Edit tour

Windows Analysis Report
https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8

Overview

General Information

Sample URL:	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8
Analysis ID:	1577944
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1956,i,14970668212707058074,7897732151016508089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 8035sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_79.2.dr, chromecache_107.2.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_80.2.dr, chromecache_82.2.dr, chromecache_81.2.dr, chromecache_106.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_80.2.dr, chromecache_81.2.dr	String found in binary or memory: https://js-na1.hs-scripts.com/48586112.js
Source: chromecache_79.2.dr, chromecache_107.2.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1734556200000/48586112.js
Source: chromecache_82.2.dr, chromecache_106.2.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_79.2.dr, chromecache_107.2.dr	String found in binary or memory: https://js.hs-banner.com/v2/48586112/banner.js
Source: chromecache_79.2.dr, chromecache_107.2.dr	String found in binary or memory: https://js.hscollectedforms.net/collectedforms.js
Source: chromecache_90.2.dr	String found in binary or memory: https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0
Source: chromecache_90.2.dr	String found in binary or memory: https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js
Source: chromecache_85.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_90.2.dr	String found in binary or memory: https://static.hsappstatic.net
Source: chromecache_85.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_103.2.dr, chromecache_104.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_84.2.dr, chromecache_103.2.dr, chromecache_104.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: classification engine

Classification label: mal48.win@17/74@56/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1956,i,14970668212707058074,7897732151016508089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1956,i,14970668212707058074,7897732151016508089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	0%	Avira URL Cloud	safe
https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://48586112.fs1.hubspotusercontent-na1.net/hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.18.80.204	true	false	high
js.hs-banner.com	172.64.147.16	true	false	high
static.hsappstatic.net	104.17.172.91	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
48586112.fs1.hubspotusercontent-na1.net	104.18.41.124	true	false	high
js.hs-analytics.net	104.16.160.168	true	false	high
track.hubspot.com	104.16.118.116	true	false	high
forms-na1.hsforms.com	104.19.175.188	true	false	high
js.hsforms.net	104.18.142.119	true	false	high
forms.hscollectedforms.net	104.16.108.254	true	false	high
js.hs-scripts.com	104.16.140.209	true	false	high
www.google.com	172.217.19.228	true	false	high
share.hsforms.com	104.19.175.188	true	false	high
js.hscollectedforms.net	104.16.110.254	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1	false		high
https://a.nel.cloudflare.com/report/v4?s=qFYhMTWTFA8GsQh%2B3SZbVJ8NUBT4J7aTsOhAohQImS%2FzjGHUMPQ1g%2BzdExbrQa%2FYStGl8i45l%2FQsOm1b%2BX0CDlkS%2BexwlJPCE8EYV3gOgF9%2BxFCfdUZtAdISDqfl19%2F0Ty7H	false		high
https://track.hubspot.com/__ptq.gif?k=18&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556463915&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15	false		high
https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	false		high
https://www.google.com/recaptcha/enterprise/payload?p=06AFcWeA6Kl7jAjMfZK52TrA9tzYwLQQWsdpXfC_w-aJyMaaaK2H1e0bGhSDkFYjktRS6vkH4tPST1iSb2gZ8D6eXaGx7uX1NLnW6xRzaUvLx7q64MhYh8UzdHpoId0ExJeLvgoZ87O8_vi8B-P7hhFRkjYTo5vk1AJV3Zz1i8xvT30c1jidmxHsSzEB1Rurpo5j3JOzp6IDq7&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm	false		high
https://forms.hsforms.com/embed/v3/form/48586112/211ad8aa-458a-4288-816f-380cb3350f61/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926	false		high
https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1	false		high
https://www.google.com/recaptcha/enterprise/payload?p=06AFcWeA6Qi13dSowk5ut8_juFpgs7BpbOsTln9vEaPDJqsUrnazeyGybbaF9GwZRGmy14JuVizx2NDRb2X8Sw4xCMdZ2CXzErPBStH7NAxSM_fc8hC2wcji8qnZ_72FHj8PNypRJE41DfuvoCsl5DCuvh08YFNSYP7NT-zij_TiBSzUt3h5K7t0AhErCTDL3ywP0MCcqdj-M9&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm	false		high
https://track.hubspot.com/__ptq.gif?k=17&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442990&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15	false		high
https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=48586112&utk=	false		high
https://www.google.com/js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js	false		high
https://js.hsforms.net/forms/embed/v3.js	false		high
https://js.hscollectedforms.net/collectedforms.js	false		high
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442221&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15	false		high
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1	false		high
https://js.hs-analytics.net/analytics/1734556200000/48586112.js	false		high
https://track.hubspot.com/__ptq.gif?k=15&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442940&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15	false		high
https://static.hsappstatic.net/StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png	false		high
https://48586112.fs1.hubspotusercontent-na1.net/hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm	false		high
https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm	false		high
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF	false		high
https://js.hs-scripts.com/48586112.js	false		high
https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tv	false		high
https://static.hsappstatic.net/forms-submission-pages/static-1.5536/bundles/share-legacy.js	false		high
https://js.hs-banner.com/v2/48586112/banner.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://js-na1.hs-scripts.com/48586112.js	chromecache_80.2.dr, chromecache_81.2.dr	false	high
http://www.hubspot.com	chromecache_80.2.dr, chromecache_82.2.dr, chromecache_81.2.dr, chromecache_106.2.dr	false	high
https://www.google.com/recaptcha/enterprise/	chromecache_103.2.dr, chromecache_104.2.dr	false	high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://static.hsappstatic.net	chromecache_90.2.dr	false	high
https://support.google.com/recaptcha#6262736	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://js.hs-banner.com/v2	chromecache_82.2.dr, chromecache_106.2.dr	false	high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://cloud.google.com/contact	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js	chromecache_90.2.dr	false	high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://play.google.com/log?format=json&hasfast=true	chromecache_85.2.dr	false	high
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
http://hubs.ly/H0702_H0	chromecache_79.2.dr, chromecache_107.2.dr	false	high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://support.google.com/recaptcha/#6175971	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0	chromecache_90.2.dr	false	high
https://www.google.com/recaptcha/api2/	chromecache_98.2.dr, chromecache_116.2.dr, chromecache_85.2.dr	false	high
https://support.google.com/recaptcha	chromecache_85.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.80.204	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.140.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	forms-na1.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.108.254	forms.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
104.16.110.254	js.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
142.250.181.132	unknown	United States	15169	GOOGLEUS	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.17.175.201	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.64.147.16	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.17.172.91	static.hsappstatic.net	United States	13335	CLOUDFLARENETUS	false
104.16.160.168	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
104.18.41.124	48586112.fs1.hubspotusercontent-na1.net	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577944
Start date and time:	2024-12-18 22:12:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@17/74@56/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.162.84, 172.217.17.46, 23.193.114.18, 172.217.17.67, 172.217.19.202, 142.250.181.42, 142.250.181.74, 172.217.17.74, 172.217.17.42, 172.217.21.42, 172.217.19.234, 142.250.181.106, 172.217.19.170, 142.250.181.10, 142.250.181.138, 192.229.221.95, 142.250.181.142, 172.217.17.35, 92.122.16.236, 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8

Input	Output
URL: https://share.hsforms.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://share.hsforms.com
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have One New Shared Document", "prominent_button_name": "View / Download (pdf, 131 kb)", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have One New Shared Document", "prominent_button_name": "View / Download (pdf, 131.kb)", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": [ "TSS", "Cornerstone Commissioning", "Evergreen" ] }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have One New Shared Document", "prominent_button_name": "View / Download (pdf: 131.kb)", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": [ "TSS", "Cornerstone Commissioning", "Evergreen" ] }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have One New Shared Document", "prominent_button_name": "View / Download (pdf: 131 kb)", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": [ "TSS", "Cornerstone Commissioning", "Evergreen" ] }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	```json{ "legit_domain": "hubspot.com", "classification": "known", "reasons": [ "The URL 'share.hsforms.com' is a subdomain of 'hsforms.com', which is associated with HubSpot, a known marketing and sales platform.", "The brand 'TSS' is not directly associated with a well-known domain, making it difficult to verify its legitimacy based on the brand alone.", "The domain 'hsforms.com' is a legitimate domain used by HubSpot for form sharing and integration.", "There are no obvious misspellings or suspicious elements in the URL itself.", "The presence of 'share' as a subdomain is consistent with HubSpot's service offerings." ], "riskscore": 3}
URL: share.hsforms.com Brands: TSS Input Fields: unknown
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have One New Shared Document", "prominent_button_name": "View / Download (pdf: 131 kb)", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": [ "TSS", "Cornerstone Commissioning", "Evergreen" ] }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	```json{ "legit_domain": "hubspot.com", "classification": "known", "reasons": [ "The URL 'share.hsforms.com' is a subdomain of 'hsforms.com', which is associated with HubSpot, a known marketing and sales platform.", "The brand 'TSS' is not directly associated with a well-known domain, but it could be a client using HubSpot's services.", "The domain 'hsforms.com' is a legitimate domain used by HubSpot for form sharing and integration.", "No suspicious elements such as misspellings or unusual domain extensions were found in the URL." ], "riskscore": 3}
URL: share.hsforms.com Brands: TSS Input Fields: unknown
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Select all squares with motorcycles", "prominent_button_name": "SKIP", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": [ "TSS" ] }
	{ "brands": [ "TSS" ] }
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Select all squares with motorcycles", "prominent_button_name": "SKIP", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	```json{ "legit_domain": "hubspot.com", "classification": "known", "reasons": [ "The URL 'share.hsforms.com' is a subdomain of 'hsforms.com', which is associated with HubSpot, a known marketing and sales platform.", "The brand 'TSS' is not directly associated with a well-known domain, making it difficult to verify its legitimacy based on the brand alone.", "The domain 'hsforms.com' is a legitimate domain used by HubSpot for form sharing and integration.", "There are no obvious misspellings or suspicious elements in the URL structure.", "The use of a subdomain 'share' is typical for service providers like HubSpot to offer specific functionalities." ], "riskscore": 3}
URL: share.hsforms.com Brands: TSS Input Fields: unknown
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	{ "brands": [ "TSS" ] }
	{ "brands": [ "TSS" ] }
URL: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8 Model: Joe Sandbox AI	```json{ "legit_domain": "hubspot.com", "classification": "known", "reasons": [ "The URL 'share.hsforms.com' is a subdomain of 'hsforms.com', which is associated with HubSpot, a known marketing and sales platform.", "The brand 'TSS' is not directly associated with HubSpot, but HubSpot allows users to create forms and share them, which could explain the use of 'hsforms.com'.", "The URL does not contain any suspicious elements such as misspellings or unusual domain extensions.", "The domain 'hsforms.com' is a legitimate domain used by HubSpot for form sharing, which aligns with the URL structure." ], "riskscore": 3}
URL: share.hsforms.com Brands: TSS Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	29320
Entropy (8bit):	7.9716380668789855
Encrypted:	false
SSDEEP:	768:aB3AuSoG1SPj4QHSbFaAYT9DcqTlYbcki+XgNpS91D2/:a3SoG1SP0QHoVY9cS+bc1G8YW/
MD5:	B906558C3E801CCFFF1C33AE5339B069
SHA1:	C67E69B8EF6F30252D4C72849870B9A5B82F7319
SHA-256:	40F2D00DBA7B30DD4C318726737C47177FB1D204FC2526E5304115394E02F9F7
SHA-512:	F08450F3E87A8DA54CA74E9ED9C751DEA21684C3056D5DDBBCF02B38C0459F40D2D6D1FA0541E2EEC11283C7490D02662048AF250BE6BDA1EBFFD57256D70695
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/payload?p=06AFcWeA6Kl7jAjMfZK52TrA9tzYwLQQWsdpXfC_w-aJyMaaaK2H1e0bGhSDkFYjktRS6vkH4tPST1iSb2gZ8D6eXaGx7uX1NLnW6xRzaUvLx7q64MhYh8UzdHpoId0ExJeLvgoZ87O8_vi8B-P7hhFRkjYTo5vk1AJV3Zz1i8xvT30c1jidmxHsSzEB1Rurpo5j3JOzp6IDq7&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......6...[..,.r.........k.`[.{+..C....2?O.5<.j<N..n .+y.$..O_...V^.em......zG.Y...F+.d..xK...m/...tV#j\.=...5.t...<.bQ.......q......lGv...........x.+......-.w..vW...E+.H..j..F.m..9.7.>P...?t.kN..1[.2..nS.[=....o!x..9.s.....}.....'.Z(?t...):R.`iMy...<....:r.R..,.z.$..C......T......:....9...u.....i!~]zg........;[.q....<$..}....>!..O^..y.)rh....{.j.8'

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3067)
Category:	downloaded
Size (bytes):	3178
Entropy (8bit):	5.447793401080666
Encrypted:	false
SSDEEP:	48:os4YJBSgKXmjtGPQQMFFfJMgHgQpvLBsyowXk41mueQakHmX7ZWXbFYrme:osrBSgK2jhFRMgAQB+8UY1mXVWXbFYr7
MD5:	1E93B7FC6774B145A478BDBB6C9B7C5C
SHA1:	C3BAE7BCDD10C53EA2ECECD45ABFB6F5B70B278E
SHA-256:	5EF55A214947F310DADACE346E877E598BEEE8B6BE0C39B5E0EF8130CDEF1533
SHA-512:	0B02127C77D0849EE0776CA22758F6309B376384C3023C065F3B128DBA64D01A8C92150D4A427C54B28EADCCBACFFC78744AC924505CB32ED94B12A4238BA0F5
Malicious:	false
Reputation:	low
URL:	https://static.hsappstatic.net/forms-submission-pages/static-1.5536/bundles/share-legacy.js
Preview:	!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n={})=>{const o=Object.assign({hublet:"",isQA:!1},n),e=o.isQA?"qa":"prod";return`https://${i(r)}${s(o.hublet)}.${c(t,e)}`},l=1,d="-",f=[...Array(256)].map(((t,r)=>(r+256).toString(16).substr(1))),h=/\/([a-z0-9-_]+)([?#].*\|\/)?$/i,p=/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,w=[["+","-"],["/","_"]],m=(t,r)=>{let n=r\|\|0;return[f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]]].join("")},g=t=>{const r=[];t.replace(/[a-fA-F0-9]{2}/g,(t=>{r.push(parseInt(t,16))}));return r},b=t=>{const r=new Uint8Array(t);return window.btoa([...Array(r.byteLength)].reduce(((t,n,o)=>t+String.fromCharCode(r[o])),""))},y=t=

