 30 3c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 2e 6c 65 6e 67 74 68 29 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 59 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 61 7d 3b 59 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: 20b1.push("clean")}}}catch(r){}return a};Y.j=function(a){try{return"object"!==typeof a\|\|null===a\|\|"object"===typeof a&&null!==a&&(0<a.length\|\|Ea()&&0<Object.keys(a).length)}catch(b){return!0}};Y.qa=function(){return Va};Y.pb=function(){try{if("function"
2024-12-16 01:33:31 UTC	2248	IN	Data Raw: 38 63 31 0d 0a 2c 61 29 7d 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 74 66 61 2e 70 75 73 68 28 7b 6e 6f 74 69 66 79 3a 22 65 76 65 6e 74 22 2c 6e 61 6d 65 3a 22 41 6e 75 72 61 45 78 63 6c 75 73 69 6f 6e 22 2c 69 64 3a 65 7d 29 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 7d 2c 6f 75 74 62 72 61 69 6e 3a 7b 61 64 64 45 78 63 6c 75 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 6f 62 41 70 69 3b 62 26 26 28 62 2e 6d 61 72 6b 65 74 65 72 49 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 6d 61 72 6b 65 74 65 72 49 64 3f 5b 62 2e 6d 61 72 6b 65 74 65 72 49 64 2c 65 5d 3a 62 2e 6d 61 72 6b 65 74 65 72 Data Ascii: 8c1,a)}b.addEventListener("load",function(){window._tfa.push({notify:"event",name:"AnuraExclusion",id:e})})}catch(c){}}},outbrain:{addExclusion:function(e){try{var b=window.obApi;b&&(b.marketerId="string"==typeof b.marketerId?[b.marketerId,e]:b.marketer
2024-12-16 01:33:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49791	18.66.161.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:31 UTC	555	OUT	GET /CAe854059830cf4314ae327f16481e8efc HTTP/1.1 Host: b-js.ringba.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:32 UTC	558	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 13213 Connection: close Date: Mon, 16 Dec 2024 01:33:31 GMT Cache-Control: public Expires: Mon, 16 Dec 2024 01:36:14 GMT Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-Runtime: 0.0000 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Cache: Miss from cloudfront Via: 1.1 8e0d5470ce3485bd1a26df6ff95837ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: srJsGRtkKfIyzJnnwluG3xA_GtmzvmmvPQ5PGgoTPhiYgEQchbQGzA==
2024-12-16 01:33:32 UTC	13213	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 72 69 6e 67 62 61 5f 6b 6e 6f 77 6e 5f 6e 75 6d 62 65 72 73 20 3d 20 5b 7b 22 69 6e 74 22 3a 22 2b 31 38 38 38 33 30 36 30 38 31 39 22 2c 22 6c 6f 63 22 3a 22 28 38 38 38 29 20 33 30 36 2d 30 38 31 39 22 2c 22 6a 73 74 61 67 22 3a 22 4a 53 36 35 66 66 63 32 61 62 66 31 30 66 34 33 64 64 39 36 63 34 65 66 61 38 38 63 63 36 61 37 33 38 22 2c 22 72 65 70 6c 61 63 65 57 69 74 68 49 6e 74 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 61 63 65 57 69 74 68 4c 6f 63 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 61 63 65 4c 65 66 74 54 6f 52 69 67 68 74 22 3a 66 61 6c 73 65 7d 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 74 61 67 49 64 3d 22 22 2c 74 68 69 Data Ascii: (function(window){window.ringba_known_numbers = [{"int":"+18883060819","loc":"(888) 306-0819","jstag":"JS65ffc2abf10f43dd96c4efa88cc6a738","replaceWithInt":null,"replaceWithLoc":null,"replaceLeftToRight":false}];!function(e){function t(){this.tagId="",thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49792	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	455	OUT	GET /images/logo.png HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:32 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:32 GMT Content-Type: image/png Content-Length: 28476 Last-Modified: Thu, 11 Oct 2018 03:48:27 GMT Connection: close ETag: "5bbec80b-6f3c" Accept-Ranges: bytes
2024-12-16 01:33:32 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7e 00 00 00 6f 08 06 00 00 00 72 c5 cd 77 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 6e de 49 44 41 54 78 da ec 5d 05 7c 14 47 17 df b8 13 21 46 04 48 02 c4 81 60 41 83 bb 53 1c 4a 29 d2 92 52 2a 94 96 52 b4 b4 b4 d0 42 5b e0 43 0a 14 a7 78 0a 14 77 49 08 81 b8 10 77 77 d7 8b 7c f3 36 6f 61 b9 9e ec 25 47 48 60 df 8f fd dd 91 bb 9d 9b 9d 79 f3 de ff c9 bc 51 a8 ab ab a3 78 e2 89 27 9e 78 e2 89 27 9e 78 7a fb 49 91 1f 02 9e 78 e2 89 27 9e 78 e2 89 27 1e f8 f1 c4 13 4f 3c f1 c4 13 4f 3c f1 c4 03 3f 9e 78 e2 89 27 9e 78 e2 89 27 9e 78 e0 c7 13 4f 3c f1 c4 13 4f 3c f1 c4 13 0f fc 78 e2 89 27 9e 78 e2 89 27 9e 78 7a 73 a4 cc 0f c1 Data Ascii: PNGIHDR~orwtEXtSoftwareAdobe ImageReadyqe<nIDATx]\|G!FH`ASJ)R*RB[CxwIww\|6oa%GH`yQx'x'xzIx'x'O<O<?x'x'xO<O<x'x'xzs
2024-12-16 01:33:32 UTC	12337	IN	Data Raw: 0a fc d0 33 07 79 7d 69 94 f8 02 c8 cc 26 8f 74 2e 39 84 ac 23 da 32 a8 c6 87 79 e9 03 a1 17 ce 9d bb 87 80 3e 37 71 5f fa 62 c5 8a 9b a8 8c e0 79 92 71 b2 4c de 22 39 05 a1 84 72 f2 9c f7 bc 3d 3d 1d b8 2c 3c 0e 21 5f f8 7f 86 a3 93 53 10 b9 32 e5 b0 38 f3 70 ec 4b 29 9e 9a 37 fc 7b 15 f4 b5 91 04 fa 80 e6 0c 77 f2 6e d3 5a 1b d6 74 30 02 bf 7c 04 90 fc f1 80 3c 35 07 a2 f3 cf e2 d2 f2 39 6d e8 83 e2 e7 16 46 ad f2 29 d6 19 b2 90 a2 14 e0 eb db d1 a5 47 0f 3f 28 79 d4 d0 dc 68 56 f8 17 94 3f 78 02 b5 e1 60 84 13 47 8f 8e 92 74 1f d1 ad 69 14 b7 d2 27 6f 8a 00 64 15 77 b2 b5 4d e0 9a 4e 96 95 95 05 45 8c 5f 4b a5 87 9e ae ae 49 94 0c 47 bd 35 82 e8 33 cd f1 59 38 91 ad 9d 5d 22 ea dc 2a 51 8c 2a 6f 82 1f 4a ef e7 e6 16 c9 c5 1d 0b 61 43 2c d5 02 ca 3a 57 Data Ascii: 3y}i&t.9#2y>7q_byqL"9r==,<!_S28pK)7{wnZt0\|<59mF)G?(yhV?x`Gti'odwMNE_KIG53Y8]"QoJaC,:W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49793	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	460	OUT	GET /images/starthere.png HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:33 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:32 GMT Content-Type: image/png Content-Length: 16897 Last-Modified: Fri, 13 Apr 2018 20:29:16 GMT Connection: close ETag: "5ad1131c-4201" Accept-Ranges: bytes
2024-12-16 01:33:33 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 eb 00 00 00 69 08 06 00 00 00 1a fc 0b c6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 41 a3 49 44 41 54 78 da ec 9d 07 7c 54 55 f6 c7 cf 7b d3 33 a9 10 12 02 a1 f7 26 20 45 56 44 51 41 14 15 58 2b b8 96 5d dd 75 ed 2b 96 dd c5 bf bb ea aa d8 bb a8 6b 5b b1 a0 88 05 45 94 5e 94 22 48 89 42 28 49 48 48 42 48 2f 93 4c 9f 37 ef fe ef 79 ef 3e 66 12 93 29 e9 e0 fd 7d 3e ef 33 93 c9 2b f7 dd 57 be f7 9c 7b ee b9 02 21 04 b8 b8 b8 b8 b8 b8 b8 3a af 44 5e 05 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 5c 1c d6 5c 5c 5c 5c 5c 5c 27 a1 f4 bc 0a b8 b8 b8 b8 4e 1d Data Ascii: PNGIHDRitEXtSoftwareAdobe ImageReadyqe<AIDATx\|TU{3& EVDQAX+]u+k[E^"HB(IHHBH/L7y>f)}>3+W{!:D^\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'N
2024-12-16 01:33:33 UTC	758	IN	Data Raw: d6 d0 be 07 fd 56 eb 81 fc 03 e5 64 e3 0b 3f c2 fa 4f 0f 28 a9 5f c3 41 3a 38 bb 23 a1 a0 ee 94 13 66 70 58 73 71 71 71 71 a9 ca de d1 41 07 16 c1 5f 55 5e 2d 0b 38 e4 19 04 19 a1 ed a1 0c 35 5b ea 67 30 a3 50 56 0c 6d 99 b0 d1 57 a2 c2 58 fc cd e9 a5 96 74 19 ac 7d 6b 0f 6c 7e ff 17 25 0d ae 96 65 af 21 a4 9d 8d 42 7a a1 91 28 b9 c8 db 35 a9 20 87 35 17 17 17 17 57 94 b2 6f 78 ad c3 8e 6d f3 80 d3 60 80 3a 49 82 78 bf 8c 79 51 64 30 9a d8 cc 9c ba 40 b0 98 32 cd b5 a8 cc af a1 04 c1 d9 25 28 c9 ac 80 f5 ef 65 c0 86 37 f6 40 41 13 90 0e b6 a6 4f f4 49 2b 90 7e 84 ee 5c ec fc b3 4f 72 58 73 71 71 71 71 29 8a ed 3d b0 83 0c 6b 01 7c 0e d9 16 5f 75 a4 ba c0 05 f1 88 4e 0f 45 ab 31 49 0e 64 05 65 52 62 c7 28 a8 1d 12 94 1d 2a 87 0d 2f ef 86 55 1f ec 6b d4 92 Data Ascii: Vd?O(_A:8#fpXsqqqqA_U^-85[g0PVmWXt}kl~%e!Bz(5 5Woxm`:IxyQd0@2%(e7@AOI+~\OrXsqqqq)=k\|_uNE1IdeRb(*/Uk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49795	104.22.39.182	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	592	OUT	GET /campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2 HTTP/1.1 Host: create.lidstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:33 UTC	636	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:32 GMT Content-Type: text/javascript Content-Length: 123556 Connection: close x-amz-id-2: TEKOwzgwynNp3mGk1rjl/wUiPGcEklqb1VqSjlGVx5ctga/aoyNSmbxj8C52XjV+heSZ8aHEH50= x-amz-request-id: J1GTVXZ298B5EC2T x-amz-replication-status: COMPLETED Last-Modified: Thu, 10 Oct 2024 23:00:39 GMT ETag: "f6ac8f2575d07a6a2ed6f85fb2a76a2d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=1800 x-amz-version-id: G45rKRYsd_c7BQsU6R1XWlDK.yDznhBS CF-Cache-Status: HIT Age: 101 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f2aed08c9dd0f7d-EWR
2024-12-16 01:33:33 UTC	733	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 4c 65 61 64 69 44 29 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 41 20 64 75 70 6c 69 63 61 74 65 20 4c 65 61 64 69 44 20 73 63 72 69 70 74 20 68 61 73 20 62 65 65 6e 20 64 65 74 65 63 74 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 21 20 54 68 69 73 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 76 6f 69 64 65 64 2e 22 29 2c 4c 65 61 64 69 44 2e 75 74 69 6c 26 26 4c 65 61 64 69 44 2e 75 74 69 6c 2e 61 70 69 26 26 4c 65 61 64 69 44 2e 6c 6f 67 28 22 44 75 70 6c 69 Data Ascii: !function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Dupli
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 66 6f 72 28 76 61 72 20 69 3d 32 3c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 72 20 69 6e 20 74 26 26 65 2e 63 61 6c 6c 28 69 2c 74 5b 72 5d 2c 72 2c 74 29 7d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 7c 7c Data Ascii: totype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|\|
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 28 65 2e 6c 6f 67 4c 69 6d 69 74 2c 31 30 29 7c 7c 31 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 3d 76 26 6d 2c 6f 3d 62 26 6d 2c 61 3d 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 26 26 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 2e 61 70 69 2c 73 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 42 61 74 63 68 65 64 52 65 71 75 65 73 74 2c 6c 3d 75 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6c 3b 6c 2d 2d 29 28 6e 3d 45 28 65 3d 75 5b 6c 5d 29 29 2e 6d 65 73 73 61 67 65 26 26 65 2e 6c 6f 67 4c 65 76 65 6c 26 26 28 74 3d 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 63 26 26 28 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 67 2e 4c 4f 47 5f 54 59 50 45 53 2e 49 Data Ascii: (e.logLimit,10)\|\|100)}function D(){for(var e,t,n,i,r=v&m,o=b&m,a=void 0!==g.util&&void 0!==g.util.api,s=a&&"function"==typeof g.util.api.doBatchedRequest,l=u.length-1;0<=l;l--)(n=E(e=u[l])).message&&e.logLevel&&(t=e.logLevel<=c&&(e.logLevel<=g.LOG_TYPES.I
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 2c 6c 63 6b 3a 73 2c 69 6e 46 72 61 6d 65 3a 67 2e 75 74 69 6c 2e 69 6e 46 72 61 6d 65 28 29 7d 2c 67 2e 75 74 69 6c 2e 69 73 4e 75 6c 6c 28 69 29 7c 7c 28 65 2e 6e 6f 71 73 3d 21 30 29 2c 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 41 70 69 43 61 6c 6c 28 74 2c 65 29 29 2c 67 2e 75 74 69 6c 2e 65 76 65 6e 74 73 2e 66 69 72 65 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 6f 6b 65 6e 52 65 61 64 79 22 29 2c 6b 29 3a 4e 29 28 29 2c 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 43 2c 34 65 33 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 76 61 72 20 65 3d 67 2e 61 70 69 55 52 4c 2b 22 2f 47 65 6e 65 72 61 74 65 54 6f 6b 65 6e 22 2c 74 3d 7b 7d 3b 74 2e 6c 61 63 3d 61 2c 74 2e 6c 63 6b 3d 73 2c 74 2e 72 65 66 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 2c 74 2e Data Ascii: ,lck:s,inFrame:g.util.inFrame()},g.util.isNull(i)\|\|(e.noqs=!0),g.util.api.doApiCall(t,e)),g.util.events.fireCustomEvent("tokenReady"),k):N)(),r=setInterval(C,4e3)}function N(){var e=g.apiURL+"/GenerateToken",t={};t.lac=a,t.lck=s,t.ref=document.referrer,t.
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 2d 22 2b 61 2b 22 2d 22 2b 73 2c 65 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 66 22 29 2c 69 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 6e 6f 71 73 22 29 2c 67 2e 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 63 61 6c 6c 62 61 63 6b 22 29 2c 67 2e 70 72 69 76 61 63 79 5f 67 75 61 72 64 69 61 6e 5f 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 70 72 69 76 61 63 79 47 75 61 72 64 69 61 6e 43 61 6c 6c 62 61 63 6b 22 29 2c 22 72 65 73 65 74 22 3d 3d 65 26 26 54 28 29 2c 53 28 29 7d 2c 67 2e 72 65 49 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 67 2e 75 74 69 6c Data Ascii: -"+a+"-"+s,e=g.util.getQueryVariable("f"),i=g.util.getQueryVariable("noqs"),g.callback=g.util.getQueryVariable("callback"),g.privacy_guardian_callback=g.util.getQueryVariable("privacyGuardianCallback"),"reset"==e&&T(),S()},g.reInit=function(){var e=g.util
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 69 6e 65 4e 75 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 6c 69 6e 65 7c 7c 28 69 3d 65 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 65 2e 6c 69 6e 65 7c 7c 22 22 2c 72 3d 65 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 65 2e 63 6f 6c 75 6d 6e 7c 7c 22 22 29 2c 6f 2b 22 20 61 74 20 75 6e 6b 6e 6f 77 6e 2e 6a 73 3a 22 2b 69 2b 22 3a 22 2b 72 29 3b 67 2e 6c 6f 67 28 6f 2c 67 2e 4c 4f 47 5f 54 59 50 45 53 2e 45 52 52 4f 52 2c 74 2c 6e 2c 65 29 7d 2c 67 2e 73 65 74 4c 6f 67 43 6f 6e 66 69 67 3d 74 2c 67 2e 75 74 69 6c 3d 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 26 26 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 28 7b 5f 73 65 74 54 6f Data Ascii: ineNumber&&void 0===e.line\|\|(i=e.lineNumber\|\|e.line\|\|"",r=e.columnNumber\|\|e.column\|\|""),o+" at unknown.js:"+i+":"+r);g.log(o,g.LOG_TYPES.ERROR,t,n,e)},g.setLogConfig=t,g.util={},"function"==typeof LeadiDMakeGlobalFunction&&LeadiDMakeGlobalFunction({_setTo
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 72 75 6e 74 69 6d 65 53 74 79 6c 65 29 26 26 28 6e 3d 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 2c 69 3d 65 2e 73 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 66 6f 6e 74 53 69 7a 65 22 3d 3d 74 7c 7c 22 66 6f 6e 74 2d 73 69 7a 65 22 3d 3d 74 3f 22 31 65 6d 22 3a 72 2c 72 3d 65 2e 73 74 79 6c 65 2e 70 69 78 65 6c 4c 65 66 74 2b 22 70 78 22 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 69 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 6e 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 4f 62 6a 65 63 74 73 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 75 74 69 6c 2e 63 6c 6f 6e 65 28 Data Ascii: runtimeStyle)&&(n=e.runtimeStyle.left,i=e.style.left,e.runtimeStyle.left=e.currentStyle.left,e.style.left="fontSize"==t\|\|"font-size"==t?"1em":r,r=e.style.pixelLeft+"px",e.style.left=i,e.runtimeStyle.left=n),r}function mergeObjects(e,t){var n,i=util.clone(
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 31 36 26 31 35 7c 36 34 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 32 34 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 36 33 26 6e 7c 31 32 38 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 31 36 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 32 34 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 32 35 35 26 69 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e 3e 38 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e 3e 31 36 26 32 Data Ascii: >>8&255]+"-"+guidLookupTable[t>>16&15\|64]+guidLookupTable[t>>24&255]+"-"+guidLookupTable[63&n\|128]+guidLookupTable[n>>8&255]+"-"+guidLookupTable[n>>16&255]+guidLookupTable[n>>24&255]+guidLookupTable[255&i]+guidLookupTable[i>>8&255]+guidLookupTable[i>>16&2
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 41 72 72 61 79 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 29 72 65 74 75 72 6e 2d 31 21 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6e 3b 2d 2d 6e 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 4f 62 6a 65 63 74 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 3d 3d 74 5b 6e 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 73 45 6d 70 74 79 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 76 6f 69 64 20 30 2c 6e 75 6c 6c 2c 21 31 Data Ascii: =window.top}function inArray(e,t){if(Array.prototype.indexOf)return-1!=t.indexOf(e);for(var n=t.length-1;0<=n;--n)if(t[n]==e)return!0;return!1}function inObject(e,t){for(var n in t)if(e==t[n])return!0;return!1}function isEmpty(e){for(var t=[void 0,null,!1
2024-12-16 01:33:33 UTC	1369	IN	Data Raw: 64 6c 65 72 3f 74 68 69 73 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 74 68 69 73 2e 61 72 67 73 29 3a 28 73 63 72 69 70 74 53 6f 75 72 63 65 3d 22 22 2b 74 68 69 73 2e 68 61 6e 64 6c 65 72 2c 65 76 61 6c 28 73 63 72 69 70 74 53 6f 75 72 63 65 29 29 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 62 61 73 65 2e 6c 6f 67 45 72 72 6f 72 28 65 72 72 6f 72 2c 22 55 74 69 6c 20 6d 6f 64 75 6c 65 20 74 61 73 6b 2e 72 75 6e 28 29 22 29 7d 7d 3b 76 61 72 20 6e 65 78 74 48 61 6e 64 6c 65 3d 31 2c 74 61 73 6b 73 42 79 48 61 6e 64 6c 65 3d 7b 7d 2c 63 75 72 72 65 6e 74 6c 79 52 75 6e 6e 69 6e 67 41 54 61 73 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 61 64 64 46 72 6f 6d 53 65 74 49 6d 6d 65 64 69 61 74 65 41 72 67 75 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f Data Ascii: dler?this.handler.apply(void 0,this.args):(scriptSource=""+this.handler,eval(scriptSource))}catch(error){base.logError(error,"Util module task.run()")}};var nextHandle=1,tasksByHandle={},currentlyRunningATask=!1;return{addFromSetImmediateArguments:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49794	159.65.98.5	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	843	OUT	GET /js.ashx?o=992&_=1734312808006 HTTP/1.1 Host: track.walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==; _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:33 UTC	166	IN	HTTP/1.1 200 OK date: Mon, 16 Dec 2024 01:33:33 GMT content-type: text/javascript; charset=utf-8 content-length: 572 cache-control: private connection: close
2024-12-16 01:33:33 UTC	572	IN	Data Raw: 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 61 74 6f 72 28 33 2c 27 66 69 72 73 74 5f 6e 61 6d 65 27 2c 6e 75 6c 6c 2c 27 56 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 74 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 27 29 3b 0d 0a 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 61 74 6f 72 28 34 2c 27 6c 61 73 74 5f 6e 61 6d 65 27 2c 6e 75 6c 6c 2c 27 56 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 74 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 27 29 3b 0d 0a 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 61 74 6f 72 28 35 2c 27 61 64 64 72 65 73 73 27 2c 6e 75 6c 6c 2c 27 56 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 74 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 27 29 3b 0d 0a 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 Data Ascii: CKM.add_validator(3,'first_name',null,'Valid input for this field is required');CKM.add_validator(4,'last_name',null,'Valid input for this field is required');CKM.add_validator(5,'address',null,'Valid input for this field is required');CKM.add_valid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49796	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	696	OUT	GET /fonts/MyriadPro-Bold.woff HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://walk-inbathtubshop.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://walk-inbathtubshop.com/css/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:33 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:32 GMT Content-Type: application/font-woff Content-Length: 52600 Last-Modified: Thu, 11 Oct 2018 03:52:52 GMT Connection: close ETag: "5bbec914-cd78" Accept-Ranges: bytes