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1623), with no line terminators
Category:	dropped
Size (bytes):	1623
Entropy (8bit):	5.742718747392281
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZJlyR+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1IV:iEcpXKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	5865F2043C362DAF4A27CC6208B62058
SHA1:	F97865B4760C7D6AB56760A210324CA8140B1A66
SHA-256:	3C1DDFEB91280B346C64EDE2508E6FFA8E00FCF47434D7500F06D20B8A20E8D1
SHA-512:	B8D549EF2C71DDB1A79B5B4265F47FD2B4DDDBB3E49E2492BED4F13AC8063C92A6786BBB4024B04E2E02260F29CE21B965844C8CE4F10D66A34A9C4A5EEDDF07
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1R

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1623), with no line terminators
Category:	downloaded
Size (bytes):	1623
Entropy (8bit):	5.742718747392281
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZJlyR+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1IV:iEcpXKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	5865F2043C362DAF4A27CC6208B62058
SHA1:	F97865B4760C7D6AB56760A210324CA8140B1A66
SHA-256:	3C1DDFEB91280B346C64EDE2508E6FFA8E00FCF47434D7500F06D20B8A20E8D1
SHA-512:	B8D549EF2C71DDB1A79B5B4265F47FD2B4DDDBB3E49E2492BED4F13AC8063C92A6786BBB4024B04E2E02260F29CE21B965844C8CE4F10D66A34A9C4A5EEDDF07
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378&render=explicit&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1R

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	34087
Entropy (8bit):	7.961433033738087
Encrypted:	false
SSDEEP:	768:eSzFPiQQilDEbrOKIv0NHHi2OOJsvzdSZM/ZMdKxm+QhNekMx:ecpip8DEX48NiYJwRVBMdKxmdgkQ
MD5:	0A1006CBF6EB2AF7772290CE6186B342
SHA1:	859EC515E8283D36C4CBA7B143ECFDCB59F84D8F
SHA-256:	2EED851B5116FC63ED68383DF74E539A5E5E1D85035076D9E6838046747AFB85
SHA-512:	6E7B3AB9DDFB469B7DC6FA247F881413651493CA19C420AAAD13350EEBB286055F953E441E9A64B7CCFDFF2779F5DEDA1A02563EC218BBC321E28A8F884F9625
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...,...Bi<.....V.C...{.Sek....Cd....J..WR.L....r7...].Y....?SH..Ys.4...............6p....8..B(.45.....,.6...r....[.a.?\u.!..V.....h.D..Q..Q.....?F.5o.o..K...Q.3.$,'e'?v..k.> .v.Y.....;`...C..w.v...=i.q..8......;..D<.:x.s...0=s.kj..1..D....0.......u.....K.N..g.S5NM...Q.S..U.q..==......A....W.[>\|...w..P.....s....mQa....Q...<....l..Y.,..c.Fz.@3.V..;[.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64992)
Category:	dropped
Size (bytes):	72792
Entropy (8bit):	5.410489992794695
Encrypted:	false
SSDEEP:	1536:zyLbfbg0N17URA3m5viI+MUdl7Jbx1UNA08vnTEjU18EOTQBs2CgTBQK:0I+MAl9b7UiTrm7T7E
MD5:	41CD614699EE100DD9EC05430200317F
SHA1:	5B50D46016C464D101E2AABE52BDED68C0B2E4B8
SHA-256:	AFEFFFB11D750E67A63F87103CF863CE7B12C7437640AA23FEFFC64F6D50FB76
SHA-512:	320466C1B9F0FB3625598A75618267556A04537BE671A2866FC55CAD1855E0F411B243B21556BAF61AB137003D02C75A3920F84730CDBA9E14902A7680776766
Malicious:	false
Reputation:	low
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.magnolia-career.us']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};this.config={};this.config.elements=t.elements?t.elements:[];this.config.attributes=t.attributes?t.attributes:{};this.config.attributes[o.ALL]=this.config.attributes[o.ALL]?this.config.attributes[o.ALL]:[];this.config.allow_comments=!!t.allow_comments&&t.allow_comments;this.allowed_elements={};this.config.protocols=t.protocols?t.protocols:{};this.config.add_attributes=t.add

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	1557
Entropy (8bit):	5.27875792654653
Encrypted:	false
SSDEEP:	48:4QqumpcdfwmpvYWt0kpwF73VxYkpwjy05PVI:dRUcdIIvpjeF73BeBF2
MD5:	3DB7BD10C4210F66AAB2D4E864DD1E85
SHA1:	94BB744131FF3554284A8F8F5813CF24D3B5A3ED
SHA-256:	FA174BFCB4B90B8EC9055FD1E42E8DFACBD75B3AB6F776C34EFF06FBB13A4447
SHA-512:	AC408F4717A19BF316C266A12708726D91297DA879F563D292CFB0B0914D8B3ABEC4985CDB30B3CE062AEC6FBD0BBA507BF34DA8F01E54B5F586751639DFFB46
Malicious:	false
Reputation:	low
URL:	https://js.hs-scripts.com/48586112.js
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734556200000/48586112.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.var _hsp = window._hsp = window._hsp \|\| [];._hsp.push(['addEnabledFeatureGates', []]);._hsp.push(['setBusinessUnitId', 0]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/48586112/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-48586112",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48586112,"data-hsjs-env":"prod","data-hsjs-hu

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	dropped
Size (bytes):	71705
Entropy (8bit):	5.3803254597526715
Encrypted:	false
SSDEEP:	1536:ZQD6TmRVRZhsrpscTKbsveXl7sWYqPMaM:Z/TKZhiKov9WHMaM
MD5:	CEB8BCB73E5536D8416735A3977D227A
SHA1:	D9521B15CDD170608C504250516F35BACF1C8E55
SHA-256:	1764BC84EA6ABE91F1634B73A5A6C0EBFF400461DFEA6A4040BD0C03D86CAA8B
SHA-512:	70A0A1C2912199F5B2DA890B3F29474462F391D794D86DD29A5C62106E89C23C51B9836FF6BE0A2271C30B003C959ED3D9075AEA95AB00FDD6EAF4059631D753
Malicious:	false
Reputation:	low
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},d=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},f=function(t){try{return!!t()}catch(t){return!0}},h=!f((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3067)
Category:	dropped
Size (bytes):	3178
Entropy (8bit):	5.447793401080666
Encrypted:	false
SSDEEP:	48:os4YJBSgKXmjtGPQQMFFfJMgHgQpvLBsyowXk41mueQakHmX7ZWXbFYrme:osrBSgK2jhFRMgAQB+8UY1mXVWXbFYr7
MD5:	1E93B7FC6774B145A478BDBB6C9B7C5C
SHA1:	C3BAE7BCDD10C53EA2ECECD45ABFB6F5B70B278E
SHA-256:	5EF55A214947F310DADACE346E877E598BEEE8B6BE0C39B5E0EF8130CDEF1533
SHA-512:	0B02127C77D0849EE0776CA22758F6309B376384C3023C065F3B128DBA64D01A8C92150D4A427C54B28EADCCBACFFC78744AC924505CB32ED94B12A4238BA0F5
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n={})=>{const o=Object.assign({hublet:"",isQA:!1},n),e=o.isQA?"qa":"prod";return`https://${i(r)}${s(o.hublet)}.${c(t,e)}`},l=1,d="-",f=[...Array(256)].map(((t,r)=>(r+256).toString(16).substr(1))),h=/\/([a-z0-9-_]+)([?#].*\|\/)?$/i,p=/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,w=[["+","-"],["/","_"]],m=(t,r)=>{let n=r\|\|0;return[f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]]].join("")},g=t=>{const r=[];t.replace(/[a-fA-F0-9]{2}/g,(t=>{r.push(parseInt(t,16))}));return r},b=t=>{const r=new Uint8Array(t);return window.btoa([...Array(r.byteLength)].reduce(((t,n,o)=>t+String.fromCharCode(r[o])),""))},y=t=

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	29320
Entropy (8bit):	7.9716380668789855
Encrypted:	false
SSDEEP:	768:aB3AuSoG1SPj4QHSbFaAYT9DcqTlYbcki+XgNpS91D2/:a3SoG1SP0QHoVY9cS+bc1G8YW/
MD5:	B906558C3E801CCFFF1C33AE5339B069
SHA1:	C67E69B8EF6F30252D4C72849870B9A5B82F7319
SHA-256:	40F2D00DBA7B30DD4C318726737C47177FB1D204FC2526E5304115394E02F9F7
SHA-512:	F08450F3E87A8DA54CA74E9ED9C751DEA21684C3056D5DDBBCF02B38C0459F40D2D6D1FA0541E2EEC11283C7490D02662048AF250BE6BDA1EBFFD57256D70695
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......6...[..,.r.........k.`[.{+..C....2?O.5<.j<N..n .+y.$..O_...V^.em......zG.Y...F+.d..xK...m/...tV#j\.=...5.t...<.bQ.......q......lGv...........x.+......-.w..vW...E+.H..j..F.m..9.7.>P...?t.kN..1[.2..nS.[=....o!x..9.s.....}.....'.Z(?t...):R.`iMy...<....:r.R..,.z.$..C......T......:....9...u.....i!~]zg........;[.q....<$..}....>!..O^..y.)rh....{.j.8'

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	487057
Entropy (8bit):	5.79107882286738
Encrypted:	false
SSDEEP:	6144:VSD7rP1dmHpLXCXb5xehhHrAeOd4Bwq0j6pwU8Vz0/JaQPLZ8UBjkutP:gdfb5xwMeOd4Bwqq6K72P
MD5:	9045150EA546201948CA19EE2F5BFD0B
SHA1:	A218DAA2E7CAE836071B134989B66BD001CE0D57
SHA-256:	234DC5F553ED630589520604C5725A664F4D2873BB8D6E7544538370036287C2
SHA-512:	393BD892C2F01FC82579954795EB0B69E7DA34FC1A43DA8078532A0377B09008119AB05952DE298FCEA4EE782E1974CB1D7ABDE0A2D2C1142CDA8C109B7F3961
Malicious:	false
Reputation:	low
URL:	https://js.hsforms.net/forms/embed/v3.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.6926/";n(n.s="CEb6")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	487057
Entropy (8bit):	5.79107882286738
Encrypted:	false
SSDEEP:	6144:VSD7rP1dmHpLXCXb5xehhHrAeOd4Bwq0j6pwU8Vz0/JaQPLZ8UBjkutP:gdfb5xwMeOd4Bwqq6K72P
MD5:	9045150EA546201948CA19EE2F5BFD0B
SHA1:	A218DAA2E7CAE836071B134989B66BD001CE0D57
SHA-256:	234DC5F553ED630589520604C5725A664F4D2873BB8D6E7544538370036287C2
SHA-512:	393BD892C2F01FC82579954795EB0B69E7DA34FC1A43DA8078532A0377B09008119AB05952DE298FCEA4EE782E1974CB1D7ABDE0A2D2C1142CDA8C109B7F3961
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.6926/";n(n.s="CEb6")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.898176422446195
Encrypted:	false
SSDEEP:	3:YVKBEiFIWQHIMRL2KIhfwcP2xR2GXEqRWJ6jLZHJqLOSSZ:YiLIXHxbU2mn6jLZp4SZ
MD5:	7601C0A95BD907ADFBB7425DAF92A38D
SHA1:	7ADAE57774EB1D125AEA3782085642185FA4A5E6
SHA-256:	3DD27B9B8486B1866D9E9CDE14F5E48A3624F8A3DA7DD4A3B9DB3CCB315EF4AD
SHA-512:	4DA5126C8DED87ECFC6D3B0BA092B072DCD87FDF3CFFFCA3BB9ADDD18B5F7506D22B9CFBE3F67410C136EFEF51AF8EDE97C7687551D6E91C777F647C2CDD8B94
Malicious:	false
Reputation:	low
URL:	https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=48586112&utk=
Preview:	{"portalId":48586112,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-1361127710}

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	34087
Entropy (8bit):	7.961433033738087
Encrypted:	false
SSDEEP:	768:eSzFPiQQilDEbrOKIv0NHHi2OOJsvzdSZM/ZMdKxm+QhNekMx:ecpip8DEX48NiYJwRVBMdKxmdgkQ
MD5:	0A1006CBF6EB2AF7772290CE6186B342
SHA1:	859EC515E8283D36C4CBA7B143ECFDCB59F84D8F
SHA-256:	2EED851B5116FC63ED68383DF74E539A5E5E1D85035076D9E6838046747AFB85
SHA-512:	6E7B3AB9DDFB469B7DC6FA247F881413651493CA19C420AAAD13350EEBB286055F953E441E9A64B7CCFDFF2779F5DEDA1A02563EC218BBC321E28A8F884F9625
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/payload?p=06AFcWeA6Qi13dSowk5ut8_juFpgs7BpbOsTln9vEaPDJqsUrnazeyGybbaF9GwZRGmy14JuVizx2NDRb2X8Sw4xCMdZ2CXzErPBStH7NAxSM_fc8hC2wcji8qnZ_72FHj8PNypRJE41DfuvoCsl5DCuvh08YFNSYP7NT-zij_TiBSzUt3h5K7t0AhErCTDL3ywP0MCcqdj-M9&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...,...Bi<.....V.C...{.Sek....Cd....J..WR.L....r7...].Y....?SH..Ys.4...............6p....8..B(.45.....,.6...r....[.a.?\u.!..V.....h.D..Q..Q.....?F.5o.o..K...Q.3.$,'e'?v..k.> .v.Y.....;`...C..w.v...=i.q..8......;..D<.:x.s...0=s.kj..1..D....0.......u.....K.N..g.S5NM...Q.S..U.q..==......A....W.[>\|...w..P.....s....mQa....Q...<....l..Y.,..c.Fz.@3.V..;[.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	downloaded
Size (bytes):	71705
Entropy (8bit):	5.3803254597526715
Encrypted:	false
SSDEEP:	1536:ZQD6TmRVRZhsrpscTKbsveXl7sWYqPMaM:Z/TKZhiKov9WHMaM
MD5:	CEB8BCB73E5536D8416735A3977D227A
SHA1:	D9521B15CDD170608C504250516F35BACF1C8E55
SHA-256:	1764BC84EA6ABE91F1634B73A5A6C0EBFF400461DFEA6A4040BD0C03D86CAA8B
SHA-512:	70A0A1C2912199F5B2DA890B3F29474462F391D794D86DD29A5C62106E89C23C51B9836FF6BE0A2271C30B003C959ED3D9075AEA95AB00FDD6EAF4059631D753
Malicious:	false
Reputation:	low
URL:	https://js.hscollectedforms.net/collectedforms.js
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},d=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},f=function(t){try{return!!t()}catch(t){return!0}},h=!f((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	158242
Entropy (8bit):	7.994417029090759
Encrypted:	true
SSDEEP:	3072:X0GwGiWJ9kYCjqb9Ev1emrDAQac9zG64xjaI7WNer943utyn+/fjX0bG7:EGwSJ9krC8smXV9zGXyeJ43utyn+Q67
MD5:	A4DC277CDBF497EA947EB23E44C7CF14
SHA1:	EF9F3DBFABB6C65B9B2C7DD70F55FACF0AB7A5D7
SHA-256:	1CB64A9BC1AC90853DD06002EA1D9EDD220A2FB7839D0D3D94AF0AE05F3CDECE
SHA-512:	93426F9506A5707294FFEA68CA069F9AE4B0C46B751D8AE9C1691E58785B9B6D3CECC9583403724D96FB5304E3F49305A00DD1BFE836A523097BB83F13979AA1
Malicious:	false
Reputation:	low
URL:	https://48586112.fs1.hubspotusercontent-na1.net/hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png
Preview:	RIFF.j..WEBPVP8L.j../WI...@.$I.d.;{................8.U..S.j9.#...._a......U...u]..G6U...2+...i.t..I32E[.....ksy.VB......8....s..2.TS...]u..f...37p.Ir$.......Ol......g.k.Uko...u......#......$E.$I..........>v..........gZC...8#W..h...]..$E....L...W.....d.....7}.Ht...We..2....M.....`........._.4...g.\.T...7%.ob.V..v.pf...Q...6.H....Z...e..~J.9.a....W...M.(.<.X..Sy.nb....R...F..&3.!..gg6.J7;e..]q..m...`.n...aN.5M.@...2j.6YF...".&S.qd..O.PJ....N.r..q]X..x.9...M...VM.&]..IW..h..BWXK.............UaU..]G..z......V..Rl......3}d..L..$YQ...t..}.o...).f02.2C.L.tB.0....R.<.....t..m#I.......9.-"&..d...+.4....k.=Ls...\|pz...!M.v.vAE.W3i..I.I.9.....+..o+....^..W...^r....mS.....5.......L73333.....3.f^.....t.eK..um.mMuW.H.].x.5.B~.}R$.....= 92.....33....<..;..!..5...y4..:+1"..Y...t?...l..jff...Y...y..!Ua[...oH.d.m....M..h..,n3...W&....9..s53.-.-.2...233.$...?.,..2...L.8&..Z.3u.....s...:..j;.......q.'.e.Vm[.......7.....i0...k>2:.....K...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	450
Entropy (8bit):	7.495986319404223
Encrypted:	false
SSDEEP:	12:Ca326KFesjKanqSI736KWoOFs2fty/X3hoBaWl:926KllqvnX21y/X3hoB/
MD5:	F48562D7736106E64B3BDEA0A64F67C8
SHA1:	2C82B9A308F0F6B1F0F71DB307367E485645406D
SHA-256:	440209CE5CFBEE5E475E344453B01A92E10FDB34A536E32E8895A766EC1B4E69
SHA-512:	57E665DE3E2362B6C3BE5A6D05EFC4368AB5DA6C899A3BBD5CE10A82DC87DF86993D2D706E49722CE867891E9A063F187E7267D4D7DC3617059FBD26A4D2A6FA
Malicious:	false
Reputation:	low
URL:	https://static.hsappstatic.net/StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png
Preview:	RIFF....WEBPVP8L..../.......$)...._.tg.<c>3.......f....l.L~..'.m&...m.Ft..3w.... ..~..W-...}B..B..c-..n@.....}T~8-...Z..o...0.?...[....x.HI..X.]}7...N......./....G.?_......c5X..g.....c..@.t...?.)....G.r^.g^z...z........n.O..;2[....6.=.-.Xj..IK.C..\.(.H. 2.R..6..NJB.y.X..?_l.......}S...,...8...............C.ui..P\Mu...2.....s..wQ..f.{..q.V..,fH.....>..M..r...j.c.A....Y*.D.......?..O........4...J..>...TDh.......g.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	13098
Entropy (8bit):	7.9662320028475095
Encrypted:	false
SSDEEP:	384:heH1eDndoIdwPQnsGqw6MiX7iERM3bEjnuMUh1cy7a:amdoIqPQsGXwOE23b+nuMUcyW
MD5:	7544C38CB6668D3E19ACE8189F70176B
SHA1:	F40E056D36FC320AA5042EA18A8B7ACB763AAF68
SHA-256:	9D760244CFF138C1B28B592766F9D28505E39085822FA656BA6E3FC9B7524E77
SHA-512:	042BB73BC7A79B9C3C688EED8740D59632C721289947CD23C17221916C9C0E0E6F1A23F8923449A2AD46BFA16B955E76943D4460DEC20F1A8D5089019278C0FC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d...........2.IDATx.....C.uE..F.f...03....1..U.q......G.._D`..Aa..<b0..0o.j.-.....c...w7Cb...F.h>.>.0n..s.U..P..}...9........s.S.j.s<.b...gZ..T1.+...lP?............^R...@.~.....GU.T.....@y.u:....V...G.R.-J}._}.....Q.(TU.^.TD.?...ee.?B.A`.M.......S...#>~."U......{.TO.m.f.X........Tw...o...+W............x.Cz..$..._)....+T......^..i.....{QU.R....S .NWQ"..Uu.~xR.\..;.....BuT......#.%..`.3..SVE..^^DK../~/..Q)V.".E..S.(UET.UUW.=.x..P.....E....;.JE........[Q...u.Ue2.z..o.~......U...T...(..T...B)..(..J....@.QU....J.BU.(I....S.R.x..o.A..;..T.PU.".`.R.)R.....UQW...\|.......R.H..R;.....{a.....x..z....j......w....O.P.._vo.J.....;.J...L........5.l_..Q.'.U.b`....G....n.\ L.\..9.&jc....K>6Tm.........@UJ.....R... U.TT........V.u.U).R..Z...'XUX.J)=.J.RVC.=._..?HKU......EA.WjHYM-.+J..Q..g#.v..:E.;..t+....JI@.j...+.].h...../..[.1.b..Km.6....4 ..D...e....P.Y.^.m.B9..IVf..?.=.33s...]..13.....Z.B.v.j..JU..R.\|W.@.....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	706
Entropy (8bit):	7.407997267822657
Encrypted:	false
SSDEEP:	12:6v/7iwUdid0ubtKPwr8PhE5Xw5fd+l4JAjdy13PK2jDRnb2l4zx7zHbgnehzCmXc:nodHbIPexXw5fd+qJGR2jDRnbD9grmXc
MD5:	5868D13D177C12806699FD45E2EADD44
SHA1:	4554F11A4402C13E0B56A3036FD84F14EE1787CD
SHA-256:	69C2681C4ABB204C8961B8E7A1055591C1F5393F620B6F32C22213656641E498
SHA-512:	07BE9984432B627540FA809AB3DE8D54C11791D5CF8DE3A051829102B30704C7D13FD4A7AA917D93CE6D18BCEEBA9042F837059C64A0856BED073408F3D34D38
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...MIDATx...;hSQ....4m$.5J.....c..P..)........V'A.dq..).H'.V..C......4".V.t.8(J.R.........&7W.........%......O....)...........!.1.;..sX.....<A.)..m>._.M.i....Q..h..8...L.....,......!.S8..K..h.8...t......!.E?Z]...k.7.6..1.8.....F....R..M&>......kt._....y.....q._ ..>...P@.....$.?q....8N...s.D.a.A.".2....lT .?..v.!..". .B\..2.".Kp..O....!........D)c..D....u......w.r.m....g.2....=..p.F].. J..... .<.uj/;.!.&..Q..?]...q..G...;0.Q.".H]._!.-4...7.'\|.....zP.(%....}pN.o.1."Ds.QS...;m...WH..~a$ak..<^.7.a......r..Q........F1.s...o..D3..u~..M....C4.X.3..O3e...... r..........r..%.`<.q......IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18288)
Category:	downloaded
Size (bytes):	18908
Entropy (8bit):	5.6255223057698815
Encrypted:	false
SSDEEP:	384:dVtfxzksuna6B3+9A/CY3DCcdye4PCwEnaeXsLRKyuHX/5:VKRai5HPIeaeX1yM
MD5:	0240AA22895CF57CB91160E784542720
SHA1:	F50652CCC59E7556511178A2A6BF92407D2E0955
SHA-256:	5DEEC06E184F7D97048A4A0D9A182105700484EBAC0C804A58A4BFAE84B843B1
SHA-512:	C4CADEB4398EB472EEF4989627E74C8CC9A80A1045F2C01E3DCFA63D20B52901223F90AB0A0F6F13833F627A0A5C4BBDDEB86CA9F4A2972654F881B2DF4B1879
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(e){B.console&&B.console.error(e.message)}return b},B=this\|\|self;(0,eval)(function(p,b){return(b=G())&&p.eval(b.createScript("1"))===1?function(e){return b.createScript(e)}:function(e){return""+e}}(B)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var H=function(p,b){for(b=[];p--;)b.push(Math.random()*255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void 0,!!b)),p)[1],U=p[0],{invoke:function(v,W,E,e){function G(){Y(function(X){bb(function(){v(X)})},E)}if(!W)return W=U(E),v&&v(W),W;Y?G():(e=r,r=function(){bb((e(),G))})

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	dropped
Size (bytes):	1557
Entropy (8bit):	5.27875792654653
Encrypted:	false
SSDEEP:	48:4QqumpcdfwmpvYWt0kpwF73VxYkpwjy05PVI:dRUcdIIvpjeF73BeBF2
MD5:	3DB7BD10C4210F66AAB2D4E864DD1E85
SHA1:	94BB744131FF3554284A8F8F5813CF24D3B5A3ED
SHA-256:	FA174BFCB4B90B8EC9055FD1E42E8DFACBD75B3AB6F776C34EFF06FBB13A4447
SHA-512:	AC408F4717A19BF316C266A12708726D91297DA879F563D292CFB0B0914D8B3ABEC4985CDB30B3CE062AEC6FBD0BBA507BF34DA8F01E54B5F586751639DFFB46
Malicious:	false
Reputation:	low
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734556200000/48586112.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.var _hsp = window._hsp = window._hsp \|\| [];._hsp.push(['addEnabledFeatureGates', []]);._hsp.push(['setBusinessUnitId', 0]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/48586112/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-48586112",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48586112,"data-hsjs-env":"prod","data-hsjs-hu

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64694)
Category:	dropped
Size (bytes):	69953
Entropy (8bit):	5.298396097944983
Encrypted:	false
SSDEEP:	1536:cC9kTUaEAJZVonZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkL:AND2LlzlIgQX28XsYce
MD5:	A583E36B465B64DEADD18075D1BFC8E8
SHA1:	24FE860FA49255E7D1B4FBBB1F81B90D94D14268
SHA-256:	D7D8646029EAE671E7857BEF10DA8182907BFCF0E326FB03D0A33FBF4BF91CA3
SHA-512:	1B2515CF94707E92DFD1AEDE2E98A061B1B9F165253BD2EF0EEBD982CFDF21048FE430D411FF4FD1CF6A0ADB7B2572E8B8FE4C90EF14D20668233DC2A7F50A07
Malicious:	false
Reputation:	low
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.1194. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 48586112]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '239437660']);._hsq.push(['enableAutomaticLinker', true]);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48586112.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googlewebl

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64694)
Category:	downloaded
Size (bytes):	69953
Entropy (8bit):	5.298396097944983
Encrypted:	false
SSDEEP:	1536:cC9kTUaEAJZVonZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkL:AND2LlzlIgQX28XsYce
MD5:	A583E36B465B64DEADD18075D1BFC8E8
SHA1:	24FE860FA49255E7D1B4FBBB1F81B90D94D14268
SHA-256:	D7D8646029EAE671E7857BEF10DA8182907BFCF0E326FB03D0A33FBF4BF91CA3
SHA-512:	1B2515CF94707E92DFD1AEDE2E98A061B1B9F165253BD2EF0EEBD982CFDF21048FE430D411FF4FD1CF6A0ADB7B2572E8B8FE4C90EF14D20668233DC2A7F50A07
Malicious:	false
Reputation:	low
URL:	https://js.hs-analytics.net/analytics/1734556200000/48586112.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.1194. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 48586112]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '239437660']);._hsq.push(['enableAutomaticLinker', true]);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48586112.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googlewebl

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64992)
Category:	downloaded
Size (bytes):	72792
Entropy (8bit):	5.410489992794695
Encrypted:	false
SSDEEP:	1536:zyLbfbg0N17URA3m5viI+MUdl7Jbx1UNA08vnTEjU18EOTQBs2CgTBQK:0I+MAl9b7UiTrm7T7E
MD5:	41CD614699EE100DD9EC05430200317F
SHA1:	5B50D46016C464D101E2AABE52BDED68C0B2E4B8
SHA-256:	AFEFFFB11D750E67A63F87103CF863CE7B12C7437640AA23FEFFC64F6D50FB76
SHA-512:	320466C1B9F0FB3625598A75618267556A04537BE671A2866FC55CAD1855E0F411B243B21556BAF61AB137003D02C75A3920F84730CDBA9E14902A7680776766
Malicious:	false
Reputation:	low
URL:	https://js.hs-banner.com/v2/48586112/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.magnolia-career.us']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};this.config={};this.config.elements=t.elements?t.elements:[];this.config.attributes=t.attributes?t.attributes:{};this.config.attributes[o.ALL]=this.config.attributes[o.ALL]?this.config.attributes[o.ALL]:[];this.config.allow_comments=!!t.allow_comments&&t.allow_comments;this.allowed_elements={};this.config.protocols=t.protocols?t.protocols:{};this.config.add_attributes=t.add

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18288)
Category:	dropped
Size (bytes):	18908
Entropy (8bit):	5.6255223057698815
Encrypted:	false
SSDEEP:	384:dVtfxzksuna6B3+9A/CY3DCcdye4PCwEnaeXsLRKyuHX/5:VKRai5HPIeaeX1yM
MD5:	0240AA22895CF57CB91160E784542720
SHA1:	F50652CCC59E7556511178A2A6BF92407D2E0955
SHA-256:	5DEEC06E184F7D97048A4A0D9A182105700484EBAC0C804A58A4BFAE84B843B1
SHA-512:	C4CADEB4398EB472EEF4989627E74C8CC9A80A1045F2C01E3DCFA63D20B52901223F90AB0A0F6F13833F627A0A5C4BBDDEB86CA9F4A2972654F881B2DF4B1879
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(e){B.console&&B.console.error(e.message)}return b},B=this\|\|self;(0,eval)(function(p,b){return(b=G())&&p.eval(b.createScript("1"))===1?function(e){return b.createScript(e)}:function(e){return""+e}}(B)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var H=function(p,b){for(b=[];p--;)b.push(Math.random()*255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void 0,!!b)),p)[1],U=p[0],{invoke:function(v,W,E,e){function G(){Y(function(X){bb(function(){v(X)})},E)}if(!W)return W=U(E),v&&v(W),W;Y?G():(e=r,r=function(){bb((e(),G))})