2024-12-16 01:33:33 UTC	16127	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 cd 78 00 10 00 00 00 01 be 74 00 02 00 3e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 00 cd 10 00 00 00 4a 00 00 00 88 64 da 5d 02 46 46 54 4d 00 00 cd 5c 00 00 00 1a 00 00 00 1c 63 0f 56 b3 47 44 45 46 00 00 a7 04 00 00 00 46 00 00 00 4e 13 b5 16 ac 47 50 4f 53 00 00 ad d0 00 00 1f 3f 00 00 51 00 e8 aa 14 be 47 53 55 42 00 00 a7 4c 00 00 06 84 00 00 0b 82 84 04 2e e3 4f 53 2f 32 00 00 01 e8 00 00 00 59 00 00 00 60 5f 4d 92 8a 63 6d 61 70 00 00 08 68 00 00 03 50 00 00 04 96 78 8c 5a 05 67 61 73 70 00 00 a6 fc 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 12 44 00 00 83 35 00 01 20 c8 fa 17 b3 fb 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 f2 51 11 33 68 68 65 61 00 00 01 a4 00 00 00 Data Ascii: wOFFxt>BASEJd]FFTM\cVGDEFFNGPOS?QGSUBL.OS/2Y`_McmaphPxZgaspglyfD5 headl66Q3hhea
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: cd 4b d1 7c d2 22 e5 14 d3 a7 c2 90 b9 bc ea b3 ad 82 e7 02 be a7 6d 20 3f ed 15 33 c4 e5 69 d0 21 f8 5f cb 9c 32 c3 ad 81 de 2b 37 a3 08 fc 0f e8 ba a4 08 f0 29 ff 56 0a 1e 61 5f 95 32 65 be 2a 1c fc 38 53 8e 51 29 49 15 3b 6a 49 2f 24 13 59 eb 50 6e 4c c1 f2 3e a4 87 d6 a7 ea 05 f1 a7 82 da 68 1d fc 7b ea 1a 49 31 10 78 7b 69 01 b4 ae c5 64 5d d3 82 31 96 83 14 2c 70 8a c1 b4 e6 16 6f 28 b2 8c 41 fd 2d fe fa 9f e2 75 51 76 fb df bc 3d 2e bc f9 c8 96 2b e4 66 63 1f 5a 68 fe ef 07 c4 aa 9a 96 f6 bb b5 3d 20 47 e0 d4 95 f3 0f 84 d3 f3 03 ce 23 3b 2c 4c 6a 40 72 97 0f df 46 82 af 2a 72 2e b9 3f 18 15 8a f6 9b 01 96 db 34 e4 dd 01 fe 35 8c ff 05 82 bf 76 26 fc 03 7c 6b a1 f3 78 26 d0 d6 0b 33 21 b3 ef 30 eb cd cd ae 64 d6 61 86 cc 73 9e d6 15 26 a3 fd 8b eb Data Ascii: K\|"m ?3i!_2+7)Va_2e8SQ)I;jI/$YPnL>h{I1x{id]1,po(A-uQv=.+fcZh= G#;,Lj@rFr.?45v&\|kx&3!0das&
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 1b b8 26 63 8a ce 2c 31 94 54 05 cb 8b 4a 33 05 67 92 a4 47 80 d1 f0 c7 df 68 ae b5 ed b4 35 36 19 1a 8e 6e d8 79 aa ad a6 f1 e5 0e 89 c4 60 ed 6a aa ea 34 17 e6 81 cd 51 03 25 a9 d5 43 e3 f8 26 27 8e d5 f3 47 6b d0 a9 93 15 84 61 cb d0 29 a5 9c 50 d4 65 1c 12 d2 fe e5 ee f6 7c 58 64 29 f1 75 2d be a5 c3 af 10 dc 62 b1 14 5a 33 85 df 5d 4b 70 b8 57 81 de d6 85 cd 7d 65 0e a7 42 b3 71 22 fc 3b 20 de 16 94 29 c3 bf 07 72 4f c8 a8 92 14 84 ff c0 80 79 93 b1 20 3e 62 2c 6f 52 fb 8a e9 82 66 c6 c4 42 64 45 06 f3 09 1b 4c 35 88 fd 20 04 23 6b 0a 23 64 91 a6 a6 df c0 5d b6 12 9c ac df 82 3c 06 23 8b c4 07 bc 0f c5 f0 01 82 fd 8c 56 59 48 ce ac f0 10 cd dc 23 e5 6c 78 80 03 1d 8e ec 84 85 2e de a1 28 77 57 3c 7b 97 a6 d8 5d 71 43 b0 f2 e0 de e1 6a 47 b5 2f 74 e5 Data Ascii: &c,1TJ3gGh56ny`j4Q%C&'Gka)Pe\|Xd)u-bZ3]KpW}eBq"; )rOy >b,oRfBdEL5 #k#d]<#VYH#lx.(wW<{]qCjG/t
2024-12-16 01:33:33 UTC	3705	IN	Data Raw: 37 83 8a 34 7a 9d 43 ce 4e 78 4b f6 a7 78 6b 3a f8 52 8d bc 26 d7 08 c6 42 6a ac 19 2d cf a9 e3 f8 2e 82 ac 46 92 fb a6 e8 55 12 47 6d a0 8f cd ce bf f3 c5 34 e0 a4 4e 4e 18 35 9e 71 19 67 64 dc e1 f2 f8 ea 5a 7e 21 b7 46 a6 96 36 6a 41 14 bc b4 d8 9f d4 a4 04 3b 56 11 d3 4f 07 77 a6 b6 85 0d 33 c5 e5 cc 77 92 87 bc 52 e4 8e fe 8e 2e a9 74 e5 cc 99 53 34 7d ca e3 d9 a6 52 8f dd 41 3b c4 cf 27 cd 6b f4 ce cc 20 ed c4 5b d1 92 32 a3 30 a3 7b ae eb fd 25 3e 03 4d 6c d1 62 b3 dc 24 c3 b5 ce ac e9 4d 67 26 82 2f 2e 30 33 55 e1 53 73 22 ce 9c 96 2a 72 bd d7 29 ac 68 cc 7a a8 4c 76 66 ca 50 6b 04 ab 21 63 25 2b 95 5d 94 12 59 7f 96 8a 67 ac 2f ba 81 07 bb c3 5b 72 97 25 46 27 c0 07 a8 2f 7c 1a 9d 04 1f a3 93 e1 43 74 0a 7c 98 fa c1 87 a8 3f 7c 06 0d 80 cf c2 ca Data Ascii: 74zCNxKxk:R&Bj-.FUGm4NN5qgdZ~!F6jA;VOw3wR.tS4}RA;'k [20{%>Mlb$Mg&/.03USs"*r)hzLvfPk!c%+]Yg/[r%F'/\|Ct\|?\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49797	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	699	OUT	GET /fonts/MyriadPro-Regular.woff HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://walk-inbathtubshop.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://walk-inbathtubshop.com/css/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:33 UTC	257	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:32 GMT Content-Type: application/font-woff Content-Length: 49404 Last-Modified: Thu, 11 Oct 2018 03:52:53 GMT Connection: close ETag: "5bbec915-c0fc" Accept-Ranges: bytes
2024-12-16 01:33:33 UTC	16127	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 c0 fc 00 0e 00 00 00 01 41 20 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 00 01 44 00 00 00 44 00 00 00 6c 08 10 29 47 43 46 46 20 00 00 01 88 00 00 8f 87 00 00 c7 45 ce c5 4d 83 46 46 54 4d 00 00 91 10 00 00 00 1a 00 00 00 1c 3a fe 7e 90 47 44 45 46 00 00 91 2c 00 00 00 4e 00 00 00 60 10 f1 13 32 47 50 4f 53 00 00 91 7c 00 00 18 2d 00 00 4b 64 ae 00 b3 80 47 53 55 42 00 00 a9 ac 00 00 09 c6 00 00 15 26 cc 19 79 34 4f 53 2f 32 00 00 b3 74 00 00 00 5b 00 00 00 60 7d 9b 3f f8 63 6d 61 70 00 00 b3 d0 00 00 04 73 00 00 06 2c d6 7b d4 46 68 65 61 64 00 00 b8 44 00 00 00 34 00 00 00 36 04 d8 4d 09 68 68 65 61 00 00 b8 78 00 00 00 21 00 00 00 24 07 f1 06 00 68 6d 74 78 00 00 b8 9c 00 00 05 Data Ascii: wOFFOTTOA BASEDDl)GCFF EMFFTM:~GDEF,N`2GPOS\|-KdGSUB&y4OS/2t[`}?cmaps,{FheadD46Mhheax!$hmtx
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: eb 77 17 7f 29 4a 46 0c aa 1a 39 54 ad 11 2e f5 78 17 ee 45 e3 ad 9e 88 7d 1d 1d 7f 3f 5c 3c b7 40 9c 6a 8f be 46 6e 61 c7 7f eb 72 34 77 59 77 fc fd c2 bb 5e 85 1d 6a 38 b5 a0 7a be ab 84 e6 68 c1 98 f3 1d d8 15 6b a3 e3 a3 05 d7 51 0a 38 0c b2 4e e6 66 1c 84 f8 81 7b 2f 00 b4 a5 b8 4e e6 0d dd 64 7c ef a9 93 7b 0d 99 54 0e fb 9a 70 dd cc 1b ba c8 00 ef f6 69 24 fc 29 9e da 2a 0d f0 5f e6 8e 36 a5 53 26 32 86 32 c0 c9 ed 69 29 94 1c 68 3c c7 4d 81 d8 ce e5 68 7b 3e d0 70 65 ce 17 49 41 54 42 74 dc ca 68 0f 77 77 07 40 8d f0 2f 7b 63 0a f7 99 23 d5 87 1f f9 da f5 ae c9 73 70 a1 78 ff 29 6a 23 d8 3c 5a c2 3c 6a 6e 6b a5 0b 0e ed 14 c1 55 2c d8 5a 11 5a 5b 4b b8 70 cc 3e a4 31 b7 0a d3 12 24 09 d9 eb f3 41 31 d5 fc c3 12 64 fa 68 be 2d d9 ad fb b6 e4 84 0b Data Ascii: w)JF9T.xE}?\<@jFnar4wYw^j8zhkQ8Nf{/Nd\|{Tpi$)*_6S&22i)h<Mh{>peIATBthww@/{c#spx)j#<Z<jnkU,ZZ[Kp>1$A1dh-
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: ec 44 af 5f 06 14 e1 5d ee d0 b3 03 0f d3 f8 08 f8 30 61 2f 15 ee 19 49 44 80 9d 83 1b 3f ca b5 30 83 a0 35 fd a5 99 3f ae 3e 91 49 aa 7c 26 a9 be 9e 5d 01 de e9 70 a2 f6 50 84 5e b8 9e c9 e9 7e 74 09 5d 40 7b d3 1f a9 35 35 c2 6e 8a 50 84 a2 cf 02 11 0e fa 28 10 a1 86 94 d1 22 4d 90 e4 9f 16 9c 01 4d 70 23 fd 78 59 5e 5e 42 29 5c 84 4a e7 b2 cd 39 a6 f9 ba 49 e3 98 c8 5d b5 db 98 31 3c 56 21 0d c9 8b 6a a3 b1 a3 16 eb f7 97 da 82 53 88 fb 1e c2 5a 28 b9 27 b8 13 58 60 99 34 32 61 7c ec 8a 28 37 f2 44 b0 23 c3 ab c6 e5 67 cf fa ad a5 fa 09 6c 42 d7 a7 9d ab 84 66 38 ed 76 dc 3a cb f8 f0 d2 84 91 a0 07 8b 77 6f da a9 68 34 ec 28 90 67 d5 e6 da d3 f4 f4 47 4a c7 0a 44 f9 4e 57 dd 6a f8 b3 34 37 9f c2 5b 45 68 78 41 c9 c8 2f 43 c3 8b be 0c 0a df c9 fc a9 55 Data Ascii: D_]0a/ID?05?>I\|&]pP^~t]@{55nP("MMp#xY^^B)\J9I]1<V!jSZ('X`42a\|(7D#glBf8v:woh4(gGJDNWj47[EhxA/CU
2024-12-16 01:33:33 UTC	509	IN	Data Raw: e5 7f 75 dc c0 cb 7a 03 5d 14 28 31 83 42 82 18 13 68 30 5c d3 bf 85 c0 0e 86 0e 22 f2 19 41 12 87 e4 59 91 8f 44 46 6f 86 23 e4 18 d3 aa 22 0d f3 14 76 2d 02 b7 fb 52 1a 0c 83 85 72 65 67 92 de 92 7c 2f 17 9e 27 f4 0c 2d f5 9d 42 6e f3 e8 59 5f 63 2f ad 2d 22 a5 9c b4 38 d0 2d ca 99 4a e2 89 66 d7 ac 15 04 01 eb 44 c5 48 b2 70 56 69 99 55 ec 28 1f 17 aa 2c 94 d0 32 e2 ac 93 a6 6c 60 9c 2b 36 90 95 54 97 c6 78 c2 43 ce fa e4 90 6b d6 93 15 67 a5 cc a3 24 8f 49 fc d8 9d 87 a0 88 26 27 45 b5 e1 98 e2 89 88 f5 15 b1 29 22 c6 05 95 27 68 11 03 19 5f a4 82 60 8b 52 33 87 b6 83 36 95 df c3 3e 0e 88 6e cb cd c5 36 7f 57 d8 e2 41 b0 d3 ee f4 f6 0f da f3 38 14 66 73 21 fb 1f 02 7f d8 f5 0a 43 1c 52 fe b7 93 ea d3 39 33 3b bb b1 06 64 ed da bb 93 0b 5f 4e b7 bf 4d Data Ascii: uz](1Bh0\"AYDFo#"v-Rreg\|/'-BnY_c/-"8-JfDHpViU(,2l`+6TxCkg$I&'E)"'h_`R36>n6WA8fs!CR93;d_NM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49798	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	453	OUT	GET /images/bg.jpg HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:33 UTC	248	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:32 GMT Content-Type: image/jpeg Content-Length: 126411 Last-Modified: Fri, 13 Apr 2018 20:29:16 GMT Connection: close ETag: "5ad1131c-1edcb" Accept-Ranges: bytes
2024-12-16 01:33:33 UTC	16136	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 02 d5 05 9c 03 01 11 00 02 11 01 03 11 01 ff c4 00 ac 00 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDucky<Adobed
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 7d a5 f8 7d 27 db dd 92 cb df b9 72 e2 3d a2 5b 8f 44 fd 27 e5 a2 6c cf 2f b8 9d 5c 5a fd 9e 4d 8c 04 2b fd 38 9c 63 1f 00 17 3c b5 1c 33 e5 0a 3d ce 55 50 1b c8 fd 21 94 b7 4b a8 4c 95 cb db fb 04 3b b7 1a 5c 83 77 b5 cd 04 fb 72 88 c3 71 d0 ad 4d d8 ba bf 3f ee 3d 90 f6 ee e1 c8 e1 7d c4 04 2e 9c a5 3e 38 1e 99 c3 4d b2 fc de 0a dd e3 5a eb 5d 3f 64 fd a3 2f b8 a5 dc 61 c7 e7 cb 85 cb e1 d6 5e 89 82 41 81 0f 19 0f 92 ce bc ae f7 0f b4 ff 00 68 fb a7 70 fb 26 ee 5f 0a ce eb 54 fb 4c ac 7b 2b b0 6f f3 3e 26 32 7c 17 4b eb 6f 66 70 4f 67 ae 7c d7 b3 fe f8 f7 6a 7e e4 ec fc 23 c0 e3 57 69 a4 ca 63 98 25 19 4c 06 c0 00 31 5e 4d fa b6 fb 3b f5 f7 69 7e 2b f9 c7 93 c8 bc 5e 6b 62 ef 88 cd c8 59 9d 5b 3a 6d b4 8e 9e dd fb f9 59 ee 50 36 ce 04 16 96 45 8b ab 25 Data Ascii: }}'r=[D'l/\ZM+8c<3=UP!KL;\wrqM?=}.>8MZ]?d/a^Ahp&_TL{+o>&2\|KofpOg\|j~#Wic%L1^M;i~+^kbY[:mYP6E%
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 08 a9 f6 99 32 60 8c 0a 22 08 40 f0 64 03 06 c9 30 a5 8b 33 a6 01 e6 c9 dc 7e 09 81 36 55 55 98 4e 11 97 c4 05 47 15 dd 8f 81 32 65 1d d5 9d 76 e2 3f 04 1c 96 76 5e 64 06 ee 3d a2 c8 8c a3 91 41 1f ba ee fc 41 13 64 24 18 e3 a8 65 07 4d 1f 70 c4 13 ee 45 89 cd 07 5d 3d eb 8f 61 db bb 6b a0 ec a2 f2 70 89 dc 0e 7f 04 c2 97 26 42 36 c0 be 5f c1 04 89 93 b8 c4 b8 28 1d 64 b0 19 97 41 a8 f5 6c 1a 97 c1 06 d1 93 44 8d 46 4e 81 01 26 13 25 a5 a8 4c b2 c8 08 d9 6b b6 03 22 3a a6 46 e2 2c 03 e4 13 23 39 39 91 73 97 55 4c 14 66 f9 8c 06 48 61 71 94 26 31 3b 42 18 02 21 c9 19 2b 83 04 19 9b 54 c1 85 40 49 b3 c4 a6 0c 14 81 d8 63 e1 9e aa 23 68 0f d1 18 e2 30 41 8e c1 17 3d 50 11 25 83 92 dd 15 0c ca 13 90 1b 5b a1 50 33 09 c3 2c 47 42 83 29 57 00 5c 61 25 a4 2a c3 Data Ascii: 2`"@d03~6UUNG2ev?v^d=AAd$eMpE]=akp&B6_(dAlDFN&%Lk":F,#99sULfHaq&1;B!+T@Ic#h0A=P%[P3,GB)W\a%*
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 22 31 7f 5f 55 2c 4f 31 54 78 73 63 29 4a 33 8e 30 98 c8 a6 1a 9b 9c 79 57 4e d9 6e 9b 03 84 26 cc ad d5 ac 88 5d 6f ba 31 93 47 03 20 35 59 c4 5f 27 45 77 5d 74 6c 98 80 ae d1 84 4c b0 32 65 3c 62 fe 4a e6 df c9 91 7b ac f3 9f 91 0a 78 33 7b 2d aa 8c 2c b1 cc 8b 8a c6 e7 25 f2 57 18 6b 36 ae ba 78 b5 93 6c 66 44 e4 3e 9c 49 f8 84 49 d6 de a9 44 07 31 db 32 30 23 a7 8a c6 d1 da 5c 34 95 d6 53 11 39 63 a8 58 b1 b9 b3 a0 44 9a 84 e5 e5 33 c4 2c e1 d2 50 77 47 69 8c 45 98 f9 87 82 98 6e 57 55 67 cc 5a cf d3 23 0a fc 56 6c 75 95 16 dd 65 15 42 b1 01 7e e7 c4 68 ac 8c ed b3 18 5f 1b 60 d2 8f b7 2c a3 1f 11 aa b8 62 6e bf 76 d8 35 73 1e 6d 7e 0a 61 a9 b3 a6 17 5a 3c b3 8b 45 b0 51 a9 58 cb 74 83 c0 e4 4b ab 23 1b 79 65 11 be e8 4b 70 91 0d d1 4b a2 eb d9 63 a6 Data Ascii: "1_U,O1Txsc)J30yWNn&]o1G 5Y_'Ew]tlL2e<bJ{x3{-,%Wk6xlfD>IID120#\4S9cXD3,PwGiEnWUgZ#VlueB~h_`,bnv5sm~aZ<EQXtK#yeKpKc
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 0a 61 2a ed b4 11 18 c3 e8 fa 9d 71 af 56 98 75 dd 5c e1 4d 1b a5 ef 0b 47 94 1c c2 e7 9e 5e 8c 6b 59 4b b7 6e b1 85 b1 13 18 ec 39 2d 65 c3 7e b8 54 4f b7 c4 ce ab b9 32 85 cf b8 6d f5 2c ed 94 eb b1 36 77 40 65 be b7 9d f1 2d 1b 80 f3 3e 9f c1 66 fd 9d 31 6d e1 d1 47 14 ca 52 e5 f2 ad dc 65 89 ac be f9 4b a2 ce 5d a6 95 cd c9 91 b2 df 72 15 7b 10 8f ff 00 eb f5 f1 5d 74 71 de 61 50 31 2d 64 70 90 c1 96 eb 3a 53 e7 79 e2 e7 fe db 10 cb 2d ed 1c d2 94 e5 0a f1 27 69 76 5b 8e 38 cb 09 4c 8b 0e 61 8f a5 6b 2e 5b 6d 65 c3 78 72 01 83 98 b1 1a ac d5 9d 95 44 82 d2 ae 07 74 b5 59 cb 73 6a ef e2 f1 48 88 9d 84 19 8f 4f 82 e7 76 e5 eb d3 af 32 65 d0 7b 7d 16 c5 b9 10 8d bb b1 0c 31 05 66 ef 5e 8d 7d 6d 55 67 0e 8a 21 1f 6e 3b 26 3d 32 1a 2c 5d 9a fc 72 7c 39 39 Data Ascii: a*qVu\MG^kYKn9-e~TO2m,6w@e->f1mGReK]r{]tqaP1-dp:Sy-'iv[8Lak.[mexrDtYsjHOv2e{}1f^}mUg!n;&=2,]r\|99
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 66 36 8f 0b 9f f6 9f 1e f7 97 19 e9 97 e4 39 1f 82 fa 7e a7 ec f6 d7 39 7e 6b f6 5f ea fd 7d b8 bd 7c 3e 77 9b da 79 bc 32 61 64 08 03 eb 00 90 be e7 47 bf a6 ff 00 2f c3 7b ff 00 a0 ed e8 b9 c6 63 84 c0 ee cd c2 f7 71 b4 e1 f1 36 bb 6b c7 c0 c8 f5 f0 59 d7 4b f5 66 53 38 e4 19 6b 15 9c 7d cf 79 01 8a b1 7f 1a 09 24 2b 57 6c 7d 14 c5 94 64 dc a2 29 ce 4c 88 08 03 d5 f2 53 01 bc 70 29 80 c9 7f 86 a9 52 8d a0 7a 7f 8a 80 da 0d 90 86 4f 99 4b 5b 8e 8b 78 d1 a4 08 6e 12 94 f1 70 5f 05 ce 6d 96 76 9c b2 b0 46 04 57 10 e7 32 b7 08 51 9c c1 91 81 35 cc 0c 00 c9 2e ad 65 10 13 96 24 93 2f a8 94 91 8d ab 5a a7 28 4f 70 00 81 99 29 64 4c ab dc 9c e3 23 22 07 e5 53 0b 91 08 3f 98 cb 16 c8 2b f0 cd 31 00 06 e3 80 3f 52 c6 cc e5 b5 7e d3 87 99 35 c3 12 3a ae 74 cb a6 Data Ascii: f69~9~k_}\|>wy2adG/{cq6kYKfS8k}y$+Wl}d)LSp)RzOK[xnp_mvFW2Q5.e$/Z(Op)dL#"S?+1?R~5:t
2024-12-16 01:33:33 UTC	16384	IN	Data Raw: 4f 0b 8f ca ac c3 91 01 38 e8 5b 15 eb ea f7 76 eb 7c ff 00 7b d0 ea ee 9f da 72 f9 de e1 f6 98 c6 7c 19 fb 72 ff 00 c5 2c 7e 6b ec 7a bf b6 ce bc bf 21 ef ff 00 a9 df fb ea f0 a7 c7 e4 d1 2d 96 d6 44 c6 64 8c 17 d4 eb f6 f5 d9 f8 6f 6b d1 ed ea db 16 5c 23 dc 93 12 0e 23 a2 f4 cb 2b c7 f8 f0 da 99 92 08 38 60 ee b1 63 8f 64 e5 bd 73 02 b3 a9 3a f4 59 ba b9 d8 a1 65 70 0e 7c c4 a9 e0 48 9b 39 7c b8 44 c6 b9 11 5c b4 19 24 eb 8f 46 9b 59 ae 19 56 2c da 4b 9c 31 c5 99 5f 17 3f 1c aa 22 1b e0 f2 62 73 64 b0 bc 3a a9 34 71 e5 22 20 6e 9c f2 94 b2 0b 8e d2 da ba f6 4c 72 ce db 22 24 77 44 6e f0 d1 75 d6 33 c5 60 6d 11 2d 28 f9 b4 92 de 17 c2 b1 b6 e1 21 e5 24 78 ad 4d 5b 92 c7 2d 93 94 81 77 3e 2a cd 5d 35 8c a3 3b 03 88 02 da ba dc 6f 08 91 20 be 4b 59 53 71 Data Ascii: O8[v\|{r\|r,~kz!-Ddok\##+8`cds:Yep\|H9\|D\$FYV,K1_?"bsd:4q" nLr"$wDnu3`m-(!$xM[-w>*]5;o KYSq
2024-12-16 01:33:33 UTC	11971	IN	Data Raw: 8e 52 1c 4e bf 56 a9 83 64 ca c2 74 c1 1b 9f 07 13 86 12 65 16 0a c1 25 9b 72 8d 36 a2 70 aa 62 73 0f 17 69 45 15 b4 2f 26 f0 64 3c 84 e0 3c 16 6b 5a ed 85 c6 c1 55 f3 94 70 84 b2 0b 2e d3 b6 34 3c 8a a5 c6 9d 3e df 94 97 12 70 ee b3 85 ec df 84 f1 69 a2 cc 2c 9c 85 c2 58 c4 e5 b5 66 b7 eb f2 f5 2c e3 dd 12 23 54 3f 49 b0 f8 ae 3b 6e f7 de ae 1c 32 a8 7a eb 91 9d 8f 8c 64 30 5d 7c 9e 2f c5 83 97 14 b7 b8 62 23 30 3c f8 e8 99 5b c2 63 6c 8d 32 ae 51 1b 23 88 25 47 3d 8e 33 db 00 20 e1 fc ca d8 d6 bb c9 f0 e9 ab 97 6c 25 ba 25 a5 3e ba ae 76 3a 7e 5d ab a6 89 d7 c8 b3 cd 06 b8 69 a1 5c ac 7a ba b4 f2 f9 72 4e db 84 ce 2c c7 25 d7 5d 1e 7d bb 6b a7 8a 68 b4 6f b6 5b 4c 72 f1 58 de 3b 74 f6 36 32 3e d0 9c 08 93 1f 2b ac 4d 5e d9 d9 0e 3e e5 f5 e4 d3 86 2f d5 Data Ascii: RNVdte%r6pbsiE/&d<<kZUp.4<>pi,Xf,#T?I;n2zd0]\|/b#0<[cl2Q#%G=3 l%%>v:~]i\zrN,%]}kho[LrX;t62>+M^>/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49799	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:32 UTC	624	OUT	GET /trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635 HTTP/1.1 Host: api.trustedform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:33 UTC	297	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 16 Dec 2024 01:33:33 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635
2024-12-16 01:33:33 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49800	35.178.117.130	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:33 UTC	436	OUT	GET /request.js?instance=3661425590&source=5286&campaign=992&exid=70060015&variable=anura&673249116261 HTTP/1.1 Host: script.anura.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:34 UTC	414	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Expires: Sun, 28 Dec 1980 18:57:00 EST Cache-Control: private Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache X-Content-Type-Options: nosniff
2024-12-16 01:33:34 UTC	15970	IN	Data Raw: 37 65 33 66 0d 0a 76 61 72 20 61 6e 75 72 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 54 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 20 76 61 72 20 72 74 20 3d 20 7b 61 64 62 6c 6f 63 6b 65 72 3a 30 2c 77 61 69 74 3a 30 2c 73 63 68 65 6d 65 3a 27 68 74 74 70 73 3a 27 2c 68 6f 73 74 3a 27 73 63 72 69 70 74 2e 61 6e 75 72 61 2e 69 6f 27 2c 61 62 68 6f 73 74 3a 27 61 64 73 2e 61 6e 75 72 61 2e 69 6f 27 2c 72 65 73 70 6f 6e 73 65 3a 27 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 27 2c 72 65 73 75 6c 74 3a 27 72 65 73 75 6c 74 2e 6a 73 6f 6e 27 2c 63 6f 6e 74 72 6f 6c 3a 27 31 30 32 38 39 32 27 2c 64 74 77 3a 27 64 65 62 75 67 67 65 72 3b 27 2c 74 6f 6b 65 6e 3a 27 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 Data Ascii: 7e3fvar anura = (function(){var RT = (function(){ 'use strict'; var rt = {adblocker:0,wait:0,scheme:'https:',host:'script.anura.io',abhost:'ads.anura.io',response:'response.json',result:'result.json',control:'102892',dtw:'debugger;',token:'eyJ0eXAiOiJKV
2024-12-16 01:33:34 UTC	16357	IN	Data Raw: 2e 65 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 61 77 3d 66 2e 4f 28 29 3b 61 2e 70 61 72 61 6d 73 2e 68 69 3d 66 2e 42 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 70 6c 3d 66 2e 69 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6d 74 3d 66 2e 56 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6a 72 3d 66 2e 49 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6a 65 3d 66 2e 47 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 61 78 3d 66 2e 50 28 29 3b 61 2e 70 61 72 61 6d 73 2e 67 78 3d 66 2e 79 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 75 64 3d 0a 66 2e 49 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6d 7a 3d 66 2e 58 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6f 70 3d 66 2e 63 62 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6c 72 3d 66 2e 4d 61 28 29 3b 61 2e 70 61 72 61 6d 73 2e 6c 64 3d 66 2e 4b 61 28 29 3b 61 2e 70 Data Ascii: .eb();a.params.aw=f.O();a.params.hi=f.Ba();a.params.pl=f.ib();a.params.mt=f.Va();a.params.jr=f.Ia();a.params.je=f.Ga();a.params.ax=f.P();a.params.gx=f.ya();a.params.ud=f.Ib();a.params.mz=f.Xa();a.params.op=f.cb();a.params.lr=f.Ma();a.params.ld=f.Ka();a.p
2024-12-16 01:33:34 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 69 66 28 69 73 4e 61 4e 28 64 2e 69 6e 6e 65 72 57 69 64 74 68 29 7c 7c 69 73 4e 61 4e 28 64 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 29 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 22 42 61 63 6b 43 6f 6d 70 61 74 22 21 3d 3d 77 2e 63 6f 6d 70 61 74 4d 6f 64 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 69 73 4e 61 4e 28 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 26 26 21 69 73 4e 61 4e 28 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 29 72 65 74 75 72 6e 20 77 2e 64 6f 63 75 6d 65 6e Data Ascii: 7fd8if(isNaN(d.innerWidth)\|\|isNaN(d.innerHeight))if("undefined"!==typeof w.compatMode&&"BackCompat"!==w.compatMode){if("undefined"!==typeof w.documentElement&&!isNaN(w.documentElement.clientWidth)&&!isNaN(w.documentElement.clientHeight))return w.documen
2024-12-16 01:33:34 UTC	16352	IN	Data Raw: 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 73 65 71 75 65 6e 74 75 6d 22 29 26 26 61 2e 70 75 73 68 28 5b 22 73 2e 73 65 71 75 65 6e 74 75 6d 22 5d 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 26 26 0a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 2e 74 6f 53 74 72 69 6e 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 63 6c 6f 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 26 26 2d 31 3c 64 2e 63 6c 6f 73 65 2e 74 6f 53 74 Data Ascii: LowerCase().indexOf("sequentum")&&a.push(["s.sequentum"]);"function"===typeof d.close&&"function"===typeof d.close.toString&&"function"===typeof d.close.toString().toLowerCase&&"function"===typeof d.close.toString().toLowerCase().indexOf&&-1<d.close.toSt
2024-12-16 01:33:34 UTC	10551	IN	Data Raw: 32 39 32 66 0d 0a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6e 75 6c 6c 3d 3d 3d 61 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 26 26 28 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 45 61 28 29 26 26 30 3c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 2e 6c 65 6e 67 74 68 29 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 59 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 61 7d 3b 59 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 21 78 28 6e 2e 73 65 6e 64 42 65 61 63 6f 6e 29 26 26 21 53 61 28 6e 2e 73 65 6e 64 42 65 61 63 6f 6e 29 29 72 65 74 75 72 6e 20 Data Ascii: 292fect"!==typeof a\|\|null===a\|\|"object"===typeof a&&null!==a&&(0<a.length\|\|Ea()&&0<Object.keys(a).length)}catch(b){return!0}};Y.qa=function(){return Va};Y.pb=function(){try{if("function"===typeof n.sendBeacon&&!x(n.sendBeacon)&&!Sa(n.sendBeacon))return
2024-12-16 01:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49806	35.178.117.130	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:34 UTC	654	OUT	POST /response.json?46852511047 HTTP/1.1 Host: script.anura.io Connection: keep-alive Content-Length: 6666 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:34 UTC	6666	OUT	Data Raw: 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 55 78 4d 69 4a 39 2e 65 79 4a 70 63 33 4d 69 4f 69 49 30 4d 54 6b 79 4e 7a 51 77 4e 6a 49 78 49 69 77 69 61 57 46 30 49 6a 6f 78 4e 7a 4d 30 4d 7a 45 79 4f 44 45 78 4c 6a 4d 77 4e 6a 49 77 4d 79 77 69 62 6d 4a 6d 49 6a 6f 78 4e 7a 4d 30 4d 7a 45 79 4f 44 45 78 4c 6a 4d 77 4e 6a 49 77 4d 79 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 4d 30 4d 7a 45 79 4f 44 63 78 4c 6a 4d 77 4e 6a 49 77 4d 79 77 69 61 6e 52 70 49 6a 6f 69 4d 55 5a 6f 51 6e 4a 50 56 58 6f 72 54 54 5a 61 62 6b 6c 6d 62 43 49 73 49 6d 46 31 5a 43 49 36 49 6a 4d 32 4e 6a 45 30 4d 6a 55 31 4f 54 41 69 4c 43 4a 74 64 47 6b 69 4f 69 49 77 4c 6a 4d 77 4e 6a 49 77 4d 79 49 73 49 6e 4e 73 64 43 49 36 Data Ascii: token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpc3MiOiI0MTkyNzQwNjIxIiwiaWF0IjoxNzM0MzEyODExLjMwNjIwMywibmJmIjoxNzM0MzEyODExLjMwNjIwMywiZXhwIjoxNzM0MzEyODcxLjMwNjIwMywianRpIjoiMUZoQnJPVXorTTZabklmbCIsImF1ZCI6IjM2NjE0MjU1OTAiLCJtdGkiOiIwLjMwNjIwMyIsInNsdCI6
2024-12-16 01:33:34 UTC	476	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:34 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Expires: Sun, 28 Dec 1980 18:57:00 EST Cache-Control: private Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache X-Content-Type-Options: nosniff
2024-12-16 01:33:34 UTC	101	IN	Data Raw: 35 66 0d 0a 7b 22 65 78 69 64 22 3a 22 37 30 30 36 30 30 31 35 22 2c 22 72 65 73 75 6c 74 22 3a 22 77 61 72 6e 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 2c 22 72 75 6c 65 5f 73 65 74 73 22 3a 5b 22 55 45 22 5d 2c 22 69 6e 76 61 6c 69 64 5f 74 72 61 66 66 69 63 5f 74 79 70 65 22 3a 22 53 49 56 54 22 7d 0d 0a Data Ascii: 5f{"exid":"70060015","result":"warn","mobile":0,"rule_sets":["UE"],"invalid_traffic_type":"SIVT"}
2024-12-16 01:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49805	18.66.161.129	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:34 UTC	373	OUT	GET /CAe854059830cf4314ae327f16481e8efc HTTP/1.1 Host: b-js.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:35 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 13213 Connection: close Date: Mon, 16 Dec 2024 01:33:31 GMT Cache-Control: public Expires: Mon, 16 Dec 2024 01:36:14 GMT Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-Runtime: 0.0000 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Cache: Hit from cloudfront Via: 1.1 7cb7aff585b14d8a9957e9d3c12f8186.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: TLSrwUCLYvkJ9_kNxFCbGFLEIqrOfdYn2dQbok_VYUKzv23FShMxeA== Age: 3
2024-12-16 01:33:35 UTC	13213	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 72 69 6e 67 62 61 5f 6b 6e 6f 77 6e 5f 6e 75 6d 62 65 72 73 20 3d 20 5b 7b 22 69 6e 74 22 3a 22 2b 31 38 38 38 33 30 36 30 38 31 39 22 2c 22 6c 6f 63 22 3a 22 28 38 38 38 29 20 33 30 36 2d 30 38 31 39 22 2c 22 6a 73 74 61 67 22 3a 22 4a 53 36 35 66 66 63 32 61 62 66 31 30 66 34 33 64 64 39 36 63 34 65 66 61 38 38 63 63 36 61 37 33 38 22 2c 22 72 65 70 6c 61 63 65 57 69 74 68 49 6e 74 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 61 63 65 57 69 74 68 4c 6f 63 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 61 63 65 4c 65 66 74 54 6f 52 69 67 68 74 22 3a 66 61 6c 73 65 7d 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 74 61 67 49 64 3d 22 22 2c 74 68 69 Data Ascii: (function(window){window.ringba_known_numbers = [{"int":"+18883060819","loc":"(888) 306-0819","jstag":"JS65ffc2abf10f43dd96c4efa88cc6a738","replaceWithInt":null,"replaceWithLoc":null,"replaceLeftToRight":false}];!function(e){function t(){this.tagId="",thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49804	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:34 UTC	621	OUT	POST /v2/nis/gnbulk HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 816 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:34 UTC	816	OUT	Data Raw: 7b 22 4a 73 54 61 67 49 64 73 22 3a 5b 22 4a 53 36 35 66 66 63 32 61 62 66 31 30 66 34 33 64 64 39 36 63 34 65 66 61 38 38 63 63 36 61 37 33 38 22 5d 2c 22 63 75 72 72 65 6e 74 45 70 6f 63 68 22 3a 31 37 33 34 33 31 32 38 31 31 36 32 38 2c 22 74 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 48 65 69 67 68 74 22 3a 39 38 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 70 69 78 65 6c 44 65 70 74 Data Ascii: {"JsTagIds":["JS65ffc2abf10f43dd96c4efa88cc6a738"],"currentEpoch":1734312811628,"tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWidth":1280},{"type":"Display","availHeight":984},{"type":"Display","pixelDept
2024-12-16 01:33:34 UTC	388	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 391 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0030 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET
2024-12-16 01:33:34 UTC	391	IN	Data Raw: 7b 22 4a 53 36 35 66 66 63 32 61 62 66 31 30 66 34 33 64 64 39 36 63 34 65 66 61 38 38 63 63 36 61 37 33 38 22 3a 7b 22 69 64 22 3a 22 32 30 35 30 38 37 30 30 33 39 38 33 37 34 31 31 31 35 34 22 2c 22 64 69 73 70 6c 61 79 4e 75 6d 62 65 72 22 3a 22 31 38 38 38 33 30 34 33 36 35 36 22 2c 22 70 68 6f 6e 65 4e 75 6d 62 65 72 22 3a 22 2b 31 38 38 38 33 30 34 33 36 35 36 22 2c 22 70 68 6f 6e 65 4e 75 6d 62 65 72 4c 6f 63 61 6c 22 3a 6e 75 6c 6c 2c 22 69 6d 70 72 65 73 73 69 6f 6e 51 75 65 72 79 50 61 74 68 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 Data Ascii: {"JS65ffc2abf10f43dd96c4efa88cc6a738":{"id":"2050870039837411154","displayNumber":"18883043656","phoneNumber":"+18883043656","phoneNumberLocal":null,"impressionQueryPath":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIsh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49807	159.65.98.5	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:34 UTC	662	OUT	GET /js.ashx?o=992&_=1734312808006 HTTP/1.1 Host: track.walk-inbathtubshop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sfd=F0lNTVzpmxtpbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; tib=k3pyRpOR3A9pbTqFlN/kRjB4QCuFtGlHCwEptGjEhlLwc73aN5lMVw==; c992=F0lNTVzpmxuRxfH5KEpa98AdwF3ocyAigprf8bjSHtT1+XXx+e2QIA==; _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:35 UTC	166	IN	HTTP/1.1 200 OK date: Mon, 16 Dec 2024 01:33:34 GMT content-type: text/javascript; charset=utf-8 content-length: 572 cache-control: private connection: close
2024-12-16 01:33:35 UTC	572	IN	Data Raw: 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 61 74 6f 72 28 33 2c 27 66 69 72 73 74 5f 6e 61 6d 65 27 2c 6e 75 6c 6c 2c 27 56 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 74 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 27 29 3b 0d 0a 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 61 74 6f 72 28 34 2c 27 6c 61 73 74 5f 6e 61 6d 65 27 2c 6e 75 6c 6c 2c 27 56 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 74 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 27 29 3b 0d 0a 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 61 74 6f 72 28 35 2c 27 61 64 64 72 65 73 73 27 2c 6e 75 6c 6c 2c 27 56 61 6c 69 64 20 69 6e 70 75 74 20 66 6f 72 20 74 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 27 29 3b 0d 0a 43 4b 4d 2e 61 64 64 5f 76 61 6c 69 64 Data Ascii: CKM.add_validator(3,'first_name',null,'Valid input for this field is required');CKM.add_validator(4,'last_name',null,'Valid input for this field is required');CKM.add_validator(5,'address',null,'Valid input for this field is required');CKM.add_valid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49809	52.222.144.90	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:35 UTC	622	OUT	GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635 HTTP/1.1 Host: cdn.trustedform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:35 UTC	514	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17336 Connection: close Date: Mon, 16 Dec 2024 01:33:36 GMT Last-Modified: Thu, 12 Dec 2024 18:13:33 GMT x-amz-version-id: CgOpMA7qv8daz8x4TLKmjj8xwE3kNOik ETag: "13bfb39c2a3c27244ada71a50c793d6f" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e193dc7153d24abe4297798fbf91a678.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: KSc7Bqp5xT1zwBFXuLxnt0NSCzA1y6Box2CsxbTY5kVQBZh_rBQmog==
2024-12-16 01:33:35 UTC	8553	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 28 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 7d 7d 76 61 72 20 6e 3d 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 3b 76 61 72 20 65 3d 74 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 72 65 Data Ascii: !function(){"use strict";function t(t,n){return"function"==typeof t?function(n){return t.bind(n)}:function(t){return n.bind(null,t)}}var n=Array.from\|\|function(t){return Array.prototype.slice.call(t)};var e=t(Array.prototype.includes,r);function r(t,n){re
2024-12-16 01:33:35 UTC	8783	IN	Data Raw: 22 29 2b 22 24 22 29 29 2c 21 21 6b 2e 74 65 73 74 28 74 29 7d 28 45 2e 63 61 6c 6c 28 74 29 29 3a 21 28 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 7c 7c 21 4f 2e 74 65 73 74 28 41 2e 63 61 6c 6c 28 74 29 29 29 7c 7c 21 31 7d 76 61 72 20 50 2c 52 3d 6e 75 6c 6c 2c 43 3d 6e 65 77 20 53 65 74 3b 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 72 65 74 75 72 6e 20 32 30 3d 3d 3d 4d 61 74 68 2e 63 65 69 6c 28 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 6e 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 76 6f 69 64 20 30 3d 3d 3d 50 26 26 28 50 3d 48 28 29 29 2c 28 65 7c Data Ascii: ")+"$")),!!k.test(t)}(E.call(t)):!(!t\|\|"object"!==n\|\|!O.test(A.call(t)))\|\|!1}var P,R=null,C=new Set;function H(){return 20===Math.ceil(100*Math.random())}function D(t,n){var e=arguments.length>2&&void 0!==arguments[2]&&arguments[2];void 0===P&&(P=H()),(e\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49808	209.58.171.123	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:35 UTC	681	OUT	GET /uniclick.js?attribution=lastpaid&cookiedomain=walk-inbathtub-shop.com&cookieduration=90&defaultcampaignid=6723c0f752e3b38cb5d16a33&regviewonce=false HTTP/1.1 Host: red.walk-inbathtub-shop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:35 UTC	366	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Date: Mon, 16 Dec 2024 01:33:35 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range X-Kong-Upstream-Latency: 2 X-Kong-Proxy-Latency: 7 X-Kong-Request-Id: c8d2467907733e5b43921b273fa56c32
2024-12-16 01:33:35 UTC	5232	IN	Data Raw: 66 37 64 0d 0a 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 42 6f 6f 6c 28 76 61 6c 75 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 76 61 6c 75 65 20 3d 3d 20 27 74 72 75 65 27 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 20 27 66 61 6c 73 65 27 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 3d 20 74 72 75 65 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 29 20 26 26 20 4a 53 4f 4e 2e 70 61 72 73 65 28 76 61 6c 75 65 29 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 7d 0a 0a 76 61 72 20 63 61 6d 70 61 69 67 6e 49 64 73 20 3d 20 7b 0a 20 20 20 20 27 64 65 66 61 75 6c 74 27 3a 20 22 36 37 32 33 63 30 66 37 35 32 65 33 62 33 38 63 62 35 64 31 36 61 33 33 22 2c 0a 7d 0a 76 61 72 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e Data Ascii: f7dfunction parseBool(value, defaultValue) { return (value == 'true' \|\| value == 'false' \|\| value === true \|\| value === false) && JSON.parse(value) \|\| defaultValue;}var campaignIds = { 'default': "6723c0f752e3b38cb5d16a33",}var cookieDomain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49810	172.67.41.229	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:35 UTC	410	OUT	GET /campaign/2c655333-c8e9-a250-f78d-c5c6738d03d1.js?snippet_version=2 HTTP/1.1 Host: create.lidstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:35 UTC	636	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:35 GMT Content-Type: text/javascript Content-Length: 123556 Connection: close x-amz-id-2: TEKOwzgwynNp3mGk1rjl/wUiPGcEklqb1VqSjlGVx5ctga/aoyNSmbxj8C52XjV+heSZ8aHEH50= x-amz-request-id: J1GTVXZ298B5EC2T x-amz-replication-status: COMPLETED Last-Modified: Thu, 10 Oct 2024 23:00:39 GMT ETag: "f6ac8f2575d07a6a2ed6f85fb2a76a2d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=1800 x-amz-version-id: G45rKRYsd_c7BQsU6R1XWlDK.yDznhBS CF-Cache-Status: HIT Age: 104 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f2aed1808acc33c-EWR
2024-12-16 01:33:35 UTC	733	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 4c 65 61 64 69 44 29 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 41 20 64 75 70 6c 69 63 61 74 65 20 4c 65 61 64 69 44 20 73 63 72 69 70 74 20 68 61 73 20 62 65 65 6e 20 64 65 74 65 63 74 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 21 20 54 68 69 73 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 76 6f 69 64 65 64 2e 22 29 2c 4c 65 61 64 69 44 2e 75 74 69 6c 26 26 4c 65 61 64 69 44 2e 75 74 69 6c 2e 61 70 69 26 26 4c 65 61 64 69 44 2e 6c 6f 67 28 22 44 75 70 6c 69 Data Ascii: !function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Dupli
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 66 6f 72 28 76 61 72 20 69 3d 32 3c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 72 20 69 6e 20 74 26 26 65 2e 63 61 6c 6c 28 69 2c 74 5b 72 5d 2c 72 2c 74 29 7d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 7c 7c Data Ascii: totype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|\|
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 28 65 2e 6c 6f 67 4c 69 6d 69 74 2c 31 30 29 7c 7c 31 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 3d 76 26 6d 2c 6f 3d 62 26 6d 2c 61 3d 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 26 26 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 2e 61 70 69 2c 73 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 42 61 74 63 68 65 64 52 65 71 75 65 73 74 2c 6c 3d 75 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6c 3b 6c 2d 2d 29 28 6e 3d 45 28 65 3d 75 5b 6c 5d 29 29 2e 6d 65 73 73 61 67 65 26 26 65 2e 6c 6f 67 4c 65 76 65 6c 26 26 28 74 3d 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 63 26 26 28 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 67 2e 4c 4f 47 5f 54 59 50 45 53 2e 49 Data Ascii: (e.logLimit,10)\|\|100)}function D(){for(var e,t,n,i,r=v&m,o=b&m,a=void 0!==g.util&&void 0!==g.util.api,s=a&&"function"==typeof g.util.api.doBatchedRequest,l=u.length-1;0<=l;l--)(n=E(e=u[l])).message&&e.logLevel&&(t=e.logLevel<=c&&(e.logLevel<=g.LOG_TYPES.I
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 2c 6c 63 6b 3a 73 2c 69 6e 46 72 61 6d 65 3a 67 2e 75 74 69 6c 2e 69 6e 46 72 61 6d 65 28 29 7d 2c 67 2e 75 74 69 6c 2e 69 73 4e 75 6c 6c 28 69 29 7c 7c 28 65 2e 6e 6f 71 73 3d 21 30 29 2c 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 41 70 69 43 61 6c 6c 28 74 2c 65 29 29 2c 67 2e 75 74 69 6c 2e 65 76 65 6e 74 73 2e 66 69 72 65 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 6f 6b 65 6e 52 65 61 64 79 22 29 2c 6b 29 3a 4e 29 28 29 2c 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 43 2c 34 65 33 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 76 61 72 20 65 3d 67 2e 61 70 69 55 52 4c 2b 22 2f 47 65 6e 65 72 61 74 65 54 6f 6b 65 6e 22 2c 74 3d 7b 7d 3b 74 2e 6c 61 63 3d 61 2c 74 2e 6c 63 6b 3d 73 2c 74 2e 72 65 66 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 2c 74 2e Data Ascii: ,lck:s,inFrame:g.util.inFrame()},g.util.isNull(i)\|\|(e.noqs=!0),g.util.api.doApiCall(t,e)),g.util.events.fireCustomEvent("tokenReady"),k):N)(),r=setInterval(C,4e3)}function N(){var e=g.apiURL+"/GenerateToken",t={};t.lac=a,t.lck=s,t.ref=document.referrer,t.