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1322)
Category:	downloaded
Size (bytes):	13424
Entropy (8bit):	5.039753937536679
Encrypted:	false
SSDEEP:	192:SiUKUVZV3Go0KsMRZw6CqR3H9+iydbLsuyiaaDaKtGvuDxf1BxBz38awOra:SiSH370HMRZjXWL85ixxBjVwma
MD5:	463C6E0B5428775DE69291EA300FDF13
SHA1:	6C48FFD8286545C6E98BA5EA6196885600D896A5
SHA-256:	2EE2E0A8053AF4E475D85673393100EED8ACDFB0A6B9DE009513114F1FF7888B
SHA-512:	CFD31213257A994E8D16173425EFA4BD2C6519C51797314F7519B44BC9F2A8F23F3C375A59174405A96DC76F54B40F24A5634335409B087D5D7CFBAB00BF5471
Malicious:	false
Reputation:	low
URL:	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><link rel="preconnect" href="https://static.hsappstatic.net" crossorigin="anonymous"/><title>Form</title><meta name="viewport" content="width=device-width, initial-scale=1"/><meta name="robots" content="noindex, nofollow"/><meta name="googlebot" content="noindex"/><link rel="dns-prefetch" href="https://fonts.gstatic.com"/><style>body{margin:0;background:#f4f8fa}.container{display:none;width:800px;margin:0 auto;margin-top:30px}.skip-to-form{left:-9999px;position:absolute}@media only screen and (max-width:800px){.container{width:100%}}.container.error,.container.loaded{display:block}.container.loaded{background:#fff;box-shadow:0 4px 8px 0 rgba(53,105,128,.3),0 6px 20px 0 rgba(165,200,213,.41)}#form-target{padding:40px}.hs-form_free.hs-form__thankyou-message{font-size:38px;text-align:center}.hs-form_free.hs-form__thankyou-message .hs-form__virality__link{font-size:18p

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	13098
Entropy (8bit):	7.9662320028475095
Encrypted:	false
SSDEEP:	384:heH1eDndoIdwPQnsGqw6MiX7iERM3bEjnuMUh1cy7a:amdoIqPQsGXwOE23b+nuMUcyW
MD5:	7544C38CB6668D3E19ACE8189F70176B
SHA1:	F40E056D36FC320AA5042EA18A8B7ACB763AAF68
SHA-256:	9D760244CFF138C1B28B592766F9D28505E39085822FA656BA6E3FC9B7524E77
SHA-512:	042BB73BC7A79B9C3C688EED8740D59632C721289947CD23C17221916C9C0E0E6F1A23F8923449A2AD46BFA16B955E76943D4460DEC20F1A8D5089019278C0FC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/canonical_bridge.png
Preview:	.PNG........IHDR...d...d...........2.IDATx.....C.uE..F.f...03....1..U.q......G.._D`..Aa..<b0..0o.j.-.....c...w7Cb...F.h>.>.0n..s.U..P..}...9........s.S.j.s<.b...gZ..T1.+...lP?............^R...@.~.....GU.T.....@y.u:....V...G.R.-J}._}.....Q.(TU.^.TD.?...ee.?B.A`.M.......S...#>~."U......{.TO.m.f.X........Tw...o...+W............x.Cz..$..._)....+T......^..i.....{QU.R....S .NWQ"..Uu.~xR.\..;.....BuT......#.%..`.3..SVE..^^DK../~/..Q)V.".E..S.(UET.UUW.=.x..P.....E....;.JE........[Q...u.Ue2.z..o.~......U...T...(..T...B)..(..J....@.QU....J.BU.(I....S.R.x..o.A..;..T.PU.".`.R.)R.....UQW...\|.......R.H..R;.....{a.....x..z....j......w....O.P.._vo.J.....;.J...L........5.l_..Q.'.U.b`....G....n.\ L.\..9.&jc....K>6Tm.........@UJ.....R... U.TT........V.u.U).R..Z...'XUX.J)=.J.RVC.=._..?HKU......EA.WjHYM-.+J..Q..g#.v..:E.;..t+....JI@.j...+.].h...../..[.1.b..Km.6....4 ..D...e....P.Y.^.m.B9..IVf..?.=.33s...]..13.....Z.B.v.j..JU..R.\|W.@.....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	136
Entropy (8bit):	4.898176422446195
Encrypted:	false
SSDEEP:	3:YVKBEiFIWQHIMRL2KIhfwcP2xR2GXEqRWJ6jLZHJqLOSSZ:YiLIXHxbU2mn6jLZp4SZ
MD5:	7601C0A95BD907ADFBB7425DAF92A38D
SHA1:	7ADAE57774EB1D125AEA3782085642185FA4A5E6
SHA-256:	3DD27B9B8486B1866D9E9CDE14F5E48A3624F8A3DA7DD4A3B9DB3CCB315EF4AD
SHA-512:	4DA5126C8DED87ECFC6D3B0BA092B072DCD87FDF3CFFFCA3BB9ADDD18B5F7506D22B9CFBE3F67410C136EFEF51AF8EDE97C7687551D6E91C777F647C2CDD8B94
Malicious:	false
Reputation:	low
Preview:	{"portalId":48586112,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-1361127710}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm8ZAhUjPPODxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2392 x 590, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	197604
Entropy (8bit):	7.974227695553565
Encrypted:	false
SSDEEP:	6144:4Wb3vtlLbi9/EAqQNS5SF/6WlxRrlwCF8Ce:TblJbi9/EAJNSIdNxBqu89
MD5:	8D282E8D3B9F39455D6AAD6F5C939212
SHA1:	D25CD0A6D845B5FB8CEB9528078FC0776CCFDCF2
SHA-256:	9D9E658F2291BFFEF1CB4BB6A05CE4A988F4DA76F7B7DFA774FE7616D7239E5C
SHA-512:	165D21369CA19C38D12EFD40BC3320A81FE2DC67FD3B46EA09D3D607EE0677FCC840DA9AD0C70E4C7F81762E57E9CDDD5C13182F431BEA2C3899F638471AA513
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...N......iI...3iCCPicc..x..w\SW..;....A@F.K.....6.....$@.1&..7ZZ..E.GE. ..V@...j.(n.h.(Tj......`_}.?...}.9.~.;....{.....D..k.......).ilZ70..M...e.Nll...:../...(.;.z.........."........ [..i!.U.t...A^.XG..D\;..Jn..L%_..I.."~.......j}Hg.....bg.@$F....`...b.(G.x..3..>...9...e...Z...$.I.ys......9lPc.H......=..9.L...1...pR$@.d..yX.2....i...O..'.....^P$b#.Y....,Q.`...JQax"b}.BYp.p.q....y.eI..a..'E... .K.(....a..?.T......8.H...X.q.,/!r8'.8..=.#..'!.D,..C...DE.4$~8.O.ld....Qx.0_.I.C.D....._.q.P.I....D..E ..V..T.....:./)..W.%.%..Q.z.0?tP7G.(+J..[T.nN.?Y).MT.IV.."b....!....l....3!.D..M.......H!...TFG.....1....DB......EJ......j.QMyt.,e.K.<B\.........$.C..>......!.5....Q...AJ."....>.I...Q.!T;..#}.(t.@..$.F..1...I.O.JQPn...H?.r2(.....d.s.Hk..F.....9.z.!8..h...fvC*w.nT.'{...>^..<.3......m?..f..6.C{...Q.9...\|>?.../@..O3........q.h%..M.#..v....;n..f...?TO...3._..9.;.8.S........L.\.(;...AO.!;\.w..vqvq..\|..P<..z.`z..............q..{.....'