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 2d 22 2b 61 2b 22 2d 22 2b 73 2c 65 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 66 22 29 2c 69 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 6e 6f 71 73 22 29 2c 67 2e 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 63 61 6c 6c 62 61 63 6b 22 29 2c 67 2e 70 72 69 76 61 63 79 5f 67 75 61 72 64 69 61 6e 5f 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 70 72 69 76 61 63 79 47 75 61 72 64 69 61 6e 43 61 6c 6c 62 61 63 6b 22 29 2c 22 72 65 73 65 74 22 3d 3d 65 26 26 54 28 29 2c 53 28 29 7d 2c 67 2e 72 65 49 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 67 2e 75 74 69 6c Data Ascii: -"+a+"-"+s,e=g.util.getQueryVariable("f"),i=g.util.getQueryVariable("noqs"),g.callback=g.util.getQueryVariable("callback"),g.privacy_guardian_callback=g.util.getQueryVariable("privacyGuardianCallback"),"reset"==e&&T(),S()},g.reInit=function(){var e=g.util
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 69 6e 65 4e 75 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 6c 69 6e 65 7c 7c 28 69 3d 65 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 65 2e 6c 69 6e 65 7c 7c 22 22 2c 72 3d 65 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 65 2e 63 6f 6c 75 6d 6e 7c 7c 22 22 29 2c 6f 2b 22 20 61 74 20 75 6e 6b 6e 6f 77 6e 2e 6a 73 3a 22 2b 69 2b 22 3a 22 2b 72 29 3b 67 2e 6c 6f 67 28 6f 2c 67 2e 4c 4f 47 5f 54 59 50 45 53 2e 45 52 52 4f 52 2c 74 2c 6e 2c 65 29 7d 2c 67 2e 73 65 74 4c 6f 67 43 6f 6e 66 69 67 3d 74 2c 67 2e 75 74 69 6c 3d 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 26 26 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 28 7b 5f 73 65 74 54 6f Data Ascii: ineNumber&&void 0===e.line\|\|(i=e.lineNumber\|\|e.line\|\|"",r=e.columnNumber\|\|e.column\|\|""),o+" at unknown.js:"+i+":"+r);g.log(o,g.LOG_TYPES.ERROR,t,n,e)},g.setLogConfig=t,g.util={},"function"==typeof LeadiDMakeGlobalFunction&&LeadiDMakeGlobalFunction({_setTo
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 72 75 6e 74 69 6d 65 53 74 79 6c 65 29 26 26 28 6e 3d 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 2c 69 3d 65 2e 73 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 66 6f 6e 74 53 69 7a 65 22 3d 3d 74 7c 7c 22 66 6f 6e 74 2d 73 69 7a 65 22 3d 3d 74 3f 22 31 65 6d 22 3a 72 2c 72 3d 65 2e 73 74 79 6c 65 2e 70 69 78 65 6c 4c 65 66 74 2b 22 70 78 22 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 69 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 6e 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 4f 62 6a 65 63 74 73 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 75 74 69 6c 2e 63 6c 6f 6e 65 28 Data Ascii: runtimeStyle)&&(n=e.runtimeStyle.left,i=e.style.left,e.runtimeStyle.left=e.currentStyle.left,e.style.left="fontSize"==t\|\|"font-size"==t?"1em":r,r=e.style.pixelLeft+"px",e.style.left=i,e.runtimeStyle.left=n),r}function mergeObjects(e,t){var n,i=util.clone(
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 31 36 26 31 35 7c 36 34 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 32 34 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 36 33 26 6e 7c 31 32 38 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 31 36 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 32 34 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 32 35 35 26 69 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e 3e 38 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e 3e 31 36 26 32 Data Ascii: >>8&255]+"-"+guidLookupTable[t>>16&15\|64]+guidLookupTable[t>>24&255]+"-"+guidLookupTable[63&n\|128]+guidLookupTable[n>>8&255]+"-"+guidLookupTable[n>>16&255]+guidLookupTable[n>>24&255]+guidLookupTable[255&i]+guidLookupTable[i>>8&255]+guidLookupTable[i>>16&2
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 41 72 72 61 79 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 29 72 65 74 75 72 6e 2d 31 21 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6e 3b 2d 2d 6e 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 4f 62 6a 65 63 74 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 3d 3d 74 5b 6e 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 73 45 6d 70 74 79 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 76 6f 69 64 20 30 2c 6e 75 6c 6c 2c 21 31 Data Ascii: =window.top}function inArray(e,t){if(Array.prototype.indexOf)return-1!=t.indexOf(e);for(var n=t.length-1;0<=n;--n)if(t[n]==e)return!0;return!1}function inObject(e,t){for(var n in t)if(e==t[n])return!0;return!1}function isEmpty(e){for(var t=[void 0,null,!1
2024-12-16 01:33:35 UTC	1369	IN	Data Raw: 64 6c 65 72 3f 74 68 69 73 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 74 68 69 73 2e 61 72 67 73 29 3a 28 73 63 72 69 70 74 53 6f 75 72 63 65 3d 22 22 2b 74 68 69 73 2e 68 61 6e 64 6c 65 72 2c 65 76 61 6c 28 73 63 72 69 70 74 53 6f 75 72 63 65 29 29 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 62 61 73 65 2e 6c 6f 67 45 72 72 6f 72 28 65 72 72 6f 72 2c 22 55 74 69 6c 20 6d 6f 64 75 6c 65 20 74 61 73 6b 2e 72 75 6e 28 29 22 29 7d 7d 3b 76 61 72 20 6e 65 78 74 48 61 6e 64 6c 65 3d 31 2c 74 61 73 6b 73 42 79 48 61 6e 64 6c 65 3d 7b 7d 2c 63 75 72 72 65 6e 74 6c 79 52 75 6e 6e 69 6e 67 41 54 61 73 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 61 64 64 46 72 6f 6d 53 65 74 49 6d 6d 65 64 69 61 74 65 41 72 67 75 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f Data Ascii: dler?this.handler.apply(void 0,this.args):(scriptSource=""+this.handler,eval(scriptSource))}catch(error){base.logError(error,"Util module task.run()")}};var nextHandle=1,tasksByHandle={},currentlyRunningATask=!1;return{addFromSetImmediateArguments:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49811	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:35 UTC	706	OUT	POST /2.15.1/GenerateToken?msn=1&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&_=646533 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 248 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:35 UTC	248	OUT	Data Raw: 6c 61 63 3d 31 45 38 34 36 42 42 38 2d 36 44 38 44 2d 39 42 43 30 2d 31 33 46 39 2d 31 45 36 36 35 43 31 44 34 41 35 30 26 6c 63 6b 3d 32 43 36 35 35 33 33 33 2d 43 38 45 39 2d 41 32 35 30 2d 46 37 38 44 2d 43 35 43 36 37 33 38 44 30 33 44 31 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 69 6e 46 72 61 6d 65 3d 66 61 6c 73 65 26 63 6c 69 65 6e 74 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 31 33 31 30 36 Data Ascii: lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&ref=&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&inFrame=false&client_time=1734312813106
2024-12-16 01:33:35 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:35 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:35 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=3d3a878d-3864-4541-a43e-6e603367be80; expires=Wed, 15 Jan 2025 01:33:35 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:35 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:35 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:35 UTC	42	IN	Data Raw: 32 34 0d 0a 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 0d 0a Data Ascii: 2483EF8CB1-02F2-051B-A30D-93F02B18B440
2024-12-16 01:33:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49813	35.178.117.130	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:36 UTC	638	OUT	POST /result.json HTTP/1.1 Host: script.anura.io Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:36 UTC	33	OUT	Data Raw: 69 6e 73 74 61 6e 63 65 3d 33 36 36 31 34 32 35 35 39 30 26 65 78 69 64 3d 37 30 30 36 30 30 31 35 Data Ascii: instance=3661425590&exid=70060015
2024-12-16 01:33:36 UTC	481	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:36 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Expires: Sun, 28 Dec 1980 18:57:00 EST Cache-Control: private Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache X-Content-Type-Options: nosniff
2024-12-16 01:33:36 UTC	83	IN	Data Raw: 34 64 0d 0a 7b 22 72 65 73 75 6c 74 22 3a 22 77 61 72 6e 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 2c 22 72 75 6c 65 5f 73 65 74 73 22 3a 5b 22 55 45 22 5d 2c 22 69 6e 76 61 6c 69 64 5f 74 72 61 66 66 69 63 5f 74 79 70 65 22 3a 22 53 49 56 54 22 7d 0d 0a Data Ascii: 4d{"result":"warn","mobile":0,"rule_sets":["UE"],"invalid_traffic_type":"SIVT"}
2024-12-16 01:33:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49812	35.178.117.130	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:36 UTC	364	OUT	GET /response.json?46852511047 HTTP/1.1 Host: script.anura.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:36 UTC	462	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 01:33:36 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Expires: Sun, 28 Dec 1980 18:57:00 EST Cache-Control: private Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache X-Content-Type-Options: nosniff
2024-12-16 01:33:36 UTC	37	IN	Data Raw: 31 66 0d 0a 7b 22 65 72 72 6f 72 22 3a 22 54 6f 6b 65 6e 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 22 7d 0d 0a Data Ascii: 1f{"error":"Token not specified"}
2024-12-16 01:33:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49814	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:36 UTC	355	OUT	GET /v2/nis/gnbulk HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:37 UTC	326	IN	HTTP/1.1 404 Not Found Date: Mon, 16 Dec 2024 01:33:37 GMT Content-Type: text/html Content-Length: 1245 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET
2024-12-16 01:33:37 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49815	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	743	OUT	POST /2.15.1/SaveDom?msn=2&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646535 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 541 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:37 UTC	541	OUT	Data Raw: 6e 61 76 69 67 61 74 6f 72 5c 76 65 6e 64 6f 72 3d 47 6f 6f 67 6c 65 25 32 30 49 6e 63 2e 26 6e 61 76 69 67 61 74 6f 72 5c 6c 61 6e 67 75 61 67 65 3d 65 6e 2d 55 53 26 6e 61 76 69 67 61 74 6f 72 5c 61 70 70 43 6f 64 65 4e 61 6d 65 3d 4d 6f 7a 69 6c 6c 61 26 6e 61 76 69 67 61 74 6f 72 5c 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 33 32 26 6e 61 76 69 67 61 74 6f 72 5c 70 72 6f 64 75 63 74 53 75 62 3d 32 30 30 33 30 31 30 37 26 6e 61 76 69 67 61 74 6f 72 5c 75 73 65 72 41 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 Data Ascii: navigator\vendor=Google%20Inc.&navigator\language=en-US&navigator\appCodeName=Mozilla&navigator\platform=Win32&navigator\productSub=20030107&navigator\userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%2
2024-12-16 01:33:37 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:37 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=53a172c5-a260-400d-b7d3-f6f7d1c96c20; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49818	167.99.100.230	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	752	OUT	GET /favicon.ico HTTP/1.1 Host: walk-inbathtubshop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_NC10B79WFD=GS1.1.1734312807.1.0.1734312807.0.0.0; _ga=GA1.1.650901528.1734312808
2024-12-16 01:33:37 UTC	159	IN	HTTP/1.1 404 Not Found Server: nginx/1.10.3 (Ubuntu) Date: Mon, 16 Dec 2024 01:33:37 GMT Content-Type: text/html Content-Length: 580 Connection: close
2024-12-16 01:33:37 UTC	580	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49816	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	614	OUT	POST /certs HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 694 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:37 UTC	694	OUT	Data Raw: 7b 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 2f 3f 61 69 64 32 3d 35 32 38 36 26 63 69 64 32 3d 37 30 30 36 30 30 31 35 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 35 32 38 36 26 6f 69 64 32 3d 39 39 32 26 73 31 3d 34 38 33 22 2c 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 66 73 63 72 69 70 74 5f 76 65 72 73 69 6f 6e 22 3a 22 31 2e 39 2e Data Ascii: {"page_url":"https://walk-inbathtubshop.com/?aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","tfscript_version":"1.9.
2024-12-16 01:33:37 UTC	321	IN	HTTP/1.1 201 Created Date: Mon, 16 Dec 2024 01:33:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 474 Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy
2024-12-16 01:33:37 UTC	474	IN	Data Raw: 7b 22 69 64 22 3a 22 62 65 30 66 63 30 30 39 38 62 31 65 34 30 32 38 31 64 34 63 32 30 35 36 65 66 65 33 38 36 32 63 66 34 64 61 35 37 32 65 22 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 31 32 2d 31 36 54 30 31 3a 33 33 3a 33 37 2e 35 34 34 32 34 39 5a 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 65 72 74 5f 69 64 22 3a 22 62 65 30 66 63 30 30 39 38 62 31 65 34 30 32 38 31 64 Data Ascii: {"id":"be0fc0098b1e40281d4c2056efe3862cf4da572e","token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo","created_at":"2024-12-16T01:33:37.544249Z","external_id":null,"cert_id":"be0fc0098b1e40281d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49819	52.222.144.90	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	440	OUT	GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=17343128082690.20203203806265635 HTTP/1.1 Host: cdn.trustedform.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:38 UTC	521	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17336 Connection: close Date: Mon, 16 Dec 2024 01:33:36 GMT Last-Modified: Thu, 12 Dec 2024 18:13:33 GMT x-amz-version-id: CgOpMA7qv8daz8x4TLKmjj8xwE3kNOik ETag: "13bfb39c2a3c27244ada71a50c793d6f" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3fc0df7543b051e3b1106f87f20fc442.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: CkEk88albR0iAUpryS61QmyTf99LMylseLpqRrZoUuCEyActhkASbQ== Age: 2
2024-12-16 01:33:38 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 28 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 7d 7d 76 61 72 20 6e 3d 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 3b 76 61 72 20 65 3d 74 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 72 65 Data Ascii: !function(){"use strict";function t(t,n){return"function"==typeof t?function(n){return t.bind(n)}:function(t){return n.bind(null,t)}}var n=Array.from\|\|function(t){return Array.prototype.slice.call(t)};var e=t(Array.prototype.includes,r);function r(t,n){re
2024-12-16 01:33:38 UTC	952	IN	Data Raw: 43 65 72 74 55 72 6c 22 2c 74 6f 6b 65 6e 5f 66 69 65 6c 64 3a 22 78 78 54 72 75 73 74 65 64 46 6f 72 6d 54 6f 6b 65 6e 22 2c 70 69 6e 67 5f 66 69 65 6c 64 3a 22 78 78 54 72 75 73 74 65 64 46 6f 72 6d 50 69 6e 67 55 72 6c 22 2c 66 6f 72 6d 5f 73 65 6c 65 63 74 6f 72 3a 22 22 2c 69 6e 76 65 72 74 5f 66 69 65 6c 64 5f 73 65 6e 73 69 74 69 76 69 74 79 3a 22 66 61 6c 73 65 22 2c 6c 6f 61 64 5f 61 73 79 6e 63 3a 22 74 72 75 65 22 2c 75 73 65 5f 74 61 67 67 65 64 5f 63 6f 6e 73 65 6e 74 3a 22 66 61 6c 73 65 22 2c 73 63 72 69 70 74 5f 70 61 72 61 6d 73 3a 5b 5d 2c 61 75 64 69 74 3a 22 66 61 6c 73 65 22 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 46 6f 72 6d 3b 74 72 79 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6c 6f 63 Data Ascii: CertUrl",token_field:"xxTrustedFormToken",ping_field:"xxTrustedFormPingUrl",form_selector:"",invert_field_sensitivity:"false",load_async:"true",use_tagged_consent:"false",script_params:[],audit:"false"};var t=window.trustedForm;try{"undefined"!=typeof loc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49821	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	750	OUT	POST /2.15.1/InitFormData?msn=3&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646536 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 23435 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:37 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 66 6f 72 6d 64 61 74 61 3d 25 35 42 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 68 69 64 64 65 6e 25 32 32 25 32 43 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 63 6b 6d 5f 6f 66 66 65 72 5f 69 64 25 32 32 25 32 43 25 32 32 6f 70 74 69 6f 6e 73 25 32 32 25 33 41 30 25 32 43 25 32 32 65 6c 65 6d 65 6e 74 5f 69 64 25 32 32 25 33 41 30 25 32 43 25 32 32 66 69 65 6c 64 76 69 73 69 62 69 6c 69 74 79 25 32 32 25 33 41 25 37 42 25 32 32 62 6f 78 57 69 64 74 68 25 32 32 25 33 41 30 25 32 43 25 32 32 62 6f 78 48 65 69 67 68 74 25 32 32 25 33 41 30 25 32 43 25 32 32 70 61 72 65 6e 74 73 44 69 73 70 6c 61 79 65 64 25 32 32 25 33 41 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&formdata=%5B%7B%22type%22%3A%22hidden%22%2C%22name%22%3A%22ckm_offer_id%22%2C%22options%22%3A0%2C%22element_id%22%3A0%2C%22fieldvisibility%22%3A%7B%22boxWidth%22%3A0%2C%22boxHeight%22%3A0%2C%22parentsDisplayed%22%3A
2024-12-16 01:33:37 UTC	7051	OUT	Data Raw: 6f 70 74 69 6f 6e 73 25 32 32 25 33 41 30 25 32 43 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 25 32 32 45 78 63 65 6c 6c 65 6e 74 25 32 32 25 32 43 25 32 32 65 6c 65 6d 65 6e 74 5f 69 64 25 32 32 25 33 41 34 37 25 32 43 25 32 32 6c 61 62 65 6c 25 32 32 25 33 41 25 32 32 25 35 43 6e 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 35 43 6e 25 35 43 74 25 35 43 74 25 35 43 74 25 35 43 74 25 35 43 74 25 35 43 74 25 Data Ascii: options%22%3A0%2C%22value%22%3A%22Excellent%22%2C%22element_id%22%3A47%2C%22label%22%3A%22%5Cn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%5Cn%5Ct%5Ct%5Ct%5Ct%5Ct%5Ct%
2024-12-16 01:33:38 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:37 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=47679472-86a1-40e0-832d-f13277aa8f36; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49822	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	742	OUT	POST /2.15.1/Snap?msn=4&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646537 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 65645 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:37 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 31 35 37 30 33 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 36 33 25 32 43 36 34 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 36 39 25 32 43 37 30 25 32 43 37 31 25 32 43 37 32 25 32 43 37 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&capture_time=1734312815703&element_ids=%5B63%2C64%2C65%2C66%2C67%2C68%2C69%2C70%2C71%2C72%2C7
2024-12-16 01:33:37 UTC	16384	OUT	Data Raw: 33 38 25 32 43 38 33 39 25 32 43 35 31 35 25 32 43 35 31 36 25 32 43 35 31 39 25 32 43 35 32 33 25 32 43 38 34 38 25 32 43 38 34 35 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 37 25 32 43 25 32 32 63 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 54 25 32 32 25 32 43 25 32 32 78 25 32 32 25 33 41 25 32 32 25 32 30 25 32 32 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 39 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 38 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 Data Ascii: 38%2C839%2C515%2C516%2C519%2C523%2C848%2C845%5D%2C%22z%22%3A167%2C%22c%22%3A%5B%7B%22t%22%3A%22T%22%2C%22x%22%3A%22%20%22%2C%22z%22%3A169%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B823%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%
2024-12-16 01:33:37 UTC	16384	OUT	Data Raw: 32 6d 61 74 68 53 74 79 6c 65 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 78 42 6c 6f 63 6b 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 48 65 69 67 68 74 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 69 6e 42 6c 6f 63 6b 53 69 7a 65 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 6d 69 6e 48 65 69 67 68 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 6d 69 6e 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 6d 69 6e 57 69 64 74 68 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 25 33 41 6e 6f 72 6d Data Ascii: 2mathStyle%3Anormal%22%2C%22maxBlockSize%3Anone%22%2C%22maxHeight%3Anone%22%2C%22maxInlineSize%3Anone%22%2C%22maxWidth%3Anone%22%2C%22minBlockSize%3A0px%22%2C%22minHeight%3A0px%22%2C%22minInlineSize%3A0px%22%2C%22minWidth%3A0px%22%2C%22mixBlendMode%3Anorm
2024-12-16 01:33:37 UTC	16384	OUT	Data Raw: 32 68 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 63 6c 65 61 72 25 33 41 62 6f 74 68 25 32 32 25 32 43 25 32 32 68 65 69 67 68 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 Data Ascii: 2height%3A561.531px%22%2C%22perspectiveOrigin%3A600px%20280.766px%22%2C%22transformOrigin%3A600px%20280.766px%22%2C%22webkitLogicalHeight%3A561.531px%22%2C%22webkitTransformOrigin%3A600px%20280.766px%22%2C%22clear%3Aboth%22%2C%22height%3A0px%22%2C%22persp
2024-12-16 01:33:37 UTC	109	OUT	Data Raw: 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 67 68 74 25 32 32 25 33 41 39 30 37 25 37 44 25 37 44 26 6c 61 63 3d 31 45 38 34 36 42 42 38 2d 36 44 38 44 2d 39 42 43 30 2d 31 33 46 39 2d 31 45 36 36 35 43 31 44 34 41 35 30 26 63 6c 69 65 6e 74 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 31 35 37 30 34 Data Ascii: width%22%3A1280%2C%22height%22%3A907%7D%7D&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&client_time=1734312815704
2024-12-16 01:33:38 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:38 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=52ec5fb1-252b-42b0-a1e9-d68106afec7a; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49817	209.58.171.123	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	705	OUT	GET /6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined HTTP/1.1 Host: red.walk-inbathtub-shop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:38 UTC	871	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 173 Connection: close Vary: Accept-Encoding Set-Cookie: redcmps=W3siaWQiOiI2NzIzYzBmNzUyZTNiMzhjYjVkMTZhMzMiLCJ0IjoiMjAyNC0xMi0xNlQwMTozMzozOC4xMjQzNjQ0MjlaIn1d; Path=/; Domain=red.walk-inbathtub-shop.com; Expires=Tue, 17 Dec 2024 01:33:38 GMT; Secure; SameSite=None Set-Cookie: redhash=Njc1ZjgzNzJiMjYyZDFkYzY3Mzc0NTIxfDB8NjcyM2MwZjc1MmUzYjM4Y2I1ZDE2YTMzfDY3MTkyYWI3OGI1MWUwMzc5YTllZjZmZHwwMmVmYWU0OC00OGMxLTQ4NzktODg4OS01Zjg0YzdhYWU1ZjB8MTczNDMxMjgxOA==; Path=/; Domain=red.walk-inbathtub-shop.com; Expires=Tue, 16 Dec 2025 01:33:38 GMT; Secure; SameSite=None Date: Mon, 16 Dec 2024 01:33:38 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range X-Kong-Upstream-Latency: 54 X-Kong-Proxy-Latency: 8 X-Kong-Request-Id: a4b2cf12afeb203e1e8a5b6d5abd607c
2024-12-16 01:33:38 UTC	173	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 2d 73 68 6f 70 2e 63 6f 6d 2f 3f 72 74 6b 63 69 64 3d 36 37 35 66 38 33 37 32 62 32 36 32 64 31 64 63 36 37 33 37 34 35 32 31 5c 75 30 30 32 36 72 74 6b 63 6d 70 69 64 3d 36 37 32 33 63 30 66 37 35 32 65 33 62 33 38 63 62 35 64 31 36 61 33 33 22 2c 22 63 6c 69 63 6b 69 64 22 3a 22 36 37 35 66 38 33 37 32 62 32 36 32 64 31 64 63 36 37 33 37 34 35 32 31 22 2c 22 72 73 6f 63 69 64 22 3a 22 22 7d Data Ascii: {"status":1,"url":"https://walk-inbathtub-shop.com/?rtkcid=675f8372b262d1dc67374521\u0026rtkcmpid=6723c0f752e3b38cb5d16a33","clickid":"675f8372b262d1dc67374521","rsocid":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49823	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	417	OUT	GET /2.15.1/GenerateToken?msn=1&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&_=646533 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:38 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:37 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:37 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49820	209.58.171.123	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:37 UTC	499	OUT	GET /uniclick.js?attribution=lastpaid&cookiedomain=walk-inbathtub-shop.com&cookieduration=90&defaultcampaignid=6723c0f752e3b38cb5d16a33&regviewonce=false HTTP/1.1 Host: red.walk-inbathtub-shop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:38 UTC	366	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Date: Mon, 16 Dec 2024 01:33:38 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range X-Kong-Upstream-Latency: 1 X-Kong-Proxy-Latency: 1 X-Kong-Request-Id: a686514623e4b90eede661194b3e5466
2024-12-16 01:33:38 UTC	5232	IN	Data Raw: 66 37 64 0d 0a 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 42 6f 6f 6c 28 76 61 6c 75 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 76 61 6c 75 65 20 3d 3d 20 27 74 72 75 65 27 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 20 27 66 61 6c 73 65 27 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 3d 20 74 72 75 65 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 29 20 26 26 20 4a 53 4f 4e 2e 70 61 72 73 65 28 76 61 6c 75 65 29 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 7d 0a 0a 76 61 72 20 63 61 6d 70 61 69 67 6e 49 64 73 20 3d 20 7b 0a 20 20 20 20 27 64 65 66 61 75 6c 74 27 3a 20 22 36 37 32 33 63 30 66 37 35 32 65 33 62 33 38 63 62 35 64 31 36 61 33 33 22 2c 0a 7d 0a 76 61 72 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e Data Ascii: f7dfunction parseBool(value, defaultValue) { return (value == 'true' \|\| value == 'false' \|\| value === true \|\| value === false) && JSON.parse(value) \|\| defaultValue;}var campaignIds = { 'default': "6723c0f752e3b38cb5d16a33",}var cookieDomain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49824	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:38 UTC	749	OUT	POST /2.15.1/InitFormData?msn=5&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646538 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 1080 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:38 UTC	1080	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 66 6f 72 6d 64 61 74 61 3d 25 35 42 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 68 69 64 64 65 6e 25 32 32 25 32 43 25 32 32 69 64 25 32 32 25 33 41 25 32 32 78 78 54 72 75 73 74 65 64 46 6f 72 6d 43 65 72 74 55 72 6c 5f 30 25 32 32 25 32 43 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 78 78 54 72 75 73 74 65 64 46 6f 72 6d 43 65 72 74 55 72 6c 25 32 32 25 32 43 25 32 32 6f 70 74 69 6f 6e 73 25 32 32 25 33 41 30 25 32 43 25 32 32 65 6c 65 6d 65 6e 74 5f 69 64 25 32 32 25 33 41 31 38 31 25 32 43 25 32 32 66 69 65 6c 64 76 69 73 69 62 69 6c 69 74 79 25 32 32 25 33 41 25 37 42 25 32 32 62 6f 78 57 69 64 74 68 25 32 32 25 33 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&formdata=%5B%7B%22type%22%3A%22hidden%22%2C%22id%22%3A%22xxTrustedFormCertUrl_0%22%2C%22name%22%3A%22xxTrustedFormCertUrl%22%2C%22options%22%3A0%2C%22element_id%22%3A181%2C%22fieldvisibility%22%3A%7B%22boxWidth%22%3
2024-12-16 01:33:38 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:38 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=7a4396ee-5eb5-4ee1-9ea9-349dbed87a05; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:38 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49826	35.178.117.130	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:38 UTC	350	OUT	GET /result.json HTTP/1.1 Host: script.anura.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:38 UTC	467	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 01:33:38 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Expires: Sun, 28 Dec 1980 18:57:00 EST Cache-Control: private Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache X-Content-Type-Options: nosniff
2024-12-16 01:33:38 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 65 72 72 6f 72 22 3a 22 49 6e 73 74 61 6e 63 65 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 22 7d 0d 0a Data Ascii: 22{"error":"Instance not specified"}
2024-12-16 01:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49825	108.158.71.192	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:38 UTC	882	OUT	GET /iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 HTTP/1.1 Host: d2m2wsoho8qq12.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:39 UTC	562	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3515 Connection: close Date: Mon, 16 Dec 2024 01:33:39 GMT Server: nginx Last-Modified: Thu, 10 Oct 2024 16:20:35 GMT Etag: "6707fed3-dbb" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 ab49782025e9dbc8568e1a8e704a42d0.cloudfront.net (CloudFront) Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: gIlo0Z3GSX0yFhnjR56y8gcsSGR3IGV5QnQ-eVVjm54z3q5nWMmtHA==
2024-12-16 01:33:39 UTC	3515	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 20 7b 0a 20 20 20 20 2f 2f 20 52 65 74 72 69 65 76 65 20 74 68 65 20 4c 65 61 64 69 44 20 74 6f 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 55 52 4c 27 73 20 71 75 65 72 79 73 74 72 69 6e 67 0a 20 20 20 20 76 61 72 20 74 6f 6b 65 6e 20 3d 20 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 27 74 6f 6b 65 6e 27 29 3b 0a 0a 20 20 20 20 76 61 72 20 61 70 69 75 72 6c 20 3d 20 67 65 74 51 75 65 72 79 56 Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"></head><body> <script type="text/javascript"> function init() { // Retrieve the LeadiD token from this URL's querystring var token = getQueryVariable('token'); var apiurl = getQueryV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49827	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:39 UTC	454	OUT	GET /2.15.1/SaveDom?msn=2&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646535 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:39 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:39 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49828	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:39 UTC	547	OUT	GET /2.15.1/InitFormData?msn=3&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646536 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; rguuid=true; rgisanonymous=true
2024-12-16 01:33:40 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:39 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49830	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:39 UTC	539	OUT	GET /2.15.1/Snap?msn=4&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646537 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; rguuid=true; rgisanonymous=true
2024-12-16 01:33:40 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:39 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:39 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49829	52.222.144.90	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:39 UTC	546	OUT	GET /trustedform-1.9.33.js HTTP/1.1 Host: cdn.trustedform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:40 UTC	521	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 101025 Connection: close Last-Modified: Thu, 12 Dec 2024 18:13:33 GMT x-amz-version-id: vk0qSLZUboRt1EA29gYhSHBiqDk9Quts Server: AmazonS3 Date: Mon, 16 Dec 2024 01:33:41 GMT ETag: "6b47ec48ccf715432c4687da324f1ec0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f530a2349ac817605a861a8067d5c9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: nvhj3pbk05vN5Or9QGdD0lucOvtegX8DNQZqZ7aRqgTt3W94uEzT_w==
2024-12-16 01:33:40 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 7d 7d 76 61 72 20 74 3d 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 29 7d 3b 76 61 72 20 72 3d 6e 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 72 65 Data Ascii: !function(){"use strict";function n(n,t){return"function"==typeof n?function(t){return n.bind(t)}:function(n){return t.bind(null,n)}}var t=Array.from\|\|function(n){return Array.prototype.slice.call(n)};var r=n(Array.prototype.includes,e);function e(n,t){re
2024-12-16 01:33:40 UTC	16384	IN	Data Raw: 28 6e 29 7b 69 66 28 6e 2e 73 6f 75 72 63 65 3d 3d 3d 65 26 26 30 3d 3d 3d 6e 2e 64 61 74 61 2e 69 6e 64 65 78 4f 66 28 63 29 29 7b 76 61 72 20 74 3d 2b 6e 2e 64 61 74 61 2e 73 70 6c 69 74 28 22 3a 22 29 5b 31 5d 3b 61 5b 74 5d 28 29 2c 64 65 6c 65 74 65 20 61 5b 74 5d 7d 7d 29 2c 21 31 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 3d 3d 3d 75 3f 30 3a 2b 2b 75 3b 61 5b 74 5d 3d 6e 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 63 2b 22 3a 22 2b 74 2c 22 2a 22 29 7d 7d 72 65 74 75 72 6e 21 69 26 26 65 2e 64 6f 63 75 6d 65 6e 74 26 26 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 Data Ascii: (n){if(n.source===e&&0===n.data.indexOf(c)){var t=+n.data.split(":")[1];a[t](),delete a[t]}}),!1),function(n){var t=9007199254740991===u?0:++u;a[t]=n,e.postMessage(c+":"+t,"*")}}return!i&&e.document&&"onreadystatechange"in document.createElement("script")
2024-12-16 01:33:40 UTC	16384	IN	Data Raw: 59 30 51 77 64 30 38 34 51 6b 49 34 52 48 5a 6e 54 53 74 43 51 7a 42 46 54 46 46 4e 4f 45 4e 33 54 55 64 42 65 6a 52 45 61 6d 64 4f 5a 30 46 33 54 55 31 42 64 32 4e 46 54 6e 64 50 51 30 45 35 54 55 52 61 51 55 31 45 52 46 46 4e 52 6b 46 35 52 55 52 70 64 30 31 45 52 47 64 4e 52 6b 45 33 64 30 56 49 64 30 31 45 52 48 64 4e 52 45 46 33 55 55 51 7a 51 56 42 58 52 55 46 4e 52 30 45 33 62 30 52 34 55 56 42 58 51 58 64 4e 55 6b 46 33 55 55 52 44 51 55 31 45 52 57 64 4e 52 6b 45 7a 54 55 51 7a 51 55 31 45 52 6e 64 4e 52 55 4a 44 56 55 52 42 65 47 39 45 51 6b 46 4e 59 30 46 33 54 57 4a 42 64 31 46 45 64 6d 64 4e 52 45 68 52 54 55 56 43 52 58 64 45 51 58 67 30 52 45 4a 42 55 6b 35 42 64 30 31 70 51 58 64 52 52 55 78 52 54 55 52 43 51 55 30 33 51 6b 46 4e 53 30 45 Data Ascii: Y0Qwd084QkI4RHZnTStCQzBFTFFNOEN3TUdBejREamdOZ0F3TU1Bd2NFTndPQ0E5TURaQU1ERFFNRkF5RURpd01ERGdNRkE3d0VId01ERHdNREF3UUQzQVBXRUFNR0E3b0R4UVBXQXdNUkF3UURDQU1ERWdNRkEzTUQzQU1ERndNRUJDVURBeG9EQkFNY0F3TWJBd1FEdmdNREhRTUVCRXdEQXg0REJBUk5Bd01pQXdRRUxRTURCQU03QkFNS0E
2024-12-16 01:33:40 UTC	14808	IN	Data Raw: 65 76 65 6e 74 53 6f 75 72 63 65 3a 24 2e 6f 3f 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3a 77 69 6e 64 6f 77 2c 4e 3a 21 31 2c 65 76 65 6e 74 73 3a 5b 5d 2c 5a 3a 6a 6e 28 29 2c 57 3a 6a 6e 28 29 2c 53 3a 6a 6e 28 29 2c 73 65 6e 74 4f 4f 45 52 65 70 6f 72 74 3a 21 31 2c 77 70 6d 53 74 61 74 65 3a 6a 6e 28 29 2c 6b 70 6d 53 74 61 74 65 3a 6a 6e 28 29 2c 58 3a 5b 5d 2c 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 68 65 63 6b 53 74 61 74 75 73 28 29 7d 29 2c 31 65 33 2a 74 68 69 73 2e 62 75 66 66 65 72 43 68 65 63 6b 49 6e 74 65 72 76 61 6c 29 2c 4d 74 28 77 69 6e 64 6f 77 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c Data Ascii: eventSource:$.o?window.document:window,N:!1,events:[],Z:jn(),W:jn(),S:jn(),sentOOEReport:!1,wpmState:jn(),kpmState:jn(),X:[],initialize:function(){var n=this;setInterval((function(){n.checkStatus()}),1e3*this.bufferCheckInterval),Mt(window,"beforeunload",
2024-12-16 01:33:40 UTC	16384	IN	Data Raw: 26 26 73 65 28 74 2e 65 6c 65 6d 65 6e 74 29 3b 63 61 73 65 20 31 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 6e 2e 73 74 6f 70 28 29 7d 7d 29 2c 6e 29 7d 29 29 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 46 65 28 6e 29 7b 72 65 74 75 72 6e 20 6d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 29 7b 72 65 74 75 72 6e 28 6d 65 3d 79 6e 28 53 6e 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 6e 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 6e 2e 70 72 65 76 3d 6e 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 74 2e 72 65 63 74 3d 50 72 28 74 2e Data Ascii: &&se(t.element);case 1:case"end":return n.stop()}}),n)})))).apply(this,arguments)}function Fe(n){return me.apply(this,arguments)}function me(){return(me=yn(Sn.mark((function n(t){return Sn.wrap((function(n){for(;;)switch(n.prev=n.next){case 0:t.rect=Pr(t.
2024-12-16 01:33:41 UTC	16384	IN	Data Raw: 74 61 63 68 45 76 65 6e 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 76 61 72 20 69 3d 6e 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 69 2e 74 61 72 67 65 74 3d 69 2e 74 61 72 67 65 74 7c 7c 69 2e 73 72 63 45 6c 65 6d 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 69 2e 74 69 6d 65 53 74 61 6d 70 3d 69 2e 74 69 6d 65 53 74 61 6d 70 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 72 2e 63 61 6c 6c 28 65 2c 69 29 7d 63 61 74 63 68 28 6e 29 7b 6d 28 22 6f 6e 45 76 65 6e 74 3a 22 2e 63 6f 6e 63 61 74 28 74 29 2c 6e 29 7d 7d 29 29 7d 7d 28 4f 74 2e 65 76 65 6e 74 53 Data Ascii: tachEvent){var e=this;n.attachEvent("on"+t,(function(n){try{var i=n\|\|window.event;i.target=i.target\|\|i.srcElement\|\|window.document.documentElement,i.timeStamp=i.timeStamp\|\|(new Date).getTime(),r.call(e,i)}catch(n){m("onEvent:".concat(t),n)}}))}}(Ot.eventS
2024-12-16 01:33:41 UTC	4297	IN	Data Raw: 72 65 74 75 72 6e 20 6e 7d 28 29 2c 6e 29 2c 6f 3d 7b 70 61 67 65 5f 75 72 6c 3a 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 75 73 65 72 5f 61 67 65 6e 74 3a 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 74 66 73 63 72 69 70 74 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 39 2e 33 33 22 2c 74 66 73 63 72 69 70 74 5f 70 61 72 61 6d 73 3a 69 2c 73 6e 61 70 73 68 6f 74 5f 6d 65 74 61 64 61 74 61 3a 7b 62 72 6f 77 73 65 72 5f 77 69 64 74 68 3a 74 2c 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 3a 65 2c 73 63 72 65 65 6e 5f 77 69 64 74 68 3a 73 63 72 65 65 6e 2e 77 69 64 74 68 2c 73 63 72 65 65 6e 5f 68 65 69 67 68 74 3a 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 7d 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 21 3d 3d Data Ascii: return n}(),n),o={page_url:document.location.toString(),user_agent:navigator.userAgent,tfscript_version:"1.9.33",tfscript_params:i,snapshot_metadata:{browser_width:t,browser_height:e,screen_width:screen.width,screen_height:screen.height}};return window!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49833	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:39 UTC	742	OUT	POST /2.15.1/Snap?msn=6&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646539 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 24011 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:39 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 31 37 38 38 36 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 31 31 36 25 32 43 31 32 31 25 32 43 31 32 32 25 32 43 31 32 33 25 32 43 31 32 34 25 32 43 31 32 35 25 32 43 31 32 36 25 32 43 31 32 37 25 32 43 31 32 38 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&capture_time=1734312817886&element_ids=%5B116%2C121%2C122%2C123%2C124%2C125%2C126%2C127%2C128
2024-12-16 01:33:39 UTC	7627	OUT	Data Raw: 67 49 6e 6c 69 6e 65 45 6e 64 25 33 41 32 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 53 74 61 72 74 25 33 41 32 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 4c 65 66 74 25 33 41 32 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 52 69 67 68 74 25 33 41 32 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 54 6f 70 25 33 41 38 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 39 37 70 78 25 32 30 32 35 70 78 25 32 32 25 32 43 25 32 32 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 25 33 41 6e 6f 6e 65 25 32 30 73 6f 6c 69 64 25 32 30 25 32 33 66 66 66 66 66 66 25 32 32 25 32 43 25 32 32 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 43 6f 6c 6f 72 25 33 41 25 32 33 Data Ascii: gInlineEnd%3A20px%22%2C%22paddingInlineStart%3A20px%22%2C%22paddingLeft%3A20px%22%2C%22paddingRight%3A20px%22%2C%22paddingTop%3A8px%22%2C%22perspectiveOrigin%3A97px%2025px%22%2C%22textDecoration%3Anone%20solid%20%23ffffff%22%2C%22textDecorationColor%3A%23
2024-12-16 01:33:40 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:40 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:40 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=3154af18-d5ec-4310-8ba7-d15e6d06decb; expires=Wed, 15 Jan 2025 01:33:40 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:40 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:40 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49803	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:39 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:39 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:33:40 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:40 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0020 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49834	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:40 UTC	547	OUT	GET /2.15.1/InitFormData?msn=5&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646538 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=9e89394e-e7be-4486-8b20-77d1e23d861e; rguuid=true; rgisanonymous=true
2024-12-16 01:33:40 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:40 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:40 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:40 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49831	209.58.171.123	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:40 UTC	616	OUT	GET /view?clickid=675f8372b262d1dc67374521&referrer= HTTP/1.1 Host: red.walk-inbathtub-shop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:41 UTC	284	IN	HTTP/1.1 204 No Content Connection: close Date: Mon, 16 Dec 2024 01:33:40 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range X-Kong-Upstream-Latency: 229 X-Kong-Proxy-Latency: 8 X-Kong-Request-Id: cbebb33bb19120106ec6cd4c8a271964

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49832	209.58.171.123	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:40 UTC	487	OUT	GET /6723c0f752e3b38cb5d16a33?format=json&referrer=&aid2=5286&cid2=70060015&utm_campaign=5286&oid2=992&s1=483&sub19=undefined&sub20=undefined HTTP/1.1 Host: red.walk-inbathtub-shop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:40 UTC	871	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 173 Connection: close Vary: Accept-Encoding Set-Cookie: redcmps=W3siaWQiOiI2NzIzYzBmNzUyZTNiMzhjYjVkMTZhMzMiLCJ0IjoiMjAyNC0xMi0xNlQwMTozMzo0MC42OTUxMzM0NVoifV0=; Path=/; Domain=red.walk-inbathtub-shop.com; Expires=Tue, 17 Dec 2024 01:33:40 GMT; Secure; SameSite=None Set-Cookie: redhash=Njc1ZjgzNzRlN2IwYjhkNDg2MzA2ODc4fDB8NjcyM2MwZjc1MmUzYjM4Y2I1ZDE2YTMzfDY3MTkyYWI3OGI1MWUwMzc5YTllZjZmZHxjODM4MmIzYS1iODJlLTQzMzItOGMyZC0yYjdhZmU1ODgwNGF8MTczNDMxMjgyMA==; Path=/; Domain=red.walk-inbathtub-shop.com; Expires=Tue, 16 Dec 2025 01:33:40 GMT; Secure; SameSite=None Date: Mon, 16 Dec 2024 01:33:40 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range X-Kong-Upstream-Latency: 38 X-Kong-Proxy-Latency: 1 X-Kong-Request-Id: 2d88842049cdb96ef3d53d398650891e
2024-12-16 01:33:40 UTC	173	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 2d 73 68 6f 70 2e 63 6f 6d 2f 3f 72 74 6b 63 69 64 3d 36 37 35 66 38 33 37 34 65 37 62 30 62 38 64 34 38 36 33 30 36 38 37 38 5c 75 30 30 32 36 72 74 6b 63 6d 70 69 64 3d 36 37 32 33 63 30 66 37 35 32 65 33 62 33 38 63 62 35 64 31 36 61 33 33 22 2c 22 63 6c 69 63 6b 69 64 22 3a 22 36 37 35 66 38 33 37 34 65 37 62 30 62 38 64 34 38 36 33 30 36 38 37 38 22 2c 22 72 73 6f 63 69 64 22 3a 22 22 7d Data Ascii: {"status":1,"url":"https://walk-inbathtub-shop.com/?rtkcid=675f8374e7b0b8d486306878\u0026rtkcmpid=6723c0f752e3b38cb5d16a33","clickid":"675f8374e7b0b8d486306878","rsocid":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49835	45.223.19.68	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:41 UTC	883	OUT	GET /iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://d2m2wsoho8qq12.cloudfront.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:41 UTC	1015	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:41 GMT Content-Type: text/html Connection: close Server: nginx Last-Modified: Thu, 31 Oct 2024 14:48:02 GMT ETag: "672398a2-1209" Expires: Tue, 17 Dec 2024 01:33:41 GMT Cache-Control: max-age=86400 P3P: CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: public Accept-Ranges: bytes Set-Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; expires=Mon, 15 Dec 2025 06:22:15 GMT; HttpOnly; path=/; Domain=.trueleadid.com; Secure; SameSite=None Set-Cookie: nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; HttpOnly; path=/; Domain=.trueleadid.com; Secure; SameSite=None Set-Cookie: incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; path=/; Domain=.trueleadid.com; Secure; SameSite=None Strict-Transport-Security: max-age=31536000 X-CDN: Imperva Transfer-Encoding: chunked X-Iinfo: 53-30846557-30846633 NNNY CT(1 9 0) RT(1734312820321 637) q(0 0 0 0) r(0 0) U24
2024-12-16 01:33:41 UTC	437	IN	Data Raw: 31 32 38 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 76 61 72 20 55 74 69 6c 69 74 69 65 73 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 63 6f 6e 73 74 20 74 3d 55 74 69 6c 69 74 69 65 73 2e 67 65 74 43 6f 6f 6b 69 65 28 22 75 75 69 64 22 29 2c 65 3d 55 74 69 6c 69 74 69 65 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 22 75 75 69 64 22 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 28 22 6d 65 74 68 6f 64 22 29 2c 31 30 29 2c 6e 3d 55 74 69 6c 69 74 69 65 73 2e 64 65 74 65 72 6d 69 6e 65 4d 65 74 68 6f 64 28 21 21 74 2c 21 21 65 29 2c 6f 3d 55 Data Ascii: 128e<!DOCTYPE html><html><head></head><body> <script>var Utilities;function init(){const t=Utilities.getCookie("uuid"),e=Utilities.getLocalStorage("uuid"),i=parseInt(Utilities.getQueryString("method"),10),n=Utilities.determineMethod(!!t,!!e),o=U
2024-12-16 01:33:41 UTC	1452	IN	Data Raw: 6e 20 20 20 20 20 20 20 20 20 20 20 20 51 75 65 72 79 53 74 72 69 6e 67 5b 6d 65 74 68 6f 64 5d 3a 20 20 24 7b 69 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 51 75 65 72 79 53 74 72 69 6e 67 5b 6c 61 63 5d 20 3a 20 24 7b 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 28 22 6c 61 63 22 29 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 51 75 65 72 79 53 74 72 69 6e 67 5b 6c 63 6b 5d 20 3a 20 24 7b 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 28 22 6c 63 6b 22 29 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 51 75 65 72 79 53 74 72 69 6e 67 5b 74 6f 6b 65 6e 5d 20 3a 20 24 7b 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 28 22 74 6f 6b 65 6e 22 29 7d 5c 6e 20 20 20 20 20 20 20 20 20 Data Ascii: n QueryString[method]: ${i}\n QueryString[lac] : ${Utilities.getQueryString("lac")}\n QueryString[lck] : ${Utilities.getQueryString("lck")}\n QueryString[token] : ${Utilities.getQueryString("token")}\n
2024-12-16 01:33:41 UTC	1452	IN	Data Raw: 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 22 22 29 7d 29 2c 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 7c 7c 28 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 69 2d 2d 3b 29 6e 5b 69 5d 3d 5b 65 5b 69 5d 2c 74 5b 65 5b 69 5d 5d 5d 3b 72 65 74 75 72 6e 20 6e 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 67 65 74 4b 65 79 46 72 6f 6d 44 65 6c 69 6d 69 74 65 64 53 74 72 69 6e 67 3d 28 28 74 2c 65 29 3d 3e 69 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 73 70 6c 69 74 28 65 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 63 6f 6e Data Ascii: [\s\uFEFF\xA0]+$/g,"")}),Object.entries\|\|(Object.entries=function(t){for(var e=Object.keys(t),i=e.length,n=new Array(i);i--;)n[i]=[e[i],t[e[i]]];return n}),function(t){t.getKeyFromDelimitedString=((t,e)=>i=>{const n={};return t&&t.split(e).forEach(t=>{con
2024-12-16 01:33:41 UTC	1422	IN	Data Raw: 74 65 55 55 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 3b 69 66 28 21 74 26 26 77 69 6e 64 6f 77 2e 43 72 79 70 74 6f 26 26 28 74 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 43 72 79 70 74 6f 29 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 72 65 74 75 72 6e 28 60 24 7b 31 65 37 7d 60 2b 2d 31 65 33 2b 2d 34 65 33 2b 2d 38 65 33 2b 2d 31 65 31 31 29 2e 72 65 70 6c 61 63 65 28 2f 5b 30 31 38 5d 2f 67 2c 65 3d 3e 28 65 5e 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 29 5b 30 5d 26 31 35 3e 3e 65 2f 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c Data Ascii: teUUID=function(){let t=window.crypto;if(!t&&window.Crypto&&(t=new window.Crypto),void 0!==t&&void 0!==t.getRandomValues)return(`${1e7}`+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,e=>(e^t.getRandomValues(new Uint8Array(1))[0]&15>>e/4).toString(16)).replace(/\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49836	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:41 UTC	351	OUT	GET /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:42 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:41 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49837	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:41 UTC	539	OUT	GET /2.15.1/Snap?msn=6&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646539 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