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 22:13:42.236243963 CET	49675	443	192.168.2.4	173.222.162.32
Dec 18, 2024 22:13:51.844208002 CET	49675	443	192.168.2.4	173.222.162.32
Dec 18, 2024 22:13:55.861722946 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:55.861814022 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:55.861902952 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:55.862101078 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:55.862140894 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:56.669810057 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:56.669919968 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:56.670008898 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:56.670953989 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:56.670989990 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:56.714448929 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:56.714519024 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:56.714592934 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:56.715456963 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:56.715487957 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.571760893 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:57.572043896 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:57.572108030 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:57.573134899 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:57.573208094 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:57.574536085 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:57.574609995 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:57.615937948 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:57.616000891 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:13:57.658051014 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:13:57.895879984 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.896153927 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.896203995 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.897170067 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.897247076 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.902863979 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.902935982 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.903033018 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.903049946 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.944808006 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.945029020 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.945050001 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.948582888 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.948661089 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.948971987 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:57.949148893 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:57.953999043 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.001666069 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.001683950 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.048727989 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.376017094 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.376104116 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.376162052 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.376184940 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.376188040 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.376244068 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.376279116 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.376293898 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.376353025 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.376368046 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.387841940 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.388045073 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.388060093 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.396600008 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.396941900 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.396974087 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.404803991 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.404916048 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.406670094 CET	49739	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:13:58.406702042 CET	443	49739	104.19.175.188	192.168.2.4
Dec 18, 2024 22:13:58.585259914 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:58.585341930 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:58.585434914 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:58.588407040 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:58.588443041 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:58.604100943 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:58.604130030 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:58.604204893 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:58.605655909 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:58.605668068 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:58.687124968 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:58.687211037 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:58.687290907 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:58.687688112 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:58.687719107 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:58.726927996 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:13:58.726947069 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:13:58.727024078 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:13:58.727407932 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:13:58.727413893 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:13:59.832712889 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:59.833187103 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:59.833251953 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:59.834137917 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:59.834332943 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:59.835181952 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:59.835283995 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:59.835310936 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:59.839492083 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:59.839668989 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:59.839680910 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:59.841113091 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:59.841187954 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:59.841978073 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:59.842055082 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:59.842070103 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:59.876645088 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:59.876705885 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:13:59.883368969 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:59.891470909 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:59.891479969 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:13:59.931603909 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:13:59.937251091 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:59.937522888 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:59.937541008 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:59.938522100 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:59.938605070 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:59.939585924 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:59.939652920 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:59.939744949 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:59.947012901 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:13:59.983356953 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:13:59.993140936 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:13:59.993164062 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.022407055 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:00.022715092 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:00.022722960 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:00.026264906 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:00.026350021 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:00.027324915 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:00.027497053 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:00.040712118 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.071655989 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:00.071661949 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:00.117762089 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:00.298057079 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.298125982 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.298276901 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.298322916 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.298330069 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:00.298413038 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:00.301424980 CET	49747	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:00.301491022 CET	443	49747	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.353473902 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.353503942 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.353554010 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:00.353563070 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.353579998 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.353646040 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:00.355381012 CET	49748	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:00.355392933 CET	443	49748	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.395747900 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.395818949 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.395858049 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.395876884 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.395939112 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.395975113 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.411444902 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.411514997 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.411535025 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.424716949 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.424732924 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.424773932 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.424792051 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.424849987 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.450372934 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:00.450438023 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.450520039 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:00.450849056 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:00.450877905 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:00.505587101 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:00.505625963 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:00.505692959 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:00.506120920 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:00.506138086 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:00.508825064 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:00.508863926 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:00.508939028 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:00.509160042 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:00.509185076 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:00.510003090 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:00.510092020 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:00.510179043 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:00.510507107 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:00.510524988 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.510601044 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:00.511049032 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:00.511059999 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:00.511223078 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:00.511280060 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:00.515494108 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.564435959 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.564459085 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.591634989 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.591679096 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.591694117 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.591713905 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.591768980 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.600100994 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.603396893 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.603462934 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.603482008 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.620376110 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.620441914 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.620445013 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.620471001 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.620538950 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.628318071 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.637027979 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.637089968 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.637103081 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.651674032 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.651734114 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.651747942 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.658509970 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.658580065 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.658592939 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.663563013 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.663620949 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.663640976 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.670775890 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.670866013 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.670878887 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.678715944 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.678776979 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.678788900 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.686352015 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.686427116 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.686460018 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.733870029 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.779638052 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.781184912 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.781253099 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.781267881 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.786459923 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.786533117 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.786540031 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.797135115 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.797221899 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.797233105 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.797283888 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.806615114 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.806632996 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.806701899 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.815913916 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.815929890 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.815984964 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.816026926 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.820326090 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.820343971 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.820390940 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.832602024 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.832694054 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.832701921 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.832752943 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.837722063 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.837796926 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.846451998 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.846519947 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.855273962 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.855345964 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.860025883 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.860096931 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.868829012 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.868916035 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.877592087 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.877676964 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.899708986 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.899784088 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.901678085 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.901743889 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.973419905 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.973525047 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.976809025 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.976900101 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.983422995 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.983505011 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.989824057 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.989923954 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.992676020 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.992754936 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:00.998682976 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:00.998761892 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.004441977 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.004520893 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.007169962 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.007241011 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.012902975 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.012978077 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.015582085 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.015655994 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.021248102 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.021337986 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.026632071 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.026709080 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.029956102 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.030041933 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.031795979 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.031871080 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.035276890 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.035377026 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.038465023 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.038539886 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.041874886 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.041948080 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.043617964 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.043688059 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.047063112 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.047133923 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.048790932 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.048866034 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.052300930 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.052376032 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.091761112 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.091845036 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.094080925 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.094178915 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.095830917 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.095918894 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.099306107 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.099396944 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.101022959 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.101103067 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.169075966 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.169084072 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.169166088 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.169194937 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.169275999 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.178184986 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.178211927 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.178277969 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.178318024 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.178354025 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.178374052 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.179582119 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.188585997 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.188605070 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.188662052 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.188688040 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.188718081 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.198961020 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.198988914 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.199048042 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.199064016 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.199093103 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.209309101 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.209326982 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.209409952 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.209420919 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.217987061 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.218008995 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.218079090 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.218086958 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.225764990 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.225781918 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.225862980 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.225871086 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.232315063 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.232336998 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.232431889 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.232448101 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.285070896 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.359213114 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.359225988 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.359318972 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.359333992 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.359345913 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.359397888 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.364042997 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.364062071 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.364123106 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.364130020 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.364175081 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.369847059 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.369865894 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.369961977 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.369975090 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.370034933 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.375669003 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.375689030 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.375760078 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.375766039 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.375813007 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.381530046 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.381546974 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.381625891 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.381633043 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.381685019 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.386981964 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.387000084 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.387064934 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.387073994 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.387121916 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.392165899 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.392183065 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.392247915 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.392256021 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.392303944 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.398093939 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.398112059 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.398196936 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.398201942 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.398257971 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.550031900 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.550136089 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.550152063 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.550168037 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.550309896 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.550309896 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.550944090 CET	49749	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.550961018 CET	443	49749	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.606291056 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:01.606345892 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:01.606446981 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:01.606648922 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:01.606663942 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:01.662373066 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:01.662619114 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:01.662631035 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:01.663605928 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:01.663677931 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:01.664043903 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:01.664103031 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:01.664182901 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:01.664190054 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:01.702739000 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.702773094 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.702855110 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.703046083 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:01.703056097 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:01.717813969 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:01.722404003 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:01.722615004 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:01.722655058 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:01.724103928 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:01.724172115 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:01.724471092 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:01.724555016 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:01.724586964 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:01.724822044 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:01.725008965 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:01.725069046 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:01.725960970 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:01.726016998 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:01.726768017 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:01.726840019 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:01.726916075 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:01.726932049 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:01.732150078 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:01.732306957 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:01.732317924 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:01.733100891 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:01.733160973 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:01.733212948 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:01.733309984 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:01.733331919 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:01.734013081 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:01.734065056 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:01.734127045 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:01.734133005 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:01.734956980 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:01.735006094 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:01.735636950 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:01.735719919 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:01.735723019 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:01.764130116 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:01.764144897 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:01.779881954 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:01.779891014 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:01.779891968 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:01.779907942 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:01.811155081 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:01.829009056 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.113533020 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:02.113600016 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:02.113714933 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:02.113729954 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:02.113795996 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:02.168203115 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.168270111 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.168291092 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.168314934 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.168315887 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.168350935 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.168399096 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.176548958 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.176661968 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.176692963 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.184818983 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.184988976 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.185045004 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.188921928 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:02.189039946 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:02.189106941 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:02.189129114 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:02.189253092 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:02.189301968 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:02.192701101 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.192830086 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.192886114 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.192902088 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.192992926 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.193041086 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.193053961 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.197963953 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.198168993 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.198203087 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.198226929 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.198263884 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.198314905 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.198357105 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.200678110 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.200730085 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.200742960 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.206760883 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.206830025 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.206845045 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.209160089 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.209220886 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.209227085 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.209774971 CET	49751	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:02.209806919 CET	443	49751	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:02.214912891 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.214982033 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.214994907 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.235872984 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.237310886 CET	49755	443	192.168.2.4	104.16.140.209
Dec 18, 2024 22:14:02.237349033 CET	443	49755	104.16.140.209	192.168.2.4
Dec 18, 2024 22:14:02.251728058 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.251739025 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.267102003 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.267123938 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.288005114 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.291981936 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.292042017 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.292073011 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.298835039 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.312079906 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.316193104 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.316267014 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.316298962 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.322134972 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.322161913 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.337555885 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.359988928 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.368859053 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.368865967 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.370280981 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.370345116 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.370354891 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.370415926 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.370482922 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.378535032 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.384730101 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.386118889 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.386178970 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.386240005 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.388463020 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.388520002 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.388547897 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.389892101 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.393873930 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.393929005 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.393949986 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.394109011 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.394157887 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.394176960 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.395920992 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.395997047 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.396013021 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.401688099 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.401746988 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.401762009 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.402235985 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.402291059 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.402306080 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.403470993 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.403526068 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.403539896 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.410154104 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.410217047 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.410231113 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.412463903 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.412556887 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.412570000 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.418131113 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.418174028 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.418188095 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.418262959 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.418297052 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.418318033 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.418342113 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.418397903 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.420311928 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.420356989 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.420365095 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.426230907 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.426383018 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.426425934 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.426440001 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.428164959 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.428211927 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.428219080 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.433154106 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.433223009 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.433235884 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.435992002 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.436043024 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.436050892 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.438739061 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.438812971 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.438827038 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.440742970 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.440789938 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.440798998 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.443944931 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.443996906 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.444004059 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.445065022 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.445108891 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.445117950 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.445141077 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.445188046 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.448204994 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.448251009 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.448257923 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.451143026 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.451677084 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.451726913 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.451733112 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.455260992 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.455312014 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.455353975 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.459662914 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.459718943 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.459729910 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.462270021 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.462321043 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.462352037 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.466685057 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.466736078 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.466747999 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.469252110 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.469307899 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.469317913 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.480423927 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.480470896 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.480478048 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.487447023 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.487494946 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.487502098 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.493885040 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.493901014 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.509021044 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.509031057 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.535480022 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.536562920 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.552340031 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.554492950 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.554980040 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.555027008 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.555041075 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.559083939 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.559125900 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.559139967 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.568450928 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.568506002 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.568519115 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.568558931 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.576529026 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.576550007 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.576575994 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.576778889 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.578166008 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.578207970 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.578219891 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.580737114 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.580786943 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.580801010 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.580862045 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.581944942 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.582612038 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.582658052 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.582667112 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.584902048 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.584956884 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.584974051 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.588603973 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.588623047 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.588660002 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.589651108 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.589709997 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.589746952 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.591356039 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.591409922 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.591423035 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.591463089 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.592488050 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.592547894 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.592566967 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.592597008 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.592653036 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.592878103 CET	49754	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.592907906 CET	443	49754	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.598496914 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.598551035 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.598567009 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.598620892 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.599538088 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.599545002 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.599589109 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.599658012 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.599704027 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.607064962 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.607073069 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.607139111 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.607839108 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.607846022 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.607892036 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.611351967 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.611360073 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.611742973 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.611845970 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.612570047 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.612571001 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.619456053 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.619465113 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.619508982 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.623646021 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.623696089 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.623714924 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.623749971 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.623768091 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.623790026 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.643847942 CET	49752	443	192.168.2.4	104.16.160.168
Dec 18, 2024 22:14:02.643872976 CET	443	49752	104.16.160.168	192.168.2.4