2024-12-16 01:33:42 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:42 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:42 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49839	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:42 UTC	665	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/snapshot HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 9319 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:42 UTC	9319	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 65 4a 7a 4e 58 59 75 57 32 7a 61 53 2f 52 56 75 35 34 79 64 4f 64 4e 53 69 77 2b 39 4f 71 65 50 74 35 2b 5a 7a 49 6d 39 7a 74 68 5a 4a 39 6e 4d 39 71 46 49 71 45 55 33 52 63 6f 6b 31 59 2f 4d 35 6f 50 32 4e 2f 62 4c 39 67 49 45 68 51 64 42 69 57 78 31 5a 39 66 32 54 4d 51 58 55 43 68 55 46 51 70 31 67 63 49 2f 44 36 4c 77 34 4e 67 2b 50 43 67 4f 6a 71 65 48 42 38 48 42 38 58 2b 55 74 78 78 32 79 78 34 63 48 69 51 48 78 77 65 4c 59 68 6b 66 2f 48 35 59 50 6e 4c 4c 52 2f 4c 62 58 76 33 57 73 4c 70 46 76 35 2f 35 4f 54 6b 34 50 50 44 78 39 47 43 52 6b 54 6c 2b 4c 34 70 69 6c 52 38 66 48 64 33 37 38 57 30 76 53 6d 5a 2b 73 53 6a 57 73 33 79 52 72 76 70 42 75 6a 77 36 2b 45 64 56 33 59 67 56 68 45 72 76 55 4a 44 31 61 2f 4a 72 73 61 Data Ascii: {"body":"eJzNXYuW2zaS/RVu54ydOdNSiw+9OqePt5+ZzIm9zthZJ9nM9qFIqEU3Rcok1Y/M5oP2N/bL9gIEhQdBiWx1Z9f2TMQXUChUFQp1gcI/D6Lw4Ng+PCgOjqeHB8HB8X+Utxx2yx4cHiQHxweLYhkf/H5YPnLLR/LbXv3WsLpFv5/5OTk4PPDx9GCRkTl+L4pilR8fHd378W0vSmZ+sSjWs3yRrvpBujw6+EdV3YgVhErvUJD1a/Jrsa
2024-12-16 01:33:42 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:42 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49840	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:42 UTC	668	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/fingerprints HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 348 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:42 UTC	348	OUT	Data Raw: 7b 22 66 69 6e 67 65 72 70 72 69 6e 74 73 22 3a 5b 22 32 32 38 39 35 38 34 30 37 66 63 34 33 61 35 64 62 35 35 32 66 65 66 34 37 39 30 62 62 66 32 32 63 35 61 31 63 35 38 62 22 2c 22 35 36 35 39 36 63 39 64 61 33 36 38 64 64 36 37 35 38 65 32 32 33 35 38 37 37 36 31 35 62 64 38 65 38 36 36 61 30 65 31 22 2c 22 32 30 38 37 37 63 65 31 62 36 61 36 63 63 62 36 38 36 30 34 33 33 34 66 32 34 34 63 37 33 63 36 65 35 65 37 66 35 37 34 22 2c 22 34 62 30 38 31 34 39 30 30 36 32 65 37 33 38 61 35 34 31 65 39 31 33 61 30 61 39 35 39 61 64 31 37 34 36 37 32 63 34 61 22 2c 22 64 36 66 62 37 38 61 38 63 38 66 64 32 66 39 37 36 36 63 34 62 63 34 33 61 30 35 32 30 34 33 31 65 33 35 32 64 36 36 32 22 5d 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a Data Ascii: {"fingerprints":["228958407fc43a5db552fef4790bbf22c5a1c58b","56596c9da368dd6758e2235877615bd8e866a0e1","20877ce1b6a6ccb68604334f244c73c6e5e7f574","4b081490062e738a541e913a0a959ad174672c4a","d6fb78a8c8fd2f9766c4bc43a0520431e352d662"],"token":"ke7YPVfMroDSz
2024-12-16 01:33:42 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:42 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49838	52.222.144.90	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:42 UTC	364	OUT	GET /trustedform-1.9.33.js HTTP/1.1 Host: cdn.trustedform.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:43 UTC	522	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 101025 Connection: close Last-Modified: Thu, 12 Dec 2024 18:13:33 GMT x-amz-version-id: vk0qSLZUboRt1EA29gYhSHBiqDk9Quts Server: AmazonS3 Date: Mon, 16 Dec 2024 01:33:41 GMT ETag: "6b47ec48ccf715432c4687da324f1ec0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 633fece295fcb199456ab86aeffd3b00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C2 X-Amz-Cf-Id: ACMtnAfc2kuGje3WjJmhq736WAYncAwD9Bo2H5g1bQlgOuHIeRxH3A== Age: 2
2024-12-16 01:33:43 UTC	15862	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 7d 7d 76 61 72 20 74 3d 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 29 7d 3b 76 61 72 20 72 3d 6e 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 72 65 Data Ascii: !function(){"use strict";function n(n,t){return"function"==typeof n?function(t){return n.bind(t)}:function(n){return t.bind(null,n)}}var t=Array.from\|\|function(n){return Array.prototype.slice.call(n)};var r=n(Array.prototype.includes,e);function e(n,t){re
2024-12-16 01:33:43 UTC	16384	IN	Data Raw: 22 3a 68 28 73 65 6c 66 29 29 26 26 73 65 6c 66 7c 7c 74 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 2c 6f 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 68 28 70 72 6f 63 65 73 73 29 29 26 26 21 21 70 72 6f 63 65 73 73 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 2e 6e 65 78 74 54 69 63 6b 2c 75 3d 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 74 2c 72 2c 61 3b 69 66 28 65 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 Data Ascii: ":h(self))&&self\|\|t,i="function"==typeof setImmediate,o="object"===("undefined"==typeof process?"undefined":h(process))&&!!process&&"function"==typeof process.nextTick,u=0;var a=function(){var n,t,r,a;if(e.MutationObserver)return function(t){n=document.cr
2024-12-16 01:33:43 UTC	16384	IN	Data Raw: 46 6d 51 54 42 56 52 56 4e 33 54 30 4e 42 4e 31 46 45 63 57 64 50 63 55 45 78 57 55 52 57 5a 31 46 6a 51 6b 4a 33 52 47 4e 6e 57 55 52 4a 55 55 34 7a 51 54 4e 5a 52 55 78 42 55 45 68 42 4f 45 46 46 54 57 64 50 64 30 45 78 64 30 56 4b 64 30 35 51 51 54 46 4e 52 45 4e 52 55 56 56 42 4e 45 56 45 62 6c 46 51 62 6b 45 31 54 55 52 45 5a 30 39 51 51 6b 46 6a 52 44 4e 52 54 57 5a 42 4d 57 4e 45 61 57 64 4f 52 45 45 77 56 55 51 77 5a 30 34 34 51 54 68 52 52 47 78 52 54 56 4e 43 51 7a 42 45 4e 31 46 53 54 55 45 32 53 55 56 4b 55 56 4a 42 51 6b 52 4a 52 48 4e 42 55 6b 31 42 65 55 56 45 53 56 46 50 4e 6b 45 78 54 55 56 43 5a 30 39 44 51 58 68 76 52 47 64 42 54 58 64 42 4e 30 31 45 4d 47 64 51 55 30 45 30 63 30 51 78 5a 31 46 6d 51 54 68 52 52 48 6c 42 54 31 5a 43 51 Data Ascii: FmQTBVRVN3T0NBN1FEcWdPcUExWURWZ1FjQkJ3RGNnWURJUU4zQTNZRUxBUEhBOEFFTWdPd0Exd0VKd05QQTFNRENRUVVBNEVEblFQbkE1TUREZ09QQkFjRDNRTWZBMWNEaWdOREEwVUQwZ044QThRRGxRTVNCQzBEN1FSTUE2SUVKUVJBQkRJRHNBUk1BeUVESVFPNkExTUVCZ09DQXhvRGdBTXdBN01EMGdQU0E0c0QxZ1FmQThRRHlBT1ZCQ
2024-12-16 01:33:43 UTC	16384	IN	Data Raw: 75 6d 62 65 72 3a 61 2c 65 6e 63 6f 64 69 6e 67 3a 65 7d 7d 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 4d 74 28 6e 2c 74 2c 72 29 7b 69 66 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 72 2c 21 31 29 3b 65 6c 73 65 20 69 66 28 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 76 61 72 20 69 3d 6e 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 69 2e 74 61 72 67 65 74 3d 69 2e 74 61 72 67 65 74 7c 7c 69 2e 73 72 63 45 6c 65 6d 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: umber:a,encoding:e}}return u}function Mt(n,t,r){if(n.addEventListener)n.addEventListener(t,r,!1);else if(n.attachEvent){var e=this;n.attachEvent("on"+t,(function(n){try{var i=n\|\|window.event;i.target=i.target\|\|i.srcElement\|\|window.document.documentElement
2024-12-16 01:33:43 UTC	16384	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 72 65 74 75 72 6e 20 72 2e 73 65 74 53 74 61 72 74 28 6e 2c 30 29 2c 72 2e 73 65 74 45 6e 64 28 6e 2c 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6c 65 6e 67 74 68 29 7c 7c 6e 2e 6c 65 6e 67 74 68 7c 7c 30 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 6e 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6e 7c 7c 22 22 29 2e 74 72 69 6d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6b 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 29 7b 72 65 74 75 72 6e 28 6b 65 3d 79 6e 28 53 6e 2e 6d 61 72 6b Data Ascii: document.createRange();return r.setStart(n,0),r.setEnd(n,(null===(t=n.childNodes)\|\|void 0===t?void 0:t.length)\|\|n.length\|\|0),r}function we(n){return"".concat(n\|\|"").trim()}function Ne(n,t){return ke.apply(this,arguments)}function ke(){return(ke=yn(Sn.mark
2024-12-16 01:33:43 UTC	16384	IN	Data Raw: 20 72 3d 76 6e 28 6e 2e 74 61 67 4e 61 6d 65 29 3b 69 66 28 22 73 63 72 69 70 74 22 3d 3d 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 6e 6f 73 63 72 69 70 74 22 3d 3d 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 68 69 64 64 65 6e 22 3d 3d 6e 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 66 2e 74 66 49 67 6e 6f 72 65 41 74 74 72 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 30 3d 3d 3d 76 6e 28 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 74 66 70 69 66 22 29 29 72 65 74 75 72 6e 21 31 7d 69 66 28 74 3d 3d 75 6f 2e 54 45 58 54 5f 4e 4f 44 45 29 7b 69 66 28 21 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 2e 74 65 78 74 Data Ascii: r=vn(n.tagName);if("script"==r)return!1;if("noscript"==r)return!1;if("hidden"==n.type)return!1;if(n.hasAttribute(f.tfIgnoreAttr))return!1;if(0===vn(n.getAttribute("name")).indexOf("tfpif"))return!1}if(t==uo.TEXT_NODE){if(!n.textContent)return!1;if(n.text
2024-12-16 01:33:43 UTC	3243	IN	Data Raw: 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 6e 29 3b 69 66 28 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 29 72 65 74 75 72 6e 20 74 75 28 6e 2c 72 29 7d 28 6e 29 29 7c 7c 72 26 26 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6c 65 6e 67 74 68 29 7b 65 26 26 28 6e 3d 65 29 3b 76 61 72 20 69 3d 30 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 6f 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3e 3d 6e 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6e 5b 69 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e Data Ascii: ==e)return t(n);if("Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e))return tu(n,r)}(n))\|\|r&&n&&"number"==typeof n.length){e&&(n=e);var i=0,o=function(){};return{s:o,n:function(){return i>=n.length?{done:!0}:{done:!1,value:n[i++]}},e:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49842	45.223.19.68	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:42 UTC	1032	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=375929182 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==
2024-12-16 01:33:43 UTC	183	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 83903 Strict-Transport-Security: max-age=31536000
2024-12-16 01:33:43 UTC	1269	IN	Data Raw: 76 61 72 20 5f 30 78 35 66 65 62 3d 5b 27 5c 78 34 33 5c 78 35 32 5c 78 34 38 5c 78 34 33 5c 78 36 37 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 30 5c 78 34 33 5c 78 34 39 5c 78 36 61 5c 78 35 32 5c 78 33 38 5c 78 34 66 5c 78 33 36 5c 78 37 37 5c 78 36 66 5c 78 34 38 5c 78 34 33 5c 78 36 65 5c 78 33 31 5c 78 35 36 5c 78 36 36 5c 78 37 37 5c 78 33 36 5c 78 33 39 5c 78 35 36 5c 78 37 37 5c 78 37 30 5c 78 32 66 5c 78 34 33 5c 78 36 37 5c 78 34 32 5c 78 33 33 5c 78 34 33 5c 78 37 33 5c 78 33 38 5c 78 34 66 5c 78 37 36 5c 78 34 31 5c 78 36 37 5c 78 36 63 5c 78 35 35 5c 78 37 37 5c 78 37 32 5c 78 32 66 5c 78 34 34 5c 78 36 37 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 37 33 5c 78 33 30 5c 78 34 31 5c 78 36 33 5c 78 34 Data Ascii: var _0x5feb=['\x43\x52\x48\x43\x67\x51\x3d\x3d','\x50\x43\x49\x6a\x52\x38\x4f\x36\x77\x6f\x48\x43\x6e\x31\x56\x66\x77\x36\x39\x56\x77\x70\x2f\x43\x67\x42\x33\x43\x73\x38\x4f\x76\x41\x67\x6c\x55\x77\x72\x2f\x44\x67\x51\x3d\x3d','\x77\x70\x73\x30\x41\x63\x4
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 78 34 34 5c 78 36 65 5c 78 36 33 5c 78 34 62 5c 78 33 35 5c 78 35 34 5c 78 33 38 5c 78 34 66 5c 78 34 63 5c 78 35 35 5c 78 33 38 5c 78 34 62 5c 78 34 35 5c 78 35 31 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 64 5c 78 35 38 5c 78 34 34 5c 78 37 34 5c 78 33 38 5c 78 34 66 5c 78 34 37 5c 78 37 37 5c 78 36 66 5c 78 36 37 5c 78 34 66 5c 78 36 32 5c 78 36 33 5c 78 34 62 5c 78 33 37 5c 78 37 37 5c 78 33 36 5c 78 34 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 36 36 5c 78 34 34 5c 78 37 31 5c 78 33 38 5c 78 34 66 5c 78 37 30 5c 78 37 37 5c 78 33 34 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 39 5c 78 37 61 5c 78 34 34 5c 78 36 63 5c 78 33 38 5c 78 34 62 5c 78 36 32 5c 78 37 37 5c 78 33 36 5c 78 33 31 5c 78 34 38 27 2c 27 Data Ascii: x44\x6e\x63\x4b\x35\x54\x38\x4f\x4c\x55\x38\x4b\x45\x51\x77\x3d\x3d','\x54\x6d\x58\x44\x74\x38\x4f\x47\x77\x6f\x67\x4f\x62\x63\x4b\x37\x77\x36\x4d\x3d','\x77\x71\x66\x44\x71\x38\x4f\x70\x77\x34\x34\x3d','\x54\x69\x7a\x44\x6c\x38\x4b\x62\x77\x36\x31\x48','
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 78 33 30 5c 78 37 37 5c 78 33 34 5c 78 33 35 5c 78 34 37 5c 78 34 66 5c 78 33 32 5c 78 35 32 5c 78 34 39 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 35 34 5c 78 34 33 5c 78 36 63 5c 78 33 38 5c 78 34 66 5c 78 36 35 5c 78 34 61 5c 78 35 33 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 36 62 5c 78 35 39 5c 78 37 37 5c 78 36 66 5c 78 37 33 5c 78 35 30 5c 78 36 33 5c 78 34 38 5c 78 34 39 5c 78 33 64 27 2c 27 5c 78 36 32 5c 78 37 33 5c 78 34 66 5c 78 35 31 5c 78 37 37 5c 78 36 66 5c 78 33 35 5c 78 34 38 5c 78 37 37 5c 78 37 32 5c 78 36 37 5c 78 33 39 5c 78 34 38 5c 78 37 33 5c 78 34 66 5c 78 36 32 5c 78 34 65 5c 78 35 34 5c 78 37 36 5c 78 34 34 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 36 61 5c 78 35 35 5c 78 36 33 5c 78 34 62 5c 78 37 34 5c 78 37 Data Ascii: x30\x77\x34\x35\x47\x4f\x32\x52\x49','\x77\x71\x54\x43\x6c\x38\x4f\x65\x4a\x53\x34\x3d','\x77\x35\x6b\x59\x77\x6f\x73\x50\x63\x48\x49\x3d','\x62\x73\x4f\x51\x77\x6f\x35\x48\x77\x72\x67\x39\x48\x73\x4f\x62\x4e\x54\x76\x44\x6d\x4d\x4b\x6a\x55\x63\x4b\x74\x7
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 5c 78 34 34 5c 78 37 33 5c 78 35 38 5c 78 37 33 5c 78 34 65 27 2c 27 5c 78 34 62 5c 78 35 34 5c 78 35 39 5c 78 32 66 5c 78 35 35 5c 78 33 38 5c 78 34 66 5c 78 36 65 5c 78 37 37 5c 78 37 30 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 37 37 5c 78 33 37 5c 78 33 33 5c 78 34 33 5c 78 37 32 5c 78 34 64 5c 78 34 62 5c 78 35 61 5c 78 34 65 5c 78 36 33 5c 78 34 66 5c 78 37 35 5c 78 35 39 5c 78 34 64 5c 78 34 66 5c 78 34 61 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 36 32 5c 78 34 34 5c 78 36 65 5c 78 35 32 5c 78 35 38 5c 78 34 34 5c 78 36 38 5c 78 33 38 5c 78 34 62 5c 78 37 35 5c 78 35 37 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 33 5c 78 37 33 5c 78 34 62 5c 78 35 33 5c 78 37 37 5c 78 36 66 5c 78 34 35 5c 78 33 Data Ascii: \x44\x73\x58\x73\x4e','\x4b\x54\x59\x2f\x55\x38\x4f\x6e\x77\x70\x77\x3d','\x77\x70\x6c\x61\x77\x37\x33\x43\x72\x4d\x4b\x5a\x4e\x63\x4f\x75\x59\x4d\x4f\x4a','\x77\x6f\x62\x44\x6e\x52\x58\x44\x68\x38\x4b\x75\x57\x51\x3d\x3d','\x53\x73\x4b\x53\x77\x6f\x45\x3
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 33 38 5c 78 34 66 5c 78 35 35 5c 78 37 37 5c 78 36 66 5c 78 35 38 5c 78 34 34 5c 78 36 64 5c 78 33 38 5c 78 34 66 5c 78 37 30 5c 78 34 65 5c 78 34 35 5c 78 36 37 5c 78 33 34 27 2c 27 5c 78 34 63 5c 78 34 37 5c 78 33 39 5c 78 36 63 5c 78 37 37 5c 78 33 34 5c 78 37 33 5c 78 33 31 5c 78 37 37 5c 78 37 30 5c 78 34 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 36 66 5c 78 37 30 5c 78 36 34 5c 78 33 31 5c 78 33 37 5c 78 34 34 5c 78 36 39 5c 78 36 33 5c 78 34 62 5c 78 37 33 5c 78 36 33 5c 78 36 65 5c 78 36 62 5c 78 37 39 5c 78 35 39 5c 78 33 38 5c 78 34 66 5c 78 34 32 5c 78 36 35 5c 78 36 63 5c 78 34 65 5c 78 36 61 5c 78 37 37 5c 78 36 66 5c 78 37 34 5c 78 34 32 5c 78 37 37 5c 78 36 66 5c 78 36 36 5c 78 34 33 5c 78 37 36 5c 78 36 39 5c 78 34 65 5c 78 37 Data Ascii: 38\x4f\x55\x77\x6f\x58\x44\x6d\x38\x4f\x70\x4e\x45\x67\x34','\x4c\x47\x39\x6c\x77\x34\x73\x31\x77\x70\x41\x3d','\x77\x72\x6f\x70\x64\x31\x37\x44\x69\x63\x4b\x73\x63\x6e\x6b\x79\x59\x38\x4f\x42\x65\x6c\x4e\x6a\x77\x6f\x74\x42\x77\x6f\x66\x43\x76\x69\x4e\x7
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 5c 78 37 33 5c 78 34 66 5c 78 34 36 5c 78 37 37 5c 78 33 35 5c 78 34 64 5c 78 32 62 5c 78 36 36 5c 78 34 38 5c 78 33 31 5c 78 34 37 5c 78 34 38 5c 78 33 38 5c 78 34 62 5c 78 36 33 5c 78 34 36 5c 78 36 37 5c 78 32 66 5c 78 34 33 5c 78 36 39 5c 78 36 63 5c 78 37 34 5c 78 35 37 5c 78 37 37 5c 78 33 37 5c 78 36 61 5c 78 34 34 5c 78 36 65 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 30 5c 78 36 33 5c 78 34 62 5c 78 34 38 5c 78 37 37 5c 78 33 34 5c 78 36 65 5c 78 34 34 5c 78 36 61 5c 78 34 64 5c 78 34 62 5c 78 33 30 5c 78 34 34 5c 78 36 33 5c 78 34 62 5c 78 36 63 5c 78 34 61 5c 78 33 33 5c 78 35 35 5c 78 34 63 5c 78 35 37 5c 78 34 36 5c 78 37 36 5c 78 34 34 5c 78 36 61 5c 78 36 33 5c 78 34 62 5c 78 34 61 5c 78 35 33 5c 78 36 37 5c 78 33 64 5c 78 33 64 Data Ascii: \x73\x4f\x46\x77\x35\x4d\x2b\x66\x48\x31\x47\x48\x38\x4b\x63\x46\x67\x2f\x43\x69\x6c\x74\x57\x77\x37\x6a\x44\x6e\x67\x3d\x3d','\x50\x63\x4b\x48\x77\x34\x6e\x44\x6a\x4d\x4b\x30\x44\x63\x4b\x6c\x4a\x33\x55\x4c\x57\x46\x76\x44\x6a\x63\x4b\x4a\x53\x67\x3d\x3d
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 5c 78 36 36 5c 78 37 33 5c 78 34 66 5c 78 35 34 5c 78 35 61 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 35 5c 78 37 39 5c 78 36 61 5c 78 34 33 5c 78 36 61 5c 78 36 33 5c 78 34 66 5c 78 36 35 5c 78 35 30 5c 78 36 61 5c 78 33 39 5c 78 35 37 5c 78 37 37 5c 78 33 34 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 34 37 5c 78 34 64 5c 78 34 66 5c 78 37 35 5c 78 37 37 5c 78 37 31 5c 78 33 33 5c 78 34 33 5c 78 36 64 5c 78 36 64 5c 78 37 61 5c 78 34 33 5c 78 37 30 5c 78 36 39 5c 78 35 36 5c 78 35 39 5c 78 37 37 5c 78 37 32 5c 78 36 65 5c 78 34 34 5c 78 36 37 5c 78 35 36 5c 78 35 34 5c 78 34 33 5c 78 37 31 5c 78 33 38 5c 78 34 62 5c 78 34 31 5c 78 34 38 5c 78 37 33 5c 78 34 66 5c 78 36 32 5c 78 37 37 5c 78 37 30 5c 78 34 31 5c 78 33 38 5c 78 36 34 5c 78 34 31 5c Data Ascii: \x66\x73\x4f\x54\x5a\x67\x3d\x3d','\x45\x79\x6a\x43\x6a\x63\x4f\x65\x50\x6a\x39\x57\x77\x34\x38\x3d','\x47\x4d\x4f\x75\x77\x71\x33\x43\x6d\x6d\x7a\x43\x70\x69\x56\x59\x77\x72\x6e\x44\x67\x56\x54\x43\x71\x38\x4b\x41\x48\x73\x4f\x62\x77\x70\x41\x38\x64\x41\
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 36 63 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 36 5c 78 34 34 5c 78 36 61 5c 78 34 34 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 35 36 5c 78 37 37 5c 78 33 36 5c 78 33 31 5c 78 34 32 5c 78 34 32 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 39 5c 78 36 65 5c 78 34 61 5c 78 33 31 5c 78 37 37 5c 78 33 34 5c 78 37 33 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 36 61 5c 78 34 33 5c 78 36 62 5c 78 33 30 5c 78 35 30 5c 78 34 33 5c 78 37 32 5c 78 33 38 5c 78 34 66 5c 78 37 32 5c 78 36 31 5c 78 36 62 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 34 36 5c 78 33 31 5c 78 37 32 5c 78 34 33 5c 78 36 61 5c 78 35 38 5c 78 34 38 5c 78 34 34 5c 78 37 33 5c 78 34 64 5c 78 34 66 5c 78 37 33 5c 78 37 37 5c 78 33 34 5c 78 37 38 5c 78 33 35 5c 78 37 37 5c Data Ascii: 6c\x67\x3d\x3d','\x56\x44\x6a\x44\x6d\x4d\x4b\x56\x77\x36\x31\x42\x42\x77\x3d\x3d','\x49\x6e\x4a\x31\x77\x34\x73\x3d','\x77\x72\x6a\x43\x6b\x30\x50\x43\x72\x38\x4f\x72\x61\x6b\x45\x3d','\x46\x31\x72\x43\x6a\x58\x48\x44\x73\x4d\x4f\x73\x77\x34\x78\x35\x77\
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 5c 78 37 32 5c 78 36 66 5c 78 37 30 5c 78 37 37 5c 78 33 36 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 36 39 5c 78 33 38 5c 78 33 36 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 33 32 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 35 31 5c 78 32 62 5c 78 34 31 5c 78 36 33 5c 78 34 62 5c 78 33 31 5c 78 34 61 5c 78 34 38 5c 78 37 37 5c 78 35 33 5c 78 34 64 5c 78 33 38 5c 78 34 62 5c 78 34 61 5c 78 36 31 5c 78 33 38 5c 78 34 62 5c 78 37 31 27 2c 27 5c 78 34 35 5c 78 36 38 5c 78 37 32 5c 78 34 34 5c 78 36 64 5c 78 34 37 5c 78 36 38 5c 78 33 31 5c 78 34 61 5c 78 37 33 5c 78 34 66 5c 78 35 36 5c 78 37 37 5c 78 36 66 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 35 61 5c 78 37 35 5c 78 35 30 5c 78 34 31 5c 78 34 34 5c 78 34 33 5c 78 37 36 5c 78 34 Data Ascii: \x72\x6f\x70\x77\x36\x34\x3d','\x4f\x69\x38\x36\x56\x63\x4f\x32','\x77\x70\x51\x2b\x41\x63\x4b\x31\x4a\x48\x77\x53\x4d\x38\x4b\x4a\x61\x38\x4b\x71','\x45\x68\x72\x44\x6d\x47\x68\x31\x4a\x73\x4f\x56\x77\x6f\x38\x3d','\x77\x6f\x5a\x75\x50\x41\x44\x43\x76\x4
2024-12-16 01:33:43 UTC	1452	IN	Data Raw: 5c 78 34 66 5c 78 34 36 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 62 5c 78 34 33 5c 78 34 35 5c 78 33 31 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 32 62 5c 78 37 37 5c 78 36 66 5c 78 37 32 5c 78 34 33 5c 78 37 32 5c 78 36 62 5c 78 35 32 5c 78 37 31 5c 78 37 37 5c 78 33 37 5c 78 35 31 5c 78 34 64 5c 78 37 37 5c 78 37 30 5c 78 35 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 33 33 5c 78 34 33 5c 78 36 64 5c 78 37 33 5c 78 34 66 5c 78 33 38 5c 78 37 37 5c 78 36 66 5c 78 36 32 5c 78 34 33 5c 78 37 33 5c 78 35 37 5c 78 37 61 5c 78 34 34 5c 78 37 36 5c 78 34 64 5c 78 34 62 5c 78 33 35 5c 78 35 36 5c 78 37 33 5c 78 34 62 5c 78 33 31 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 33 32 5c 78 35 35 5c 78 35 33 5c 78 34 31 5c 78 34 37 5c 78 35 61 5c Data Ascii: \x4f\x46\x77\x3d\x3d','\x4b\x43\x45\x31\x56\x63\x4f\x2b\x77\x6f\x72\x43\x72\x6b\x52\x71\x77\x37\x51\x4d\x77\x70\x51\x3d','\x77\x35\x33\x43\x6d\x73\x4f\x38\x77\x6f\x62\x43\x73\x57\x7a\x44\x76\x4d\x4b\x35\x56\x73\x4b\x31\x56\x63\x4f\x32\x55\x53\x41\x47\x5a\
2024-12-16 01:33:43 UTC	1102	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49841	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:42 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 214 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:42 UTC	214	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 78 4d 43 77 69 62 47 59 69 4c 46 73 69 61 6d 39 79 62 6d 46 35 59 53 4a 64 58 56 30 3d 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 31 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1sxMCwibGYiLFsiam9ybmF5YSJdXV0=","chunk_number":0,"encoding":"base64","request_number":1,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:33:43 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:43 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49843	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:43 UTC	668	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/fingerprints HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 176 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:43 UTC	176	OUT	Data Raw: 7b 22 66 69 6e 67 65 72 70 72 69 6e 74 73 22 3a 5b 22 64 61 30 36 36 63 37 33 38 36 38 61 35 31 34 64 35 64 31 64 39 37 33 33 38 39 62 62 30 64 39 32 65 63 34 66 62 35 30 62 22 5d 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"fingerprints":["da066c73868a514d5d1d973389bb0d92ec4fb50b"],"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:33:43 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:43 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49844	54.227.246.42	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:43 UTC	720	OUT	GET /2.15.1/SaveDeviceId.js?lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&methods=48&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&uuid=692da195c1754dff85eb88ff9655ff01 HTTP/1.1 Host: create.leadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://deviceid.trueleadid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:43 UTC	850	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:43 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:43 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=1196f162-22b3-4f8b-903a-8f9d4923e36a; expires=Wed, 15 Jan 2025 01:33:43 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:43 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:43 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49845	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:45 UTC	625	OUT	GET /2.15.1/SaveDeviceId.js?lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&methods=48&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&uuid=692da195c1754dff85eb88ff9655ff01 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
2024-12-16 01:33:45 UTC	638	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:45 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:45 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:45 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49846	45.223.19.68	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:45 UTC	703	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=375929182 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
2024-12-16 01:33:45 UTC	183	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 83871 Strict-Transport-Security: max-age=31536000
2024-12-16 01:33:45 UTC	1269	IN	Data Raw: 76 61 72 20 5f 30 78 35 66 65 62 3d 5b 27 5c 78 34 33 5c 78 35 32 5c 78 34 38 5c 78 34 33 5c 78 36 37 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 30 5c 78 34 33 5c 78 34 39 5c 78 36 61 5c 78 35 32 5c 78 33 38 5c 78 34 66 5c 78 33 36 5c 78 37 37 5c 78 36 66 5c 78 34 38 5c 78 34 33 5c 78 36 65 5c 78 33 31 5c 78 35 36 5c 78 36 36 5c 78 37 37 5c 78 33 36 5c 78 33 39 5c 78 35 36 5c 78 37 37 5c 78 37 30 5c 78 32 66 5c 78 34 33 5c 78 36 37 5c 78 34 32 5c 78 33 33 5c 78 34 33 5c 78 37 33 5c 78 33 38 5c 78 34 66 5c 78 37 36 5c 78 34 31 5c 78 36 37 5c 78 36 63 5c 78 35 35 5c 78 37 37 5c 78 37 32 5c 78 32 66 5c 78 34 34 5c 78 36 37 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 37 33 5c 78 33 30 5c 78 34 31 5c 78 36 33 5c 78 34 Data Ascii: var _0x5feb=['\x43\x52\x48\x43\x67\x51\x3d\x3d','\x50\x43\x49\x6a\x52\x38\x4f\x36\x77\x6f\x48\x43\x6e\x31\x56\x66\x77\x36\x39\x56\x77\x70\x2f\x43\x67\x42\x33\x43\x73\x38\x4f\x76\x41\x67\x6c\x55\x77\x72\x2f\x44\x67\x51\x3d\x3d','\x77\x70\x73\x30\x41\x63\x4
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 78 34 34 5c 78 36 65 5c 78 36 33 5c 78 34 62 5c 78 33 35 5c 78 35 34 5c 78 33 38 5c 78 34 66 5c 78 34 63 5c 78 35 35 5c 78 33 38 5c 78 34 62 5c 78 34 35 5c 78 35 31 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 64 5c 78 35 38 5c 78 34 34 5c 78 37 34 5c 78 33 38 5c 78 34 66 5c 78 34 37 5c 78 37 37 5c 78 36 66 5c 78 36 37 5c 78 34 66 5c 78 36 32 5c 78 36 33 5c 78 34 62 5c 78 33 37 5c 78 37 37 5c 78 33 36 5c 78 34 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 36 36 5c 78 34 34 5c 78 37 31 5c 78 33 38 5c 78 34 66 5c 78 37 30 5c 78 37 37 5c 78 33 34 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 39 5c 78 37 61 5c 78 34 34 5c 78 36 63 5c 78 33 38 5c 78 34 62 5c 78 36 32 5c 78 37 37 5c 78 33 36 5c 78 33 31 5c 78 34 38 27 2c 27 Data Ascii: x44\x6e\x63\x4b\x35\x54\x38\x4f\x4c\x55\x38\x4b\x45\x51\x77\x3d\x3d','\x54\x6d\x58\x44\x74\x38\x4f\x47\x77\x6f\x67\x4f\x62\x63\x4b\x37\x77\x36\x4d\x3d','\x77\x71\x66\x44\x71\x38\x4f\x70\x77\x34\x34\x3d','\x54\x69\x7a\x44\x6c\x38\x4b\x62\x77\x36\x31\x48','
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 78 33 30 5c 78 37 37 5c 78 33 34 5c 78 33 35 5c 78 34 37 5c 78 34 66 5c 78 33 32 5c 78 35 32 5c 78 34 39 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 35 34 5c 78 34 33 5c 78 36 63 5c 78 33 38 5c 78 34 66 5c 78 36 35 5c 78 34 61 5c 78 35 33 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 36 62 5c 78 35 39 5c 78 37 37 5c 78 36 66 5c 78 37 33 5c 78 35 30 5c 78 36 33 5c 78 34 38 5c 78 34 39 5c 78 33 64 27 2c 27 5c 78 36 32 5c 78 37 33 5c 78 34 66 5c 78 35 31 5c 78 37 37 5c 78 36 66 5c 78 33 35 5c 78 34 38 5c 78 37 37 5c 78 37 32 5c 78 36 37 5c 78 33 39 5c 78 34 38 5c 78 37 33 5c 78 34 66 5c 78 36 32 5c 78 34 65 5c 78 35 34 5c 78 37 36 5c 78 34 34 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 36 61 5c 78 35 35 5c 78 36 33 5c 78 34 62 5c 78 37 34 5c 78 37 Data Ascii: x30\x77\x34\x35\x47\x4f\x32\x52\x49','\x77\x71\x54\x43\x6c\x38\x4f\x65\x4a\x53\x34\x3d','\x77\x35\x6b\x59\x77\x6f\x73\x50\x63\x48\x49\x3d','\x62\x73\x4f\x51\x77\x6f\x35\x48\x77\x72\x67\x39\x48\x73\x4f\x62\x4e\x54\x76\x44\x6d\x4d\x4b\x6a\x55\x63\x4b\x74\x7
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 5c 78 34 34 5c 78 37 33 5c 78 35 38 5c 78 37 33 5c 78 34 65 27 2c 27 5c 78 34 62 5c 78 35 34 5c 78 35 39 5c 78 32 66 5c 78 35 35 5c 78 33 38 5c 78 34 66 5c 78 36 65 5c 78 37 37 5c 78 37 30 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 36 63 5c 78 36 31 5c 78 37 37 5c 78 33 37 5c 78 33 33 5c 78 34 33 5c 78 37 32 5c 78 34 64 5c 78 34 62 5c 78 35 61 5c 78 34 65 5c 78 36 33 5c 78 34 66 5c 78 37 35 5c 78 35 39 5c 78 34 64 5c 78 34 66 5c 78 34 61 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 36 32 5c 78 34 34 5c 78 36 65 5c 78 35 32 5c 78 35 38 5c 78 34 34 5c 78 36 38 5c 78 33 38 5c 78 34 62 5c 78 37 35 5c 78 35 37 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 33 5c 78 37 33 5c 78 34 62 5c 78 35 33 5c 78 37 37 5c 78 36 66 5c 78 34 35 5c 78 33 Data Ascii: \x44\x73\x58\x73\x4e','\x4b\x54\x59\x2f\x55\x38\x4f\x6e\x77\x70\x77\x3d','\x77\x70\x6c\x61\x77\x37\x33\x43\x72\x4d\x4b\x5a\x4e\x63\x4f\x75\x59\x4d\x4f\x4a','\x77\x6f\x62\x44\x6e\x52\x58\x44\x68\x38\x4b\x75\x57\x51\x3d\x3d','\x53\x73\x4b\x53\x77\x6f\x45\x3
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 33 38 5c 78 34 66 5c 78 35 35 5c 78 37 37 5c 78 36 66 5c 78 35 38 5c 78 34 34 5c 78 36 64 5c 78 33 38 5c 78 34 66 5c 78 37 30 5c 78 34 65 5c 78 34 35 5c 78 36 37 5c 78 33 34 27 2c 27 5c 78 34 63 5c 78 34 37 5c 78 33 39 5c 78 36 63 5c 78 37 37 5c 78 33 34 5c 78 37 33 5c 78 33 31 5c 78 37 37 5c 78 37 30 5c 78 34 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 36 66 5c 78 37 30 5c 78 36 34 5c 78 33 31 5c 78 33 37 5c 78 34 34 5c 78 36 39 5c 78 36 33 5c 78 34 62 5c 78 37 33 5c 78 36 33 5c 78 36 65 5c 78 36 62 5c 78 37 39 5c 78 35 39 5c 78 33 38 5c 78 34 66 5c 78 34 32 5c 78 36 35 5c 78 36 63 5c 78 34 65 5c 78 36 61 5c 78 37 37 5c 78 36 66 5c 78 37 34 5c 78 34 32 5c 78 37 37 5c 78 36 66 5c 78 36 36 5c 78 34 33 5c 78 37 36 5c 78 36 39 5c 78 34 65 5c 78 37 Data Ascii: 38\x4f\x55\x77\x6f\x58\x44\x6d\x38\x4f\x70\x4e\x45\x67\x34','\x4c\x47\x39\x6c\x77\x34\x73\x31\x77\x70\x41\x3d','\x77\x72\x6f\x70\x64\x31\x37\x44\x69\x63\x4b\x73\x63\x6e\x6b\x79\x59\x38\x4f\x42\x65\x6c\x4e\x6a\x77\x6f\x74\x42\x77\x6f\x66\x43\x76\x69\x4e\x7
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 5c 78 37 33 5c 78 34 66 5c 78 34 36 5c 78 37 37 5c 78 33 35 5c 78 34 64 5c 78 32 62 5c 78 36 36 5c 78 34 38 5c 78 33 31 5c 78 34 37 5c 78 34 38 5c 78 33 38 5c 78 34 62 5c 78 36 33 5c 78 34 36 5c 78 36 37 5c 78 32 66 5c 78 34 33 5c 78 36 39 5c 78 36 63 5c 78 37 34 5c 78 35 37 5c 78 37 37 5c 78 33 37 5c 78 36 61 5c 78 34 34 5c 78 36 65 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 30 5c 78 36 33 5c 78 34 62 5c 78 34 38 5c 78 37 37 5c 78 33 34 5c 78 36 65 5c 78 34 34 5c 78 36 61 5c 78 34 64 5c 78 34 62 5c 78 33 30 5c 78 34 34 5c 78 36 33 5c 78 34 62 5c 78 36 63 5c 78 34 61 5c 78 33 33 5c 78 35 35 5c 78 34 63 5c 78 35 37 5c 78 34 36 5c 78 37 36 5c 78 34 34 5c 78 36 61 5c 78 36 33 5c 78 34 62 5c 78 34 61 5c 78 35 33 5c 78 36 37 5c 78 33 64 5c 78 33 64 Data Ascii: \x73\x4f\x46\x77\x35\x4d\x2b\x66\x48\x31\x47\x48\x38\x4b\x63\x46\x67\x2f\x43\x69\x6c\x74\x57\x77\x37\x6a\x44\x6e\x67\x3d\x3d','\x50\x63\x4b\x48\x77\x34\x6e\x44\x6a\x4d\x4b\x30\x44\x63\x4b\x6c\x4a\x33\x55\x4c\x57\x46\x76\x44\x6a\x63\x4b\x4a\x53\x67\x3d\x3d
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 5c 78 36 36 5c 78 37 33 5c 78 34 66 5c 78 35 34 5c 78 35 61 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 35 5c 78 37 39 5c 78 36 61 5c 78 34 33 5c 78 36 61 5c 78 36 33 5c 78 34 66 5c 78 36 35 5c 78 35 30 5c 78 36 61 5c 78 33 39 5c 78 35 37 5c 78 37 37 5c 78 33 34 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 34 37 5c 78 34 64 5c 78 34 66 5c 78 37 35 5c 78 37 37 5c 78 37 31 5c 78 33 33 5c 78 34 33 5c 78 36 64 5c 78 36 64 5c 78 37 61 5c 78 34 33 5c 78 37 30 5c 78 36 39 5c 78 35 36 5c 78 35 39 5c 78 37 37 5c 78 37 32 5c 78 36 65 5c 78 34 34 5c 78 36 37 5c 78 35 36 5c 78 35 34 5c 78 34 33 5c 78 37 31 5c 78 33 38 5c 78 34 62 5c 78 34 31 5c 78 34 38 5c 78 37 33 5c 78 34 66 5c 78 36 32 5c 78 37 37 5c 78 37 30 5c 78 34 31 5c 78 33 38 5c 78 36 34 5c 78 34 31 5c Data Ascii: \x66\x73\x4f\x54\x5a\x67\x3d\x3d','\x45\x79\x6a\x43\x6a\x63\x4f\x65\x50\x6a\x39\x57\x77\x34\x38\x3d','\x47\x4d\x4f\x75\x77\x71\x33\x43\x6d\x6d\x7a\x43\x70\x69\x56\x59\x77\x72\x6e\x44\x67\x56\x54\x43\x71\x38\x4b\x41\x48\x73\x4f\x62\x77\x70\x41\x38\x64\x41\
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 36 63 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 36 5c 78 34 34 5c 78 36 61 5c 78 34 34 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 35 36 5c 78 37 37 5c 78 33 36 5c 78 33 31 5c 78 34 32 5c 78 34 32 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 39 5c 78 36 65 5c 78 34 61 5c 78 33 31 5c 78 37 37 5c 78 33 34 5c 78 37 33 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 36 61 5c 78 34 33 5c 78 36 62 5c 78 33 30 5c 78 35 30 5c 78 34 33 5c 78 37 32 5c 78 33 38 5c 78 34 66 5c 78 37 32 5c 78 36 31 5c 78 36 62 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 34 36 5c 78 33 31 5c 78 37 32 5c 78 34 33 5c 78 36 61 5c 78 35 38 5c 78 34 38 5c 78 34 34 5c 78 37 33 5c 78 34 64 5c 78 34 66 5c 78 37 33 5c 78 37 37 5c 78 33 34 5c 78 37 38 5c 78 33 35 5c 78 37 37 5c Data Ascii: 6c\x67\x3d\x3d','\x56\x44\x6a\x44\x6d\x4d\x4b\x56\x77\x36\x31\x42\x42\x77\x3d\x3d','\x49\x6e\x4a\x31\x77\x34\x73\x3d','\x77\x72\x6a\x43\x6b\x30\x50\x43\x72\x38\x4f\x72\x61\x6b\x45\x3d','\x46\x31\x72\x43\x6a\x58\x48\x44\x73\x4d\x4f\x73\x77\x34\x78\x35\x77\
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 5c 78 37 32 5c 78 36 66 5c 78 37 30 5c 78 37 37 5c 78 33 36 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 36 39 5c 78 33 38 5c 78 33 36 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 33 32 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 35 31 5c 78 32 62 5c 78 34 31 5c 78 36 33 5c 78 34 62 5c 78 33 31 5c 78 34 61 5c 78 34 38 5c 78 37 37 5c 78 35 33 5c 78 34 64 5c 78 33 38 5c 78 34 62 5c 78 34 61 5c 78 36 31 5c 78 33 38 5c 78 34 62 5c 78 37 31 27 2c 27 5c 78 34 35 5c 78 36 38 5c 78 37 32 5c 78 34 34 5c 78 36 64 5c 78 34 37 5c 78 36 38 5c 78 33 31 5c 78 34 61 5c 78 37 33 5c 78 34 66 5c 78 35 36 5c 78 37 37 5c 78 36 66 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 35 61 5c 78 37 35 5c 78 35 30 5c 78 34 31 5c 78 34 34 5c 78 34 33 5c 78 37 36 5c 78 34 Data Ascii: \x72\x6f\x70\x77\x36\x34\x3d','\x4f\x69\x38\x36\x56\x63\x4f\x32','\x77\x70\x51\x2b\x41\x63\x4b\x31\x4a\x48\x77\x53\x4d\x38\x4b\x4a\x61\x38\x4b\x71','\x45\x68\x72\x44\x6d\x47\x68\x31\x4a\x73\x4f\x56\x77\x6f\x38\x3d','\x77\x6f\x5a\x75\x50\x41\x44\x43\x76\x4
2024-12-16 01:33:45 UTC	1452	IN	Data Raw: 5c 78 34 66 5c 78 34 36 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 62 5c 78 34 33 5c 78 34 35 5c 78 33 31 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 32 62 5c 78 37 37 5c 78 36 66 5c 78 37 32 5c 78 34 33 5c 78 37 32 5c 78 36 62 5c 78 35 32 5c 78 37 31 5c 78 37 37 5c 78 33 37 5c 78 35 31 5c 78 34 64 5c 78 37 37 5c 78 37 30 5c 78 35 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 33 33 5c 78 34 33 5c 78 36 64 5c 78 37 33 5c 78 34 66 5c 78 33 38 5c 78 37 37 5c 78 36 66 5c 78 36 32 5c 78 34 33 5c 78 37 33 5c 78 35 37 5c 78 37 61 5c 78 34 34 5c 78 37 36 5c 78 34 64 5c 78 34 62 5c 78 33 35 5c 78 35 36 5c 78 37 33 5c 78 34 62 5c 78 33 31 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 33 32 5c 78 35 35 5c 78 35 33 5c 78 34 31 5c 78 34 37 5c 78 35 61 5c Data Ascii: \x4f\x46\x77\x3d\x3d','\x4b\x43\x45\x31\x56\x63\x4f\x2b\x77\x6f\x72\x43\x72\x6b\x52\x71\x77\x37\x51\x4d\x77\x70\x51\x3d','\x77\x35\x33\x43\x6d\x73\x4f\x38\x77\x6f\x62\x43\x73\x57\x7a\x44\x76\x4d\x4b\x35\x56\x73\x4b\x31\x56\x63\x4f\x32\x55\x53\x41\x47\x5a\
2024-12-16 01:33:46 UTC	674	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49847	45.223.19.68	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:45 UTC	1102	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://deviceid.trueleadid.com/iframe.html?token=83EF8CB1-02F2-051B-A30D-93F02B18B440&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.1&lck=2C655333-C8E9-A250-F78D-C5C6738D03D1&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
2024-12-16 01:33:46 UTC	167	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1 Strict-Transport-Security: max-age=31536000
2024-12-16 01:33:46 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49848	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:45 UTC	742	OUT	POST /2.15.1/Snap?msn=7&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646540 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 65772 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:45 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 32 33 35 37 34 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 36 33 25 32 43 36 34 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 36 39 25 32 43 37 30 25 32 43 37 31 25 32 43 37 32 25 32 43 37 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&capture_time=1734312823574&element_ids=%5B63%2C64%2C65%2C66%2C67%2C68%2C69%2C70%2C71%2C72%2C7
2024-12-16 01:33:45 UTC	16384	OUT	Data Raw: 33 38 25 32 43 38 33 39 25 32 43 35 31 35 25 32 43 35 31 36 25 32 43 35 31 39 25 32 43 35 32 33 25 32 43 38 34 38 25 32 43 38 34 35 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 37 25 32 43 25 32 32 63 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 54 25 32 32 25 32 43 25 32 32 78 25 32 32 25 33 41 25 32 32 25 32 30 25 32 32 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 39 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 38 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 Data Ascii: 38%2C839%2C515%2C516%2C519%2C523%2C848%2C845%5D%2C%22z%22%3A167%2C%22c%22%3A%5B%7B%22t%22%3A%22T%22%2C%22x%22%3A%22%20%22%2C%22z%22%3A169%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B823%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%
2024-12-16 01:33:45 UTC	16384	OUT	Data Raw: 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 54 79 70 65 25 33 41 6c 75 6d 69 6e 61 6e 63 65 25 32 32 25 32 43 25 32 32 6d 61 74 68 44 65 70 74 68 25 33 41 30 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 68 69 66 74 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 74 79 6c 65 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 78 42 6c 6f 63 6b 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 48 65 69 67 68 74 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 69 6e 42 6c 6f 63 6b 53 69 7a 65 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 6d 69 6e Data Ascii: Anone%22%2C%22maskType%3Aluminance%22%2C%22mathDepth%3A0%22%2C%22mathShift%3Anormal%22%2C%22mathStyle%3Anormal%22%2C%22maxBlockSize%3Anone%22%2C%22maxHeight%3Anone%22%2C%22maxInlineSize%3Anone%22%2C%22maxWidth%3Anone%22%2C%22minBlockSize%3A0px%22%2C%22min
2024-12-16 01:33:45 UTC	16384	OUT	Data Raw: 33 41 37 32 30 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 33 36 30 70 78 25 32 32 25 32 43 25 32 32 62 6c 6f 63 6b 53 69 7a 65 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 68 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 Data Ascii: 3A720px%22%2C%22webkitTransformOrigin%3A600px%20360px%22%2C%22blockSize%3A561.531px%22%2C%22height%3A561.531px%22%2C%22perspectiveOrigin%3A600px%20280.766px%22%2C%22transformOrigin%3A600px%20280.766px%22%2C%22webkitLogicalHeight%3A561.531px%22%2C%22webkit
2024-12-16 01:33:45 UTC	236	OUT	Data Raw: 32 43 25 32 32 62 65 6e 63 68 6d 61 72 6b 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6c 6c 65 63 74 53 74 72 75 63 74 75 72 65 25 32 32 25 33 41 31 34 38 25 32 43 25 32 32 69 6e 64 65 78 53 74 79 6c 65 73 25 32 32 25 33 41 34 31 31 25 37 44 25 32 43 25 32 32 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 76 69 65 77 70 6f 72 74 25 32 32 25 33 41 25 37 42 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 67 68 74 25 32 32 25 33 41 39 30 37 25 37 44 25 37 44 26 6c 61 63 3d 31 45 38 34 36 42 42 38 2d 36 44 38 44 2d 39 42 43 30 2d 31 33 46 39 2d 31 45 36 36 35 43 31 44 34 41 35 30 26 63 6c 69 65 6e 74 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 32 33 35 37 34 Data Ascii: 2C%22benchmarks%22%3A%7B%22collectStructure%22%3A148%2C%22indexStyles%22%3A411%7D%2C%22version%22%3A2%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22height%22%3A907%7D%7D&lac=1E846BB8-6D8D-9BC0-13F9-1E665C1D4A50&client_time=1734312823574
2024-12-16 01:33:46 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:46 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=b73a0faf-c7ac-4a1f-9548-aed347a7bfa4; expires=Wed, 15 Jan 2025 01:33:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:46 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49849	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:45 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 462 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:45 UTC	462	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 65 4a 77 39 30 45 32 71 77 7a 41 4d 42 4f 43 72 50 4c 54 57 41 38 75 53 2f 4a 4f 72 68 43 78 43 6b 6b 57 67 70 64 53 6c 33 5a 54 65 76 62 4b 78 75 77 73 66 6b 2f 48 59 38 35 7a 4a 49 56 77 42 67 77 51 55 34 51 56 6e 63 70 51 37 71 56 47 73 52 49 45 36 4d 59 70 4b 4a 52 39 47 71 6c 4b 71 78 46 6b 36 45 55 70 6f 58 63 71 68 6b 7a 50 4b 6c 57 70 74 49 38 34 6f 73 61 57 69 39 68 38 35 47 72 56 55 43 72 36 54 37 55 6f 74 6c 65 4d 67 32 35 58 71 69 64 36 6c 76 6f 73 46 4a 66 74 4b 33 76 55 54 32 58 62 6c 6c 6d 49 61 35 46 46 64 53 34 6b 66 49 38 69 6f 33 74 47 72 6a 69 36 48 53 69 32 6c 6d 68 42 32 77 44 65 73 47 30 7a 7a 47 38 34 64 4a 6b 72 32 59 69 74 4d 73 46 33 57 78 77 4d 51 58 76 62 39 57 69 2f 6e 2f 6c 2b 4f 2b 2f 4d 73 78 2f Data Ascii: {"body":"eJw90E2qwzAMBOCrPLTWA8uS/JOrhCxCkkWgpdSl3ZTevbKxuwsfk/HY85zJIVwBgwQU4QVncpQ7qVGsRIE6MYpKJR9GqlKqxFk6EUpoXcqhkzPKlWptI84osaWi9h85GrVUCr6T7UotleMg25Xqid6lvosFJftK3vUT2XbllmIa5FFdS4kfI8io3tGrji6HSi2lmhB2wDesG0zzG84dJkr2YitMsF3WxwMQXvb9Wi/n/l+O+/Msx/
2024-12-16 01:33:46 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:46 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49850	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:47 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:47 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:33:47 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0050 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49852	45.223.19.68	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:47 UTC	674	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.728695170390439 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=82vUOZ4oSICS5ClptiNOgXSDX2cAAAAAQUIPAAAAAAAbnZYSiNiZ0Q975Y8PNwDk; nlbi_3051494=NIqcWbj30ymh4c3oC30iGwAAAAA6/V1USab8WUshhbeyx8kN; incap_ses_1607_3051494=xoG4QUraGlpeWlCeNjZNFnSDX2cAAAAAE+g4XxbqsKW6oedkary9bw==; uuid=692da195c1754dff85eb88ff9655ff01
2024-12-16 01:33:48 UTC	167	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1 Strict-Transport-Security: max-age=31536000
2024-12-16 01:33:48 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49851	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:47 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:47 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 30 4e 54 67 7a 4c 43 4a 74 49 69 77 32 4e 54 51 73 4e 44 51 35 58 56 30 3d 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 33 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1s0NTgzLCJtIiw2NTQsNDQ5XV0=","chunk_number":0,"encoding":"base64","request_number":3,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:33:48 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:48 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49853	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:48 UTC	539	OUT	GET /2.15.1/Snap?msn=7&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646540 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
2024-12-16 01:33:48 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:48 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:48 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:48 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49854	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:49 UTC	351	OUT	GET /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:49 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49855	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:50 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:50 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 33 4e 6a 63 33 4c 43 4a 74 49 69 77 32 4e 54 45 73 4e 44 51 32 58 56 30 3d 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 34 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1s3Njc3LCJtIiw2NTEsNDQ2XV0=","chunk_number":0,"encoding":"base64","request_number":4,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:33:51 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:51 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49857	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:54 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:54 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:33:55 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:54 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0030 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49864	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:56 UTC	351	OUT	GET /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:56 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:56 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49870	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:57 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:57 UTC	302	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 65 4a 77 39 79 7a 6b 4f 77 44 41 49 42 4d 43 2f 70 4b 62 77 77 75 4c 6a 4c 5a 61 72 31 50 6c 2f 47 34 4a 51 32 70 46 6d 62 2b 69 61 53 36 37 6e 6b 73 34 70 4a 49 39 73 6d 44 72 4c 50 45 7a 54 76 50 63 79 68 4c 57 30 47 53 66 4e 68 74 44 57 5a 38 52 43 6d 59 58 31 4e 41 34 74 61 32 47 65 35 68 72 33 2f 6b 30 77 6d 38 41 6f 77 44 6b 76 38 7a 41 67 39 51 3d 3d 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 7a 6c 69 62 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 35 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 Data Ascii: {"body":"eJw9yzkOwDAIBMC/pKbwwuLjLZar1Pl/G4JQ2pFmb+iaS67nks4pJI9smDrLPEzTvPcyhLW0GSfNhtDWZ8RCmYX1NA4ta2Ge5hr3/k0wm8AowDkv8zAg9Q==","chunk_number":0,"encoding":"zlib64","request_number":5,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrI
2024-12-16 01:33:57 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:33:57 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49871	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:57 UTC	742	OUT	POST /2.15.1/Snap?msn=8&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646541 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 65877 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:57 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 33 35 36 32 30 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 36 33 25 32 43 36 34 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 36 39 25 32 43 37 30 25 32 43 37 31 25 32 43 37 32 25 32 43 37 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&capture_time=1734312835620&element_ids=%5B63%2C64%2C65%2C66%2C67%2C68%2C69%2C70%2C71%2C72%2C7
2024-12-16 01:33:57 UTC	16384	OUT	Data Raw: 43 38 33 38 25 32 43 38 33 39 25 32 43 35 31 35 25 32 43 35 31 36 25 32 43 35 31 39 25 32 43 35 32 33 25 32 43 38 34 38 25 32 43 38 34 35 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 37 25 32 43 25 32 32 63 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 54 25 32 32 25 32 43 25 32 32 78 25 32 32 25 33 41 25 32 32 25 32 30 25 32 32 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 39 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 38 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 Data Ascii: C838%2C839%2C515%2C516%2C519%2C523%2C848%2C845%5D%2C%22z%22%3A167%2C%22c%22%3A%5B%7B%22t%22%3A%22T%22%2C%22x%22%3A%22%20%22%2C%22z%22%3A169%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B823%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C7