Dec 18, 2024 22:14:02.649909019 CET	49753	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.649949074 CET	443	49753	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.678190947 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:02.678231955 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:02.678291082 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:02.678514004 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:02.678531885 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:02.795228958 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:02.795278072 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:02.795341969 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:02.795555115 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:02.795569897 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:02.814328909 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:02.814400911 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:02.814488888 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:02.814708948 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:02.814757109 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:02.824573994 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.824609995 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.824666977 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.824837923 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:02.824853897 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:02.826441050 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:02.826522112 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:02.826596975 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:02.826760054 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:02.826797962 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:02.829556942 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.829577923 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.829684973 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.829946995 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:02.829957962 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:02.833462000 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:02.833626032 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:02.833637953 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:02.835045099 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:02.835100889 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:02.835506916 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:02.835583925 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:02.835628033 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:02.835637093 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:02.877156019 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:02.929389000 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:02.971261978 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:02.973864079 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:02.973870993 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:02.975970030 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:02.976037025 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:02.976598978 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:02.976680994 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:02.976907969 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:02.976912975 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.031405926 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.333465099 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.333539009 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.333615065 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.333642960 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.333687067 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:03.333744049 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.333775997 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:03.349740982 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.349761963 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.349790096 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:03.349813938 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.349858999 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:03.355536938 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.355612993 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.355691910 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:03.355915070 CET	49756	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:03.355947018 CET	443	49756	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:03.383517027 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.383764982 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.383796930 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.383845091 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.383857965 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.383898973 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.383922100 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.398921013 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.398979902 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.399003029 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.399010897 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.399051905 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.407299042 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.456680059 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.456688881 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.500474930 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.503350019 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.519407034 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:03.519494057 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:03.519570112 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:03.520143986 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:03.520226002 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:03.547406912 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.547415018 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.556171894 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:03.556229115 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:03.556416035 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:03.556742907 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:03.556759119 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:03.579154968 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.579324007 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.579334974 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.589154005 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.589195013 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.589216948 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.589222908 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.589260101 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.591725111 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:03.591809034 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:03.591886044 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:03.592366934 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:03.592401981 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:03.597511053 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.606446981 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.606479883 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.606498957 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.606508970 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.606561899 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.618447065 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.625634909 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.625686884 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.625698090 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.635302067 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.636563063 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.636569977 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.643539906 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.643671036 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.643685102 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.648060083 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.648181915 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.648191929 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.661207914 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.661240101 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.661289930 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.661295891 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.661331892 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.667512894 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.695323944 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.695379972 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.695386887 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.750566006 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.771325111 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.774421930 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.774473906 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.774481058 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.783231020 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.783291101 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.783299923 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.794275045 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.794336081 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.794342041 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.794382095 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.799118042 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.799129963 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.799177885 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.808736086 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.808743000 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.808787107 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.814893961 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.814901114 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.814949989 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.820647001 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.820652962 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.820708036 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.828872919 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.828877926 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.828928947 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.831285954 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.831291914 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.831337929 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.837057114 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.837117910 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.840127945 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.840188980 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.846100092 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.846158981 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.849302053 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.849366903 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.856573105 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.856659889 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.859668970 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.859749079 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.891915083 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:03.892148018 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:03.892179966 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:03.895723104 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:03.895826101 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:03.896190882 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:03.896358967 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:03.896369934 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:03.896394014 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:03.938070059 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:03.938132048 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:03.959115028 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.959240913 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.961491108 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.961594105 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.967185974 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.967324018 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.972440958 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.972510099 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.975137949 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.975219011 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.979986906 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.980062008 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.982495070 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.982614994 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.984873056 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:03.987277985 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.987529039 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.991597891 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.991765022 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.996108055 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.996170998 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:03.998488903 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:03.998601913 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.002918959 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.003005981 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.007406950 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.007461071 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.009287119 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.009624958 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.009644032 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.010632992 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.010690928 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.011065006 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.011121035 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.012075901 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.012152910 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.012278080 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.012284040 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.012984037 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.013077974 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.017821074 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.017887115 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.021948099 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.022011995 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.026552916 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.026626110 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.028722048 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.028781891 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.033212900 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.033279896 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.037691116 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.037744045 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.038661003 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.038863897 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.038872004 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.039877892 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.039956093 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.040146112 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.040270090 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.040328026 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.040376902 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.040395021 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.040474892 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.040487051 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.041517973 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.041568041 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.041975021 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.042073011 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.042095900 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.042119026 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.042299986 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.042334080 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.043812037 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.043872118 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.044692993 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.044778109 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.044821978 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.044934988 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.045130968 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.045177937 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.048873901 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.048962116 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.049335003 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.049443007 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.049454927 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.049501896 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.062959909 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.078789949 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.078923941 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.081960917 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.082035065 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.086452007 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.086558104 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.087358952 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.089926958 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.089978933 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.094208956 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.094218016 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.094235897 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.094257116 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.094317913 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.094321966 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.094381094 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.141083002 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.141098976 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.141112089 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.151119947 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.151177883 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.153745890 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.153810978 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.161384106 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.161391020 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.161453009 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.161456108 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.161474943 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.161529064 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.173094034 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.173106909 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.173154116 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.173160076 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.185045004 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.185056925 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.185112953 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.185117960 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.195287943 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.195300102 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.195384026 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.195390940 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.206430912 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.206443071 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.206506968 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.206517935 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.213180065 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.213191986 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.213252068 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.213258028 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.221112967 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.221126080 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.221179962 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.221185923 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.266252041 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.343878031 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:04.343981028 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:04.344050884 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:04.344194889 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.344204903 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.344263077 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.344289064 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.344289064 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.344300985 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.344340086 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.344361067 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.346519947 CET	49758	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:04.346560001 CET	443	49758	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:04.350090981 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.350106001 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.350203991 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.350209951 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.350286007 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.353933096 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.353981018 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.354008913 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.354013920 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.354062080 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.356724024 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:04.356766939 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:04.356856108 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:04.357407093 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:04.357420921 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:04.360080957 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.360095024 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.360214949 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.360214949 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.360223055 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.366286993 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.366300106 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.366377115 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.366383076 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.372234106 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.372246027 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.372323990 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.372332096 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.378400087 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.378413916 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.378467083 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.378473043 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.378504038 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.383982897 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.383996010 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.384063959 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.384069920 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.390412092 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.390424967 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.390507936 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.390516043 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.438030005 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.476989031 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.477056026 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.477107048 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.479458094 CET	49759	443	192.168.2.4	104.16.108.254
Dec 18, 2024 22:14:04.479475021 CET	443	49759	104.16.108.254	192.168.2.4
Dec 18, 2024 22:14:04.487977028 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.488063097 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.488086939 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.488111019 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.488156080 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.488168001 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.488184929 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.489413023 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.489707947 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.489734888 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.489770889 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.489814997 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.489873886 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.489888906 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.494462967 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.495239019 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495297909 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495302916 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.495338917 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.495342016 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495367050 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.495429993 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495662928 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495701075 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495714903 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.495737076 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.495769978 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.497471094 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.497498035 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.497565985 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.497572899 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.497617006 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.502624035 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.503618956 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.503701925 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.503716946 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.503726006 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.503737926 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.504172087 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.524336100 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.524475098 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.524682045 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.535031080 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.535057068 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.536763906 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.541189909 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.541199923 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.541225910 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.541253090 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.541282892 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.541291952 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.541321039 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.541323900 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.541397095 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.541907072 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.541944981 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.544966936 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.548645973 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.548656940 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.548687935 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.548760891 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.548820972 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.569490910 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.569535971 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.569888115 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.569900990 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.570231915 CET	49760	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.570297003 CET	443	49760	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.596324921 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.596774101 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.651803970 CET	49757	443	192.168.2.4	104.18.142.119
Dec 18, 2024 22:14:04.651828051 CET	443	49757	104.18.142.119	192.168.2.4
Dec 18, 2024 22:14:04.659953117 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.660772085 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.662807941 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.662888050 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.664964914 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.681377888 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.681416035 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.704272032 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.704282045 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.704318047 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.751182079 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.781474113 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.782341003 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.782428980 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.782493114 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.782592058 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.783194065 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:04.783288002 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:04.783369064 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:04.783771038 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:04.783807039 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:04.829262018 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.829361916 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.901043892 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.901235104 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.901273012 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.901308060 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.901318073 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.901328087 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.901338100 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.901355982 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.901408911 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.901420116 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.901468039 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.901559114 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.901647091 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.901689053 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.901702881 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.901721954 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.901725054 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.901730061 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.901757956 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.901766062 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.902179003 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.902235985 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.902251959 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.902362108 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.902384996 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.902410030 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.902427912 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.902467966 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.902539015 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.902542114 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.902551889 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.902585983 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.902600050 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.903223991 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.903261900 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.903270006 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.903274059 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.903295040 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.903316021 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.903361082 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.903373957 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.903383017 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.903413057 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.903425932 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.903439999 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.904293060 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.904417992 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.904422998 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.904433012 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.904483080 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.904496908 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.904501915 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.904511929 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.904524088 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.904539108 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.904617071 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.905249119 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.905288935 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.905330896 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.905335903 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.905348063 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.905380964 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.905394077 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.905409098 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.905411005 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.905445099 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.905450106 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.905477047 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.905985117 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.906178951 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.906219006 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.906220913 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.906234980 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.906253099 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.906296015 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.906301975 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.906337976 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.906347990 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.906992912 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.907037020 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.907052994 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.907069921 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.907210112 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.907221079 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.907229900 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.907248974 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.907263994 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.907264948 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.907283068 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.907304049 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.907603979 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.907608986 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.908111095 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.908149004 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.908153057 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.908165932 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.908179998 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.908190012 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.908195019 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.908252001 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.908257008 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.908312082 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.908359051 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.908394098 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.909090042 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.909167051 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.909181118 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.909192085 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:04.909195900 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.909229994 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:04.909296036 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.909308910 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.909326077 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.909439087 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.909779072 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.909822941 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.909868002 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.909941912 CET	49774	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.910002947 CET	443	49774	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.910048008 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.910053968 CET	49774	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.910479069 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.910518885 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.910598040 CET	49774	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:04.910630941 CET	443	49774	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:04.914227962 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.914400101 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.914419889 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.914613008 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:04.914758921 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:04.914788961 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:04.915689945 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:04.915750980 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:04.916501045 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:04.916591883 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:04.916699886 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:04.916719913 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:04.917948961 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.918010950 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.918292999 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.918395042 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.918401003 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.918461084 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.943308115 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.943387985 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:04.943449020 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:04.951363087 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.954260111 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.954318047 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.954386950 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:04.954449892 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:04.969877958 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:04.969883919 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:04.969929934 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:04.985517025 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.001238108 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.001245975 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.016752005 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.021469116 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.021687031 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.022031069 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.025005102 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.025052071 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.025060892 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.025459051 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.025558949 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.025602102 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.025665045 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.025716066 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.025738955 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.025811911 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.025875092 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.032490015 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.032543898 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.032551050 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.032587051 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.033308029 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.041179895 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.041201115 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.041244030 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.041277885 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.041307926 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.047390938 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.047442913 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.049103022 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.049108982 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.049177885 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.049240112 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.056058884 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.056165934 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.056226969 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.056292057 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.057058096 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.057111025 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.061834097 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.061889887 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.061904907 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.061961889 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.063106060 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.067034960 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.067084074 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.068233013 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.068238974 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.068306923 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.070452929 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.070538998 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.070600986 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.070892096 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.072004080 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.072068930 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.072072983 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.072102070 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.072146893 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.072422981 CET	49763	443	192.168.2.4	172.64.147.16
Dec 18, 2024 22:14:05.072434902 CET	443	49763	172.64.147.16	192.168.2.4
Dec 18, 2024 22:14:05.077553988 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.077771902 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.077977896 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.077977896 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.081176043 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.081182957 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.081250906 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.087486982 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.087539911 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.087553978 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.087577105 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.087635994 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.087851048 CET	49761	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:05.087882042 CET	443	49761	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:05.376245022 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.376303911 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.376566887 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.377307892 CET	49764	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.377343893 CET	443	49764	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.378839016 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:05.391884089 CET	49762	443	192.168.2.4	104.17.175.201
Dec 18, 2024 22:14:05.391946077 CET	443	49762	104.17.175.201	192.168.2.4
Dec 18, 2024 22:14:05.398885012 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.398953915 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.398981094 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.399004936 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.399033070 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.399122953 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.399122953 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.399200916 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.399408102 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.399441004 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.408749104 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.408813000 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.408902884 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.408951044 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.408963919 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.409030914 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.409044981 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.409075022 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.409152031 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.409173965 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.414784908 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.414933920 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.414957047 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.417455912 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.417516947 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.417538881 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.419425011 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:05.423181057 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.423243046 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.423260927 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.423283100 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.423337936 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.423532963 CET	49765	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.423559904 CET	443	49765	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.467987061 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.518608093 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.526227951 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.526269913 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.526401997 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.526642084 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.526653051 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.562702894 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.562763929 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.584305048 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:05.584521055 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:05.584530115 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:05.585647106 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:05.585937977 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:05.586065054 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:05.586069107 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:05.586105108 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:05.591017008 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.591097116 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.591160059 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.601901054 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.602093935 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.602155924 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.609314919 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.609385967 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.609402895 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.609431982 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.609517097 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.616707087 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.624337912 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.624495983 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.624558926 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.631967068 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.632020950 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.632081032 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.639250040 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.639331102 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.639391899 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.640784025 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:05.646699905 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.646858931 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.646922112 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.660715103 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.660737038 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.660917997 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.660980940 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.661052942 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.667057037 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.673480988 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.673595905 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.673661947 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.673728943 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.673845053 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.679874897 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.729444027 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:05.729528904 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:05.729592085 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:05.729983091 CET	49750	443	192.168.2.4	104.18.80.204
Dec 18, 2024 22:14:05.729994059 CET	443	49750	104.18.80.204	192.168.2.4
Dec 18, 2024 22:14:05.732364893 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.732470036 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.732574940 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.732763052 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:05.732781887 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:05.734551907 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.734611034 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.781538010 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.782782078 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.784868002 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.784948111 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.785010099 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.793123007 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.793129921 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.793190956 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.793210030 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.802090883 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.802156925 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.802179098 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.802392960 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.806452990 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.811008930 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.811079979 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.811096907 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.811151981 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.818588972 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.818595886 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.818666935 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.826771021 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.826776028 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.826845884 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.834882021 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.834887981 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.834944963 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.838758945 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.838766098 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.838819027 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.846955061 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.847016096 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.854614019 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.854676962 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.858876944 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.858947039 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.866784096 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.866849899 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.871105909 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.871170044 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.881222010 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.881298065 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.974910021 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.975020885 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.980333090 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.980415106 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.983143091 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.983216047 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.989273071 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.989345074 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.992393970 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.992633104 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:05.998248100 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:05.998411894 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.001054049 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.001442909 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.001456022 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.001774073 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.002232075 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.002232075 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.002247095 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.002290010 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.003230095 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.003438950 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.003447056 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.003652096 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.003751993 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.003770113 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.004268885 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.004268885 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.004282951 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.004327059 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.008871078 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.009031057 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.009046078 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.009210110 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.009329081 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.010452032 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.010647058 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.010910988 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.010910988 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.010922909 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.010986090 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.011998892 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.012352943 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.017343998 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.017478943 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.022737980 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.022999048 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.025638103 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.025693893 CET	443	49766	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.025758028 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.026098967 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.026099920 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.026099920 CET	49766	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.035576105 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:06.035808086 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:06.036107063 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:06.036433935 CET	49768	443	192.168.2.4	104.17.172.91
Dec 18, 2024 22:14:06.036446095 CET	443	49768	104.17.172.91	192.168.2.4
Dec 18, 2024 22:14:06.042274952 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.044766903 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.060903072 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.060914993 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.110630035 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.120750904 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.121124029 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.121182919 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.122632027 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.122859955 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.123256922 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.123370886 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.123415947 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.167375088 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.172543049 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.172641039 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.173201084 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.173260927 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.173307896 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.173434019 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:06.173461914 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:06.220374107 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.474428892 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.474514008 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.475023031 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.475023031 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.478162050 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.478193045 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.478343010 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.478472948 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.478482962 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.479055882 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:06.479319096 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:06.479343891 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:06.480225086 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:06.480298042 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:06.480741978 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:06.480741978 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:06.480757952 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:06.480803013 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:06.493139982 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.493192911 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.493556976 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.493664980 CET	49771	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.493699074 CET	443	49771	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.495991945 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.496063948 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.496413946 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.496413946 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.496489048 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.497756958 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.497857094 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.497941971 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.500510931 CET	49769	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.500514984 CET	443	49769	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.500515938 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.500546932 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.500871897 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.500871897 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:06.500905037 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:06.531738043 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:06.531747103 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:06.578512907 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.578541040 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:06.578586102 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.580032110 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.580359936 CET	49773	443	192.168.2.4	104.16.110.254
Dec 18, 2024 22:14:06.580424070 CET	443	49773	104.16.110.254	192.168.2.4
Dec 18, 2024 22:14:06.740827084 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.741148949 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.741166115 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.744683981 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.744781971 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.745275974 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.745275974 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.745286942 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.745440006 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.780514956 CET	49770	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.780539989 CET	443	49770	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.795973063 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.795983076 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.844926119 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.948199987 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.949280977 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.949342966 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.950150013 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.950769901 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.950867891 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:06.951025963 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:06.991343975 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.205413103 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.205472946 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.205527067 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.228744030 CET	49775	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.228769064 CET	443	49775	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.279434919 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:07.279485941 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:07.279548883 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:07.305871010 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:07.305916071 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:07.305968046 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:07.306015968 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:07.306080103 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:07.306123972 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:07.307495117 CET	49772	443	192.168.2.4	142.250.181.132
Dec 18, 2024 22:14:07.307523966 CET	443	49772	142.250.181.132	192.168.2.4
Dec 18, 2024 22:14:07.313268900 CET	49737	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:07.313334942 CET	443	49737	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:07.398988008 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.399264097 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.399295092 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.402914047 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.403106928 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.403301001 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.403429985 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.403479099 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.403724909 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.438766956 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.438925028 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.438981056 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.439539909 CET	49776	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.439579010 CET	443	49776	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.454253912 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.454313040 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.455188990 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:07.455277920 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:07.455343962 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:07.455575943 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:07.455615044 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:07.501132011 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.692924976 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.693386078 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.693398952 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.694375038 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.694463015 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.694880009 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.694937944 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.695127964 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.695137024 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:07.709990025 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.710215092 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.710278988 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.711463928 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.711528063 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.711894989 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.711934090 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.711946011 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.711970091 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.722240925 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.722441912 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.722480059 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.723470926 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.723531008 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.723855019 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.723917961 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.723994970 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.724025011 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.751169920 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:07.765985966 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.766043901 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:07.766082048 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.813139915 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:07.842441082 CET	49723	80	192.168.2.4	199.232.214.172
Dec 18, 2024 22:14:07.901510000 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.901746988 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.901844978 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.901870966 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.901935101 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.901987076 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.902004004 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.909564018 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.909676075 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.909703970 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.918922901 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.919013023 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.919092894 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.919122934 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:07.919214010 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:07.963393927 CET	80	49723	199.232.214.172	192.168.2.4
Dec 18, 2024 22:14:07.963452101 CET	49723	80	192.168.2.4	199.232.214.172
Dec 18, 2024 22:14:08.021070957 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.025115013 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.025171995 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.025202036 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.078476906 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.093125105 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.095150948 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.095236063 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.095299006 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.110380888 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.110502958 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.110594988 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.110658884 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.110729933 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.117641926 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.125289917 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.125408888 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.125422001 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.125453949 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.125504017 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.132678032 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.140135050 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.140367031 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.140428066 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.147404909 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.147478104 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.147537947 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.154827118 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.154911995 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.154973030 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.160206079 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:08.160279989 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:08.160392046 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:08.160806894 CET	49779	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:08.160820961 CET	443	49779	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:08.162225962 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.162300110 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.162319899 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.173990965 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.174105883 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.174128056 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.174190044 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.174247026 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.179620028 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.185224056 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.185328960 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.185389996 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.186682940 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:08.186768055 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:08.186834097 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:08.187280893 CET	49780	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:08.187335014 CET	443	49780	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:08.212774992 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:08.212827921 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:08.212944984 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:08.213370085 CET	49781	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:08.213406086 CET	443	49781	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:08.234719992 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.285846949 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.287749052 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.287853956 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.287867069 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.296399117 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.296430111 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.296457052 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.296468019 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.296494961 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.304639101 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.304716110 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.304734945 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.304795027 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.304806948 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.312547922 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.312613964 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.312633038 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.312711000 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.320178032 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.320209026 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.320250988 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.327538967 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.327600002 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.327609062 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.327658892 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.331466913 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.331532001 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.338871956 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.338934898 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.346952915 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.347026110 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.350785017 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.350867987 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.357791901 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.357886076 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.365031004 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.365106106 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.370978117 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.371042967 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.374726057 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.374803066 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.382179976 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.382255077 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.497750044 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.497828960 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.503209114 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.503288984 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.508522987 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.508594036 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.511146069 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.511243105 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.519639015 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.519715071 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.521095991 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.521163940 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.524338961 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.524413109 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.529629946 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.529696941 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.533288002 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.533353090 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.539558887 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.539634943 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.544250965 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.544327021 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.547342062 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.547410011 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.552671909 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.552740097 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.557686090 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.557758093 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.560107946 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.560174942 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.566076994 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.566159010 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.566967010 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.571638107 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.571717024 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.571746111 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.571820974 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.576158047 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.576226950 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.579116106 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.579194069 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.584335089 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.584408998 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.584467888 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.584530115 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.584544897 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.584659100 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:08.584709883 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.585164070 CET	49778	443	192.168.2.4	104.18.41.124
Dec 18, 2024 22:14:08.585192919 CET	443	49778	104.18.41.124	192.168.2.4
Dec 18, 2024 22:14:09.156091928 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.156502962 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.156565905 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.157576084 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.157948971 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.158123970 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.158123970 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.158195019 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.203480959 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.203504086 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.250420094 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.961493969 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.961525917 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.961631060 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:09.961678028 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.961898088 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.964622974 CET	49782	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:09.964660883 CET	443	49782	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:11.290359020 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:11.290416002 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:11.290561914 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:11.290669918 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:11.290689945 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:12.753305912 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:12.753375053 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:12.753434896 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:12.987801075 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:12.988039017 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:12.988070011 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:12.991281033 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:12.991388083 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:12.991765022 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:12.991765022 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:12.991799116 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:12.991868973 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.033260107 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.033319950 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.078701973 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.673424006 CET	49740	443	192.168.2.4	104.19.175.188
Dec 18, 2024 22:14:13.673458099 CET	443	49740	104.19.175.188	192.168.2.4
Dec 18, 2024 22:14:13.824695110 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.824866056 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.824968100 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.825001955 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.825114965 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.825252056 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.825265884 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.837681055 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.837877989 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.837893009 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.843843937 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.844290972 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.844307899 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.856302023 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.856379032 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.856394053 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:13.900988102 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:13.946966887 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.000813961 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.000834942 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.020066023 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.020131111 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.020150900 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.029130936 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.029189110 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.029203892 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.043983936 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.044039011 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.044054031 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.057625055 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.057687998 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.057704926 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.071254015 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.071338892 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.071362972 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.071391106 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.071438074 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.084609032 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.084743977 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.084801912 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.084821939 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.097409010 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.100083113 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.100100994 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.110124111 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.110348940 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.110363007 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.122791052 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.122937918 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.122951031 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.137415886 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.137474060 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.137487888 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.148200035 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.148255110 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.148268938 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.151823997 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:14.151887894 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.152008057 CET	49787	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:14.152029991 CET	443	49787	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:17.727547884 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:17.727628946 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:17.727912903 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:17.728151083 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:17.728185892 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:17.773432970 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:17.773518085 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:17.773818016 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:17.774339914 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:17.774375916 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.426918030 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.427200079 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.427263021 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.428766966 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.429083109 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.429213047 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.429224014 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.469605923 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.469636917 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.474078894 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.474313021 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.474347115 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.475477934 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.475835085 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.475835085 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:19.475886106 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.476027012 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:19.516469955 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.163345098 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.163487911 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.163549900 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.163569927 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.163695097 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.163743973 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.163752079 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.176373959 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.176445961 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.176455021 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.180882931 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.180931091 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.180939913 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.228977919 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.231092930 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.231161118 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.231822968 CET	49793	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.231836081 CET	443	49793	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.235208988 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.235217094 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.235254049 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.235296965 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.235351086 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.235557079 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.235563040 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.282088041 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.282665968 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.286780119 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.286853075 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.286864996 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.328975916 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.354841948 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.359853029 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.359926939 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.359946012 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.360114098 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.360169888 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.369019985 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.369045973 CET	443	49795	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.369072914 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.369123936 CET	49795	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.375360966 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.375441074 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.375530958 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.375730991 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.375756979 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.468081951 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.468168020 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:20.468266010 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.469827890 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:20.469867945 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:21.931925058 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:21.932142019 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:21.932153940 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:21.933259964 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:21.933552980 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:21.933654070 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:21.933737993 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:21.984504938 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.076062918 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.076633930 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.076678038 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.077784061 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.078089952 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.078227997 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.078274012 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.125003099 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.167922020 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.168157101 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.168188095 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.169183969 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.169454098 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.169543028 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.169550896 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.211349964 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.218820095 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.736493111 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.737925053 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.737982988 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.739020109 CET	49799	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.739041090 CET	443	49799	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.763153076 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.763263941 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.763334990 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.763386965 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.763536930 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.763590097 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.763606071 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.776287079 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.776346922 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.776360989 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.784245014 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.784310102 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.784342051 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.828710079 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.828733921 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.875034094 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.882843971 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.886852026 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.886913061 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.886945963 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.953733921 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.954999924 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.959649086 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.959723949 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.959743023 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.959925890 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.959990025 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.960082054 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.960120916 CET	443	49800	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.960144043 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.960170031 CET	49800	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.977343082 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.977480888 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.977560997 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.977580070 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.977607012 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.977654934 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.977734089 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.993181944 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.993273973 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.993279934 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.993305922 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.993360996 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.993381977 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.993618965 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:22.993725061 CET	443	49801	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:22.993793011 CET	49801	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:23.084569931 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:23.084640980 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:23.084728003 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:23.085159063 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:23.085187912 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.366018057 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:24.366111040 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:24.366219997 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:24.366471052 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:24.366508961 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:24.781393051 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.782013893 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:24.782079935 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.785667896 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.785778046 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:24.786088943 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:24.786237001 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:24.786250114 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.786293030 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:24.786655903 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.830177069 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:24.830214024 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:24.877115965 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.603600979 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:25.603913069 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:25.603964090 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:25.604856968 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:25.605248928 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:25.605391026 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:25.605406046 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:25.606010914 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:25.651101112 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.651240110 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.651359081 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.651376009 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.651424885 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.651483059 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.651501894 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.658346891 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:25.664272070 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.664357901 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.664378881 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.670262098 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.670336962 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.670353889 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.682760954 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.682845116 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.682862997 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.736470938 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.770405054 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.814801931 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.814837933 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.842885017 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.842978954 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.842998028 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.847913027 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.848001003 