2024-12-16 01:33:57 UTC	16384	OUT	Data Raw: 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 54 79 70 65 25 33 41 6c 75 6d 69 6e 61 6e 63 65 25 32 32 25 32 43 25 32 32 6d 61 74 68 44 65 70 74 68 25 33 41 30 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 68 69 66 74 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 74 79 6c 65 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 78 42 6c 6f 63 6b 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 48 65 69 67 68 74 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 69 6e 42 6c 6f 63 6b 53 69 7a 65 25 Data Ascii: ne%22%2C%22mask%3Anone%22%2C%22maskType%3Aluminance%22%2C%22mathDepth%3A0%22%2C%22mathShift%3Anormal%22%2C%22mathStyle%3Anormal%22%2C%22maxBlockSize%3Anone%22%2C%22maxHeight%3Anone%22%2C%22maxInlineSize%3Anone%22%2C%22maxWidth%3Anone%22%2C%22minBlockSize%
2024-12-16 01:33:57 UTC	16384	OUT	Data Raw: 4d 69 6e 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 37 32 30 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 33 36 30 70 78 25 32 32 25 32 43 25 32 32 62 6c 6f 63 6b 53 69 7a 65 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 68 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 Data Ascii: MinLogicalHeight%3A720px%22%2C%22webkitTransformOrigin%3A600px%20360px%22%2C%22blockSize%3A561.531px%22%2C%22height%3A561.531px%22%2C%22perspectiveOrigin%3A600px%20280.766px%22%2C%22transformOrigin%3A600px%20280.766px%22%2C%22webkitLogicalHeight%3A561.531
2024-12-16 01:33:57 UTC	341	OUT	Data Raw: 43 31 36 36 25 32 43 31 37 34 25 32 43 32 31 34 25 32 43 31 31 31 37 25 32 43 32 31 38 25 32 43 32 31 39 25 32 43 32 32 30 25 32 43 32 36 30 25 32 43 32 39 38 25 32 43 33 35 35 25 32 43 33 36 39 25 32 43 33 37 35 25 32 43 34 30 32 25 32 43 35 33 35 25 32 43 35 33 37 25 32 43 35 34 31 25 35 44 25 37 44 25 37 44 25 32 43 25 32 32 62 65 6e 63 68 6d 61 72 6b 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6c 6c 65 63 74 53 74 72 75 63 74 75 72 65 25 32 32 25 33 41 33 36 38 25 32 43 25 32 32 69 6e 64 65 78 53 74 79 6c 65 73 25 32 32 25 33 41 34 39 32 25 37 44 25 32 43 25 32 32 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 76 69 65 77 70 6f 72 74 25 32 32 25 33 41 25 37 42 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 Data Ascii: C166%2C174%2C214%2C1117%2C218%2C219%2C220%2C260%2C298%2C355%2C369%2C375%2C402%2C535%2C537%2C541%5D%7D%7D%2C%22benchmarks%22%3A%7B%22collectStructure%22%3A368%2C%22indexStyles%22%3A492%7D%2C%22version%22%3A2%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22he
2024-12-16 01:33:58 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:33:58 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:33:58 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=57960f87-9004-40fe-a3b9-f20796b35444; expires=Wed, 15 Jan 2025 01:33:58 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:33:58 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:33:58 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49876	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:59 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:33:59 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 78 4e 6a 55 31 4d 53 77 69 62 53 49 73 4e 6a 51 79 4c 44 51 7a 4e 31 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 36 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1sxNjU1MSwibSIsNjQyLDQzN11d","chunk_number":0,"encoding":"base64","request_number":6,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:34:00 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:34:00 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49878	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:33:59 UTC	539	OUT	GET /2.15.1/Snap?msn=8&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646541 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
2024-12-16 01:34:00 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:00 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:34:00 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:34:00 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:34:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49884	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:01 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:01 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:34:02 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:02 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0040 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49886	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:02 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:02 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 78 4f 54 59 32 4d 43 77 69 62 53 49 73 4e 6a 55 32 4c 44 51 31 4d 56 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 37 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1sxOTY2MCwibSIsNjU2LDQ1MV1d","chunk_number":0,"encoding":"base64","request_number":7,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:34:03 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:34:03 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49891	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:03 UTC	351	OUT	GET /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:04 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:03 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49903	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:09 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:09 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:34:09 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0020 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49904	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:09 UTC	742	OUT	POST /2.15.1/Snap?msn=9&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646542 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 65876 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:09 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 34 37 34 36 35 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 36 33 25 32 43 36 34 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 36 39 25 32 43 37 30 25 32 43 37 31 25 32 43 37 32 25 32 43 37 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&capture_time=1734312847465&element_ids=%5B63%2C64%2C65%2C66%2C67%2C68%2C69%2C70%2C71%2C72%2C7
2024-12-16 01:34:09 UTC	16384	OUT	Data Raw: 43 38 33 38 25 32 43 38 33 39 25 32 43 35 31 35 25 32 43 35 31 36 25 32 43 35 31 39 25 32 43 35 32 33 25 32 43 38 34 38 25 32 43 38 34 35 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 37 25 32 43 25 32 32 63 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 54 25 32 32 25 32 43 25 32 32 78 25 32 32 25 33 41 25 32 32 25 32 30 25 32 32 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 39 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 38 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 Data Ascii: C838%2C839%2C515%2C516%2C519%2C523%2C848%2C845%5D%2C%22z%22%3A167%2C%22c%22%3A%5B%7B%22t%22%3A%22T%22%2C%22x%22%3A%22%20%22%2C%22z%22%3A169%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B823%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C7
2024-12-16 01:34:09 UTC	16384	OUT	Data Raw: 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 54 79 70 65 25 33 41 6c 75 6d 69 6e 61 6e 63 65 25 32 32 25 32 43 25 32 32 6d 61 74 68 44 65 70 74 68 25 33 41 30 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 68 69 66 74 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 74 79 6c 65 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 78 42 6c 6f 63 6b 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 48 65 69 67 68 74 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 69 6e 42 6c 6f 63 6b 53 69 7a 65 25 Data Ascii: ne%22%2C%22mask%3Anone%22%2C%22maskType%3Aluminance%22%2C%22mathDepth%3A0%22%2C%22mathShift%3Anormal%22%2C%22mathStyle%3Anormal%22%2C%22maxBlockSize%3Anone%22%2C%22maxHeight%3Anone%22%2C%22maxInlineSize%3Anone%22%2C%22maxWidth%3Anone%22%2C%22minBlockSize%
2024-12-16 01:34:09 UTC	16384	OUT	Data Raw: 4d 69 6e 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 37 32 30 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 33 36 30 70 78 25 32 32 25 32 43 25 32 32 62 6c 6f 63 6b 53 69 7a 65 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 68 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 Data Ascii: MinLogicalHeight%3A720px%22%2C%22webkitTransformOrigin%3A600px%20360px%22%2C%22blockSize%3A561.531px%22%2C%22height%3A561.531px%22%2C%22perspectiveOrigin%3A600px%20280.766px%22%2C%22transformOrigin%3A600px%20280.766px%22%2C%22webkitLogicalHeight%3A561.531
2024-12-16 01:34:09 UTC	340	OUT	Data Raw: 43 31 36 36 25 32 43 31 37 34 25 32 43 32 31 34 25 32 43 31 31 31 37 25 32 43 32 31 38 25 32 43 32 31 39 25 32 43 32 32 30 25 32 43 32 36 30 25 32 43 32 39 38 25 32 43 33 35 35 25 32 43 33 36 39 25 32 43 33 37 35 25 32 43 34 30 32 25 32 43 35 33 35 25 32 43 35 33 37 25 32 43 35 34 31 25 35 44 25 37 44 25 37 44 25 32 43 25 32 32 62 65 6e 63 68 6d 61 72 6b 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6c 6c 65 63 74 53 74 72 75 63 74 75 72 65 25 32 32 25 33 41 38 35 25 32 43 25 32 32 69 6e 64 65 78 53 74 79 6c 65 73 25 32 32 25 33 41 32 38 37 25 37 44 25 32 43 25 32 32 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 76 69 65 77 70 6f 72 74 25 32 32 25 33 41 25 37 42 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 Data Ascii: C166%2C174%2C214%2C1117%2C218%2C219%2C220%2C260%2C298%2C355%2C369%2C375%2C402%2C535%2C537%2C541%5D%7D%7D%2C%22benchmarks%22%3A%7B%22collectStructure%22%3A85%2C%22indexStyles%22%3A287%7D%2C%22version%22%3A2%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22hei
2024-12-16 01:34:10 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:10 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:34:10 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=6aad6bbd-ebe1-409a-bb8c-2fcdefb9c27e; expires=Wed, 15 Jan 2025 01:34:10 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:34:10 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:34:10 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:34:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49906	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:09 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 314 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:09 UTC	314	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 65 4a 77 74 7a 6a 45 4f 77 44 41 49 41 38 43 2f 64 47 59 49 59 43 42 35 53 35 53 70 63 2f 2b 2f 6c 70 42 73 31 6b 6d 32 50 4b 64 67 63 4b 50 6e 65 38 68 4e 43 52 69 4c 70 70 6a 6f 4f 49 61 52 46 6d 55 49 75 65 5a 70 4b 49 74 75 31 7a 68 4e 74 6e 6b 54 50 71 5a 42 30 4e 70 7a 79 58 77 4d 61 62 58 6e 73 48 34 74 75 32 70 6c 46 76 6e 6c 33 64 61 32 45 66 64 47 6e 42 33 6d 74 58 36 37 72 43 56 61 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 7a 6c 69 62 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 38 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a Data Ascii: {"body":"eJwtzjEOwDAIA8C/dGYIYCB5S5Spc/+/lpBs1km2PKdgcKPne8hNCRiLppjoOIaRFmUIueZpKItu1zhNtnkTPqZB0NpzyXwMabXnsH4tu2plFvnl3da2EfdGnB3mtX67rCVa","chunk_number":0,"encoding":"zlib64","request_number":8,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJ
2024-12-16 01:34:10 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:34:10 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49911	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:10 UTC	351	OUT	GET /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:11 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49912	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:11 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:11 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 79 4f 44 59 78 4e 43 77 69 62 53 49 73 4e 6a 55 31 4c 44 51 31 4d 46 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 39 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1syODYxNCwibSIsNjU1LDQ1MF1d","chunk_number":0,"encoding":"base64","request_number":9,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:34:12 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:34:12 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49913	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:11 UTC	539	OUT	GET /2.15.1/Snap?msn=9&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646542 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
2024-12-16 01:34:12 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:12 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:34:12 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:34:12 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:34:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49924	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:16 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:16 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:34:16 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:16 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0040 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49930	34.229.26.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:17 UTC	351	OUT	GET /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:18 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:18 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49932	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:18 UTC	743	OUT	POST /2.15.1/Snap?msn=10&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646543 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 65876 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:18 UTC	16384	OUT	Data Raw: 69 64 3d 38 33 45 46 38 43 42 31 2d 30 32 46 32 2d 30 35 31 42 2d 41 33 30 44 2d 39 33 46 30 32 42 31 38 42 34 34 30 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 61 6c 6b 2d 69 6e 62 61 74 68 74 75 62 73 68 6f 70 2e 63 6f 6d 25 32 46 25 33 46 61 69 64 32 25 33 44 35 32 38 36 25 32 36 63 69 64 32 25 33 44 37 30 30 36 30 30 31 35 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 35 32 38 36 25 32 36 6f 69 64 32 25 33 44 39 39 32 25 32 36 73 31 25 33 44 34 38 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 33 34 33 31 32 38 35 36 33 37 31 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 36 33 25 32 43 36 34 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 36 39 25 32 43 37 30 25 32 43 37 31 25 32 43 37 32 25 32 43 37 Data Ascii: id=83EF8CB1-02F2-051B-A30D-93F02B18B440&url=https%3A%2F%2Fwalk-inbathtubshop.com%2F%3Faid2%3D5286%26cid2%3D70060015%26utm_campaign%3D5286%26oid2%3D992%26s1%3D483&capture_time=1734312856371&element_ids=%5B63%2C64%2C65%2C66%2C67%2C68%2C69%2C70%2C71%2C72%2C7
2024-12-16 01:34:18 UTC	16384	OUT	Data Raw: 43 38 33 38 25 32 43 38 33 39 25 32 43 35 31 35 25 32 43 35 31 36 25 32 43 35 31 39 25 32 43 35 32 33 25 32 43 38 34 38 25 32 43 38 34 35 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 37 25 32 43 25 32 32 63 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 54 25 32 32 25 32 43 25 32 32 78 25 32 32 25 33 41 25 32 32 25 32 30 25 32 32 25 32 43 25 32 32 7a 25 32 32 25 33 41 31 36 39 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 38 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 Data Ascii: C838%2C839%2C515%2C516%2C519%2C523%2C848%2C845%5D%2C%22z%22%3A167%2C%22c%22%3A%5B%7B%22t%22%3A%22T%22%2C%22x%22%3A%22%20%22%2C%22z%22%3A169%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B823%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C7
2024-12-16 01:34:18 UTC	16384	OUT	Data Raw: 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 73 6b 54 79 70 65 25 33 41 6c 75 6d 69 6e 61 6e 63 65 25 32 32 25 32 43 25 32 32 6d 61 74 68 44 65 70 74 68 25 33 41 30 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 68 69 66 74 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 74 68 53 74 79 6c 65 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 6d 61 78 42 6c 6f 63 6b 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 48 65 69 67 68 74 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 6d 69 6e 42 6c 6f 63 6b 53 69 7a 65 25 Data Ascii: ne%22%2C%22mask%3Anone%22%2C%22maskType%3Aluminance%22%2C%22mathDepth%3A0%22%2C%22mathShift%3Anormal%22%2C%22mathStyle%3Anormal%22%2C%22maxBlockSize%3Anone%22%2C%22maxHeight%3Anone%22%2C%22maxInlineSize%3Anone%22%2C%22maxWidth%3Anone%22%2C%22minBlockSize%
2024-12-16 01:34:18 UTC	16384	OUT	Data Raw: 4d 69 6e 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 37 32 30 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 33 36 30 70 78 25 32 32 25 32 43 25 32 32 62 6c 6f 63 6b 53 69 7a 65 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 68 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 70 78 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 36 30 30 70 78 25 32 30 32 38 30 2e 37 36 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 35 36 31 2e 35 33 31 Data Ascii: MinLogicalHeight%3A720px%22%2C%22webkitTransformOrigin%3A600px%20360px%22%2C%22blockSize%3A561.531px%22%2C%22height%3A561.531px%22%2C%22perspectiveOrigin%3A600px%20280.766px%22%2C%22transformOrigin%3A600px%20280.766px%22%2C%22webkitLogicalHeight%3A561.531
2024-12-16 01:34:18 UTC	340	OUT	Data Raw: 43 31 36 36 25 32 43 31 37 34 25 32 43 32 31 34 25 32 43 31 31 31 37 25 32 43 32 31 38 25 32 43 32 31 39 25 32 43 32 32 30 25 32 43 32 36 30 25 32 43 32 39 38 25 32 43 33 35 35 25 32 43 33 36 39 25 32 43 33 37 35 25 32 43 34 30 32 25 32 43 35 33 35 25 32 43 35 33 37 25 32 43 35 34 31 25 35 44 25 37 44 25 37 44 25 32 43 25 32 32 62 65 6e 63 68 6d 61 72 6b 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6c 6c 65 63 74 53 74 72 75 63 74 75 72 65 25 32 32 25 33 41 39 32 25 32 43 25 32 32 69 6e 64 65 78 53 74 79 6c 65 73 25 32 32 25 33 41 32 38 31 25 37 44 25 32 43 25 32 32 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 76 69 65 77 70 6f 72 74 25 32 32 25 33 41 25 37 42 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 Data Ascii: C166%2C174%2C214%2C1117%2C218%2C219%2C220%2C260%2C298%2C355%2C369%2C375%2C402%2C535%2C537%2C541%5D%7D%7D%2C%22benchmarks%22%3A%7B%22collectStructure%22%3A92%2C%22indexStyles%22%3A281%7D%2C%22version%22%3A2%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22hei
2024-12-16 01:34:19 UTC	845	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:19 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:34:19 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=bfa2bcf1-165d-4acb-b99d-63b8b783b5d9; expires=Wed, 15 Jan 2025 01:34:19 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Wed, 15 Jan 2025 01:34:19 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:34:19 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:34:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49933	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:18 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 307 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:18 UTC	307	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 65 4a 77 74 7a 54 73 4f 77 43 41 4d 67 2b 47 37 4d 47 64 6f 73 43 48 4a 57 52 42 54 35 39 35 2f 62 58 68 73 31 69 64 5a 2f 78 69 41 57 30 6a 35 69 76 52 57 68 66 51 70 41 31 52 72 78 2b 68 70 66 52 73 4e 31 35 6a 47 62 5a 62 37 32 4a 4f 6d 32 79 4b 75 77 59 53 49 5a 61 33 43 72 79 46 74 4e 78 71 6a 53 6e 6d 58 35 52 64 64 31 42 39 52 55 4c 54 4f 2b 51 50 39 32 53 45 62 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 7a 6c 69 62 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 31 30 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 Data Ascii: {"body":"eJwtzTsOwCAMg+G7MGdosCHJWRBT595/bXhs1idZ/xiAW0j5ivRWhfQpA1Rrx+hpfRsN15jGbZb72JOm2yKuwYSIZa3CryFtNxqjSnmX5Rdd1B9RULTO+QP92SEb","chunk_number":0,"encoding":"zlib64","request_number":10,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIH
2024-12-16 01:34:18 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:34:18 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49939	35.170.168.120	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:20 UTC	540	OUT	GET /2.15.1/Snap?msn=10&pid=3877a213-43a7-43b1-8ee7-1c053d7fd12b&token=83EF8CB1-02F2-051B-A30D-93F02B18B440&_=646543 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguuid=true; rguserid=e23f00fd-fdfb-4384-b6b5-c16c0a8d4df1; rgisanonymous=true
2024-12-16 01:34:21 UTC	633	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:20 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Wed, 15 Jan 2025 01:34:20 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Wed, 15 Jan 2025 01:34:20 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 01:34:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49943	52.54.218.21	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:20 UTC	662	OUT	POST /certs/be0fc0098b1e40281d4c2056efe3862cf4da572e/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:20 UTC	211	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 7a 4e 7a 55 7a 4e 69 77 69 62 53 49 73 4e 6a 55 32 4c 44 51 31 4d 56 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 31 31 2c 22 74 6f 6b 65 6e 22 3a 22 6b 65 37 59 50 56 66 4d 72 6f 44 53 7a 56 53 30 7a 76 6f 57 31 78 75 4d 6d 67 78 47 45 47 4a 39 64 4b 45 36 6d 78 32 56 6e 6d 49 5a 62 7a 4a 41 65 47 5a 75 49 48 63 58 4d 72 49 6e 2b 50 74 55 2b 5a 66 58 31 6d 32 77 54 4d 39 6a 38 77 45 4f 4f 58 65 50 53 42 4e 34 2f 6d 4e 48 31 5a 4e 75 72 4b 65 6e 42 61 52 6f 22 7d Data Ascii: {"body":"W1szNzUzNiwibSIsNjU2LDQ1MV1d","chunk_number":0,"encoding":"base64","request_number":11,"token":"ke7YPVfMroDSzVS0zvoW1xuMmgxGEGJ9dKE6mx2VnmIZbzJAeGZuIHcXMrIn+PtU+ZfX1m2wTM9j8wEOOXePSBN4/mNH1ZNurKenBaRo"}
2024-12-16 01:34:21 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 16 Dec 2024 01:34:21 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49949	34.196.202.149	443	4408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 01:34:23 UTC	617	OUT	POST /v1/nis/hb HTTP/1.1 Host: display.ringba.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://walk-inbathtubshop.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://walk-inbathtubshop.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 01:34:23 UTC	718	OUT	Data Raw: 7b 22 49 6d 70 72 65 73 73 69 6f 6e 49 64 22 3a 22 4b 53 25 32 62 56 67 5a 64 63 34 63 36 42 56 25 32 62 5a 35 59 6a 4a 5a 67 52 65 58 25 32 66 4e 42 37 6e 66 70 4b 47 47 64 66 75 43 44 67 52 69 73 6f 4e 6c 54 78 76 4e 69 67 61 66 32 65 71 4f 6b 75 41 6a 52 62 64 25 32 62 39 38 5a 74 34 62 49 73 68 57 25 32 62 47 43 76 4c 44 6d 4f 32 51 36 53 48 4a 61 5a 43 52 78 74 31 75 73 4c 50 25 32 62 6b 47 6b 6f 5a 70 6c 77 39 4f 32 38 6e 53 35 51 25 33 64 25 33 64 22 2c 22 54 61 67 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 7d 2c 7b 22 74 79 70 65 22 3a 22 44 69 73 70 6c 61 79 22 2c 22 61 76 61 69 6c 57 69 64 Data Ascii: {"ImpressionId":"KS%2bVgZdc4c6BV%2bZ5YjJZgReX%2fNB7nfpKGGdfuCDgRisoNlTxvNigaf2eqOkuAjRbd%2b98Zt4bIshW%2bGCvLDmO2Q6SHJaZCRxt1usLP%2bkGkoZplw9O28nS5Q%3d%3d","Tags":[{"type":"Display","width":1280},{"type":"Display","height":1024},{"type":"Display","availWid
2024-12-16 01:34:23 UTC	339	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 01:34:23 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://walk-inbathtubshop.com Access-Control-Max-Age: 300 X-Runtime: 0.0030 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET

Target ID:	0
Start time:	20:32:55
Start date:	15/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:32:58
Start date:	15/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2204,i,2496441180284747030,5519861355904546482,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:33:05
Start date:	15/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450