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.858140945 CET	49802	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.858181000 CET	443	49802	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.929841042 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.929935932 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.930022955 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.931022882 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.931060076 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.966615915 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.966658115 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:25.966728926 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.966909885 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:25.966939926 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:26.093328953 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:26.093395948 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:26.093455076 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:26.094052076 CET	49803	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:26.094079018 CET	443	49803	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:26.097446918 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:26.097536087 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:26.097637892 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:26.097829103 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:26.097861052 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.309458017 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.309751034 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:27.309799910 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.310103893 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.310393095 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:27.310456991 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.310523033 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:27.351339102 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.639225960 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.639390945 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.639437914 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.640157938 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.640417099 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.640497923 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.640510082 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.640530109 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.659796953 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.660021067 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.660056114 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.660516977 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.660830975 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.660921097 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.660938025 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.688388109 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.703366995 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:27.704108000 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:27.799916983 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.799985886 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:27.800049067 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:27.800534964 CET	49809	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:27.800570011 CET	443	49809	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:28.555377007 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.555526972 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.555583000 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.555632114 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.555820942 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.555875063 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.556052923 CET	49808	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.556078911 CET	443	49808	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.569135904 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.569190979 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.569233894 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.569236994 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.569293022 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.569344044 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.569360971 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.582721949 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.582773924 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.582773924 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.582796097 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.582844973 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.587100983 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.641613007 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.641634941 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.688478947 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.690093040 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.693507910 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.693568945 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.693584919 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.735358000 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.761413097 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.766132116 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.766182899 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.766201019 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.777065992 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.777127981 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.777142048 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.791143894 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.791203022 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.791215897 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.804517031 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.804578066 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.804595947 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.818125963 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.818181038 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.818196058 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.831978083 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.832035065 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.832048893 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.834045887 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.834105015 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.834323883 CET	49807	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.834353924 CET	443	49807	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.839169979 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.839220047 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:28.839325905 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.839489937 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:28.839519978 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:30.538027048 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:30.538327932 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:30.538351059 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:30.539063931 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:30.539756060 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:30.539835930 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:30.540188074 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:30.583336115 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.357825994 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.357887030 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.357923985 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.357949972 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.357980013 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.357994080 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.358040094 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.365964890 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.366035938 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.366070986 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.380363941 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.380425930 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.380446911 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.389976978 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.390034914 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.390052080 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.437962055 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.477691889 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.531735897 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.531759977 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.555490971 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.555566072 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.555589914 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.564229012 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.564284086 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.564316034 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.573039055 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.573096991 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.573112011 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.583065987 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.583129883 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.583142996 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.596646070 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.596714973 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.596729040 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.610333920 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.610410929 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.610424042 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.621803999 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.621862888 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.621885061 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.624068022 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:31.624134064 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.624202013 CET	49814	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:31.624236107 CET	443	49814	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:34.922755003 CET	49774	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:34.963361979 CET	443	49774	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:35.064414024 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:35.064491987 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:35.064579010 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:35.064781904 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:35.064805031 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:35.271604061 CET	443	49774	104.16.118.116	192.168.2.4
Dec 18, 2024 22:14:35.271800041 CET	49774	443	192.168.2.4	104.16.118.116
Dec 18, 2024 22:14:36.286223888 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.286644936 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.286731958 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.288399935 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.288477898 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.289535999 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.289634943 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.289742947 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.289762020 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.335802078 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:36.335890055 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:36.335992098 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:36.336189985 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:36.336229086 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:36.344080925 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.739694118 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.739903927 CET	443	49815	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.740071058 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.740071058 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.740071058 CET	49815	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.740623951 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.740730047 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:36.740840912 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.741204977 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:36.741240978 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:37.955255985 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:37.982189894 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:37.982253075 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:37.983791113 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:37.999686956 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:38.000046015 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:38.002983093 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:38.030035973 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.031299114 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.031339884 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.031673908 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.038609028 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.038685083 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.038768053 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.042165995 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.042207003 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.043406963 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:38.413563013 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:38.413774014 CET	443	49817	35.190.80.1	192.168.2.4
Dec 18, 2024 22:14:38.414012909 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:38.414014101 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:38.414014101 CET	49817	443	192.168.2.4	35.190.80.1
Dec 18, 2024 22:14:38.889803886 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.889842033 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.889867067 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.889890909 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.889914036 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.889990091 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.890034914 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.903069019 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.903125048 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.903148890 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.909452915 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.909658909 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.909720898 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.921678066 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.921740055 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:38.921802044 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:38.969078064 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.009649038 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.062935114 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.062994957 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.081839085 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.082014084 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.082032919 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.086009026 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.086128950 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.086256981 CET	49816	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.086285114 CET	443	49816	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.089545965 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.089591026 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.089659929 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.089853048 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.089863062 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.096991062 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.097076893 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:39.097165108 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.097362995 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:39.097399950 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.802551985 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.802793026 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.802822113 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.803958893 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.804251909 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.804343939 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.804349899 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.804434061 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.805319071 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.805505037 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.805583000 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.806719065 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.807009935 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.807087898 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.807102919 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.807198048 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:40.844737053 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:40.860481977 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.606841087 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.606986046 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.607168913 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.607182026 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.607290983 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.607404947 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.607888937 CET	49819	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.607898951 CET	443	49819	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.630938053 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.631072044 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.631134033 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.631165981 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.631264925 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.631323099 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.631330967 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.644989014 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.645050049 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.645078897 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.653412104 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.653470993 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.653487921 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.703886986 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.703947067 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.750839949 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.751168966 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.755162954 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.755218029 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.755247116 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.797629118 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.818286896 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.824826002 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.824906111 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.824969053 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.838849068 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.838924885 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.838953972 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.852160931 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.852215052 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.852224112 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.865917921 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.865977049 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.865991116 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.870120049 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.870183945 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.870471001 CET	49821	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.870500088 CET	443	49821	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.878201962 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.878305912 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:41.878382921 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.878628016 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:41.878679991 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:43.576931953 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:43.577487946 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:43.577548027 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:43.579055071 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:43.579493999 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:43.579544067 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:43.579559088 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:43.579674006 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:43.626702070 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.400235891 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.400362968 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.400449991 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.400454044 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.400507927 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.400635958 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.400657892 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.400677919 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.400734901 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.408261061 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.419152975 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.419229031 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.419246912 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.431174040 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.431260109 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.431273937 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.485867023 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.519681931 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.564007044 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.564039946 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.591912985 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.592025042 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.592056036 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.601928949 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.602014065 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.602040052 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.611597061 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.611670017 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.611685991 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.627815008 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.627898932 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.627917051 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.638947010 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.639117956 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.639133930 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.639379978 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:44.639560938 CET	443	49828	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:44.639642954 CET	49828	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:49.830537081 CET	49724	80	192.168.2.4	199.232.214.172
Dec 18, 2024 22:14:49.950794935 CET	80	49724	199.232.214.172	192.168.2.4
Dec 18, 2024 22:14:49.950983047 CET	49724	80	192.168.2.4	199.232.214.172
Dec 18, 2024 22:14:55.782813072 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:55.782896996 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:55.783005953 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:55.783201933 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:55.783235073 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:57.478043079 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:57.478384972 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:57.478404045 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:57.479155064 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:57.479595900 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:14:57.479676008 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:14:57.532412052 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:15:07.175993919 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:15:07.176132917 CET	443	49861	172.217.19.228	192.168.2.4
Dec 18, 2024 22:15:07.176193953 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:15:07.673657894 CET	49861	443	192.168.2.4	172.217.19.228
Dec 18, 2024 22:15:07.673705101 CET	443	49861	172.217.19.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 22:13:51.221369028 CET	53	53002	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:51.496244907 CET	53	57109	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:54.268687963 CET	53	49483	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:55.719857931 CET	49484	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:55.720186949 CET	59956	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:55.859273911 CET	53	49484	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:55.860953093 CET	53	59956	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:56.498389959 CET	50459	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:56.498554945 CET	63344	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:56.643541098 CET	53	50459	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:56.643590927 CET	53	63344	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.401964903 CET	55137	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.402611971 CET	50530	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.426218987 CET	58395	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.426520109 CET	60662	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.431934118 CET	65160	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.432131052 CET	62589	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.544677019 CET	53	55137	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.545056105 CET	53	50530	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.584306002 CET	54488	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.584552050 CET	49810	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:13:58.596699953 CET	53	65160	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.602622986 CET	53	62589	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.685471058 CET	53	58395	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.686558008 CET	53	60662	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.725924969 CET	53	49810	1.1.1.1	192.168.2.4
Dec 18, 2024 22:13:58.725970030 CET	53	54488	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.309215069 CET	54229	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.309598923 CET	54185	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.364007950 CET	49206	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.364162922 CET	52828	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.364820004 CET	51042	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.365118980 CET	56429	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.366097927 CET	59070	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.366427898 CET	63322	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.367084980 CET	53233	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.367453098 CET	54934	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:00.449836969 CET	53	54229	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.449882984 CET	53	54185	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.504312992 CET	53	49206	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.505237103 CET	53	52828	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.505516052 CET	53	51042	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.505870104 CET	53	63322	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.508022070 CET	53	54934	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.508461952 CET	53	56429	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.508492947 CET	53	53233	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:00.508533001 CET	53	59070	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:01.403146982 CET	138	138	192.168.2.4	192.168.2.255
Dec 18, 2024 22:14:01.556076050 CET	53805	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:01.556205988 CET	63935	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:01.701697111 CET	53	53805	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:01.701733112 CET	53	63935	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.649398088 CET	60844	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.649554968 CET	63453	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.671905041 CET	53285	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.672049046 CET	58665	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.682271957 CET	49964	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.682517052 CET	57819	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.686760902 CET	58307	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.686922073 CET	56858	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.688538074 CET	53040	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.688720942 CET	51993	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:02.792346001 CET	53	60844	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.794687986 CET	53	63453	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.811749935 CET	53	53285	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.813811064 CET	53	58665	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.823030949 CET	53	49964	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.824215889 CET	53	57819	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.825804949 CET	53	58307	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.826054096 CET	53	56858	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.828922987 CET	53	51993	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:02.829034090 CET	53	53040	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:03.377410889 CET	49842	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:03.377664089 CET	50375	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:03.414311886 CET	64584	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:03.414778948 CET	64167	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:03.444921970 CET	58966	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:03.445516109 CET	65309	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:03.517864943 CET	53	49842	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:03.518661976 CET	53	50375	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:03.555380106 CET	53	64167	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:03.555476904 CET	53	64584	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:03.590147018 CET	53	58966	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:03.590898037 CET	53	65309	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:04.534073114 CET	55205	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:04.534588099 CET	54228	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:04.726710081 CET	56880	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:04.727018118 CET	55764	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:04.728955030 CET	54459	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:04.729166031 CET	59381	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:04.782371044 CET	53	54228	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:04.782428026 CET	53	55205	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:04.908862114 CET	53	56880	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:04.908896923 CET	53	54459	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:04.908926964 CET	53	55764	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:04.908957958 CET	53	59381	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:05.380577087 CET	62054	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:05.380745888 CET	50729	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:05.525665998 CET	53	62054	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:05.525708914 CET	53	50729	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:06.030139923 CET	55383	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:06.030383110 CET	55059	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:06.169540882 CET	53	55059	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:06.171708107 CET	53	55383	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:07.315216064 CET	60628	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:07.315398932 CET	52617	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:07.453794003 CET	53	62773	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:07.454613924 CET	53	60628	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:07.454647064 CET	53	52617	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:11.150018930 CET	50636	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:11.150573015 CET	58647	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:11.265557051 CET	53	59876	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:11.270544052 CET	53	61048	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:11.289094925 CET	53	50636	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:11.289930105 CET	53	58647	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:11.393934965 CET	53	58218	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:14.003941059 CET	53	61590	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:30.299932957 CET	53	60294	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:34.923991919 CET	52869	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:34.924341917 CET	61899	53	192.168.2.4	1.1.1.1
Dec 18, 2024 22:14:35.063781023 CET	53	52869	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:35.063829899 CET	53	61899	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:51.159410000 CET	53	53201	1.1.1.1	192.168.2.4
Dec 18, 2024 22:14:52.643086910 CET	53	53217	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 22:13:55.719857931 CET	192.168.2.4	1.1.1.1	0x8e61	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:55.720186949 CET	192.168.2.4	1.1.1.1	0xfc1e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 22:13:56.498389959 CET	192.168.2.4	1.1.1.1	0xa8a5	Standard query (0)	share.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:56.498554945 CET	192.168.2.4	1.1.1.1	0xbc5c	Standard query (0)	share.hsforms.com	65	IN (0x0001)	false
Dec 18, 2024 22:13:58.401964903 CET	192.168.2.4	1.1.1.1	0xdb21	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.402611971 CET	192.168.2.4	1.1.1.1	0xc64a	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Dec 18, 2024 22:13:58.426218987 CET	192.168.2.4	1.1.1.1	0x699b	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.426520109 CET	192.168.2.4	1.1.1.1	0x8991	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Dec 18, 2024 22:13:58.431934118 CET	192.168.2.4	1.1.1.1	0x8f86	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.432131052 CET	192.168.2.4	1.1.1.1	0xea7c	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Dec 18, 2024 22:13:58.584306002 CET	192.168.2.4	1.1.1.1	0x324e	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.584552050 CET	192.168.2.4	1.1.1.1	0x8209	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:00.309215069 CET	192.168.2.4	1.1.1.1	0xbb16	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.309598923 CET	192.168.2.4	1.1.1.1	0x8d5	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:00.364007950 CET	192.168.2.4	1.1.1.1	0x8812	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.364162922 CET	192.168.2.4	1.1.1.1	0x85dd	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:00.364820004 CET	192.168.2.4	1.1.1.1	0xca4b	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.365118980 CET	192.168.2.4	1.1.1.1	0xaacc	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:00.366097927 CET	192.168.2.4	1.1.1.1	0xa993	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.366427898 CET	192.168.2.4	1.1.1.1	0x11f4	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:00.367084980 CET	192.168.2.4	1.1.1.1	0x3b0f	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.367453098 CET	192.168.2.4	1.1.1.1	0x75bf	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:01.556076050 CET	192.168.2.4	1.1.1.1	0x7ede	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:01.556205988 CET	192.168.2.4	1.1.1.1	0x8eb8	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:02.649398088 CET	192.168.2.4	1.1.1.1	0xbcd7	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.649554968 CET	192.168.2.4	1.1.1.1	0x68f6	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:02.671905041 CET	192.168.2.4	1.1.1.1	0x78fe	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.672049046 CET	192.168.2.4	1.1.1.1	0x3cc	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:02.682271957 CET	192.168.2.4	1.1.1.1	0xf934	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.682517052 CET	192.168.2.4	1.1.1.1	0x77c2	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:02.686760902 CET	192.168.2.4	1.1.1.1	0x11f1	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.686922073 CET	192.168.2.4	1.1.1.1	0x6d8e	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:02.688538074 CET	192.168.2.4	1.1.1.1	0xd74c	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.688720942 CET	192.168.2.4	1.1.1.1	0xadb6	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:03.377410889 CET	192.168.2.4	1.1.1.1	0xdae2	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.377664089 CET	192.168.2.4	1.1.1.1	0x64e2	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:03.414311886 CET	192.168.2.4	1.1.1.1	0x12d6	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.414778948 CET	192.168.2.4	1.1.1.1	0xd208	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:03.444921970 CET	192.168.2.4	1.1.1.1	0xde57	Standard query (0)	48586112.fs1.hubspotusercontent-na1.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.445516109 CET	192.168.2.4	1.1.1.1	0x26b1	Standard query (0)	48586112.fs1.hubspotusercontent-na1.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:04.534073114 CET	192.168.2.4	1.1.1.1	0x20	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.534588099 CET	192.168.2.4	1.1.1.1	0x68db	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:04.726710081 CET	192.168.2.4	1.1.1.1	0x320f	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.727018118 CET	192.168.2.4	1.1.1.1	0x1553	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:04.728955030 CET	192.168.2.4	1.1.1.1	0xaf0e	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.729166031 CET	192.168.2.4	1.1.1.1	0xf965	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:05.380577087 CET	192.168.2.4	1.1.1.1	0x4eef	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:05.380745888 CET	192.168.2.4	1.1.1.1	0xe58a	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:06.030139923 CET	192.168.2.4	1.1.1.1	0x133f	Standard query (0)	48586112.fs1.hubspotusercontent-na1.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:06.030383110 CET	192.168.2.4	1.1.1.1	0x8da9	Standard query (0)	48586112.fs1.hubspotusercontent-na1.net	65	IN (0x0001)	false
Dec 18, 2024 22:14:07.315216064 CET	192.168.2.4	1.1.1.1	0xa549	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:07.315398932 CET	192.168.2.4	1.1.1.1	0x7e49	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:11.150018930 CET	192.168.2.4	1.1.1.1	0xcce3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:11.150573015 CET	192.168.2.4	1.1.1.1	0x94d5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 22:14:34.923991919 CET	192.168.2.4	1.1.1.1	0xe817	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:34.924341917 CET	192.168.2.4	1.1.1.1	0xacc9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 22:13:55.859273911 CET	1.1.1.1	192.168.2.4	0x8e61	No error (0)	www.google.com	172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:55.860953093 CET	1.1.1.1	192.168.2.4	0xfc1e	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 18, 2024 22:13:56.643541098 CET	1.1.1.1	192.168.2.4	0xa8a5	No error (0)	share.hsforms.com	104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:56.643541098 CET	1.1.1.1	192.168.2.4	0xa8a5	No error (0)	share.hsforms.com	104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:56.643590927 CET	1.1.1.1	192.168.2.4	0xbc5c	No error (0)	share.hsforms.com		65	IN (0x0001)	false
Dec 18, 2024 22:13:58.544677019 CET	1.1.1.1	192.168.2.4	0xdb21	No error (0)	static.hsappstatic.net	104.17.172.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.544677019 CET	1.1.1.1	192.168.2.4	0xdb21	No error (0)	static.hsappstatic.net	104.17.173.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.544677019 CET	1.1.1.1	192.168.2.4	0xdb21	No error (0)	static.hsappstatic.net	104.17.174.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.544677019 CET	1.1.1.1	192.168.2.4	0xdb21	No error (0)	static.hsappstatic.net	104.17.175.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.544677019 CET	1.1.1.1	192.168.2.4	0xdb21	No error (0)	static.hsappstatic.net	104.17.176.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.545056105 CET	1.1.1.1	192.168.2.4	0xc64a	No error (0)	static.hsappstatic.net		65	IN (0x0001)	false
Dec 18, 2024 22:13:58.596699953 CET	1.1.1.1	192.168.2.4	0x8f86	No error (0)	js.hs-scripts.com	104.16.140.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.596699953 CET	1.1.1.1	192.168.2.4	0x8f86	No error (0)	js.hs-scripts.com	104.16.138.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.596699953 CET	1.1.1.1	192.168.2.4	0x8f86	No error (0)	js.hs-scripts.com	104.16.141.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.596699953 CET	1.1.1.1	192.168.2.4	0x8f86	No error (0)	js.hs-scripts.com	104.16.139.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.596699953 CET	1.1.1.1	192.168.2.4	0x8f86	No error (0)	js.hs-scripts.com	104.16.137.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.602622986 CET	1.1.1.1	192.168.2.4	0xea7c	No error (0)	js.hs-scripts.com		65	IN (0x0001)	false
Dec 18, 2024 22:13:58.685471058 CET	1.1.1.1	192.168.2.4	0x699b	No error (0)	js.hsforms.net	104.18.142.119	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.685471058 CET	1.1.1.1	192.168.2.4	0x699b	No error (0)	js.hsforms.net	104.18.141.119	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.686558008 CET	1.1.1.1	192.168.2.4	0x8991	No error (0)	js.hsforms.net		65	IN (0x0001)	false
Dec 18, 2024 22:13:58.725924969 CET	1.1.1.1	192.168.2.4	0x8209	No error (0)	forms.hsforms.com		65	IN (0x0001)	false
Dec 18, 2024 22:13:58.725970030 CET	1.1.1.1	192.168.2.4	0x324e	No error (0)	forms.hsforms.com	104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:13:58.725970030 CET	1.1.1.1	192.168.2.4	0x324e	No error (0)	forms.hsforms.com	104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.449836969 CET	1.1.1.1	192.168.2.4	0xbb16	No error (0)	static.hsappstatic.net	104.17.172.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.449836969 CET	1.1.1.1	192.168.2.4	0xbb16	No error (0)	static.hsappstatic.net	104.17.173.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.449836969 CET	1.1.1.1	192.168.2.4	0xbb16	No error (0)	static.hsappstatic.net	104.17.176.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.449836969 CET	1.1.1.1	192.168.2.4	0xbb16	No error (0)	static.hsappstatic.net	104.17.174.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.449836969 CET	1.1.1.1	192.168.2.4	0xbb16	No error (0)	static.hsappstatic.net	104.17.175.91	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.449882984 CET	1.1.1.1	192.168.2.4	0x8d5	No error (0)	static.hsappstatic.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:00.504312992 CET	1.1.1.1	192.168.2.4	0x8812	No error (0)	js.hs-analytics.net	104.16.160.168	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.504312992 CET	1.1.1.1	192.168.2.4	0x8812	No error (0)	js.hs-analytics.net	104.17.175.201	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.505237103 CET	1.1.1.1	192.168.2.4	0x85dd	No error (0)	js.hs-analytics.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:00.505516052 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	js.hs-banner.com	172.64.147.16	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.505516052 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	js.hs-banner.com	104.18.40.240	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.505870104 CET	1.1.1.1	192.168.2.4	0x11f4	No error (0)	js.hscollectedforms.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:00.508022070 CET	1.1.1.1	192.168.2.4	0x75bf	No error (0)	js.hs-scripts.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:00.508461952 CET	1.1.1.1	192.168.2.4	0xaacc	No error (0)	js.hs-banner.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:00.508492947 CET	1.1.1.1	192.168.2.4	0x3b0f	No error (0)	js.hs-scripts.com	104.16.140.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508492947 CET	1.1.1.1	192.168.2.4	0x3b0f	No error (0)	js.hs-scripts.com	104.16.141.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508492947 CET	1.1.1.1	192.168.2.4	0x3b0f	No error (0)	js.hs-scripts.com	104.16.139.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508492947 CET	1.1.1.1	192.168.2.4	0x3b0f	No error (0)	js.hs-scripts.com	104.16.138.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508492947 CET	1.1.1.1	192.168.2.4	0x3b0f	No error (0)	js.hs-scripts.com	104.16.137.209	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508533001 CET	1.1.1.1	192.168.2.4	0xa993	No error (0)	js.hscollectedforms.net	104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508533001 CET	1.1.1.1	192.168.2.4	0xa993	No error (0)	js.hscollectedforms.net	104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508533001 CET	1.1.1.1	192.168.2.4	0xa993	No error (0)	js.hscollectedforms.net	104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508533001 CET	1.1.1.1	192.168.2.4	0xa993	No error (0)	js.hscollectedforms.net	104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:00.508533001 CET	1.1.1.1	192.168.2.4	0xa993	No error (0)	js.hscollectedforms.net	104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:01.701697111 CET	1.1.1.1	192.168.2.4	0x7ede	No error (0)	js.hsforms.net	104.18.142.119	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:01.701697111 CET	1.1.1.1	192.168.2.4	0x7ede	No error (0)	js.hsforms.net	104.18.141.119	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:01.701733112 CET	1.1.1.1	192.168.2.4	0x8eb8	No error (0)	js.hsforms.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:02.792346001 CET	1.1.1.1	192.168.2.4	0xbcd7	No error (0)	forms.hscollectedforms.net	104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.792346001 CET	1.1.1.1	192.168.2.4	0xbcd7	No error (0)	forms.hscollectedforms.net	104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.792346001 CET	1.1.1.1	192.168.2.4	0xbcd7	No error (0)	forms.hscollectedforms.net	104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.792346001 CET	1.1.1.1	192.168.2.4	0xbcd7	No error (0)	forms.hscollectedforms.net	104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.792346001 CET	1.1.1.1	192.168.2.4	0xbcd7	No error (0)	forms.hscollectedforms.net	104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.794687986 CET	1.1.1.1	192.168.2.4	0x68f6	No error (0)	forms.hscollectedforms.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:02.811749935 CET	1.1.1.1	192.168.2.4	0x78fe	No error (0)	track.hubspot.com	104.16.118.116	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.811749935 CET	1.1.1.1	192.168.2.4	0x78fe	No error (0)	track.hubspot.com	104.16.117.116	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.813811064 CET	1.1.1.1	192.168.2.4	0x3cc	No error (0)	track.hubspot.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:02.823030949 CET	1.1.1.1	192.168.2.4	0xf934	No error (0)	js.hscollectedforms.net	104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.823030949 CET	1.1.1.1	192.168.2.4	0xf934	No error (0)	js.hscollectedforms.net	104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.823030949 CET	1.1.1.1	192.168.2.4	0xf934	No error (0)	js.hscollectedforms.net	104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.823030949 CET	1.1.1.1	192.168.2.4	0xf934	No error (0)	js.hscollectedforms.net	104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.823030949 CET	1.1.1.1	192.168.2.4	0xf934	No error (0)	js.hscollectedforms.net	104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.824215889 CET	1.1.1.1	192.168.2.4	0x77c2	No error (0)	js.hscollectedforms.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:02.825804949 CET	1.1.1.1	192.168.2.4	0x11f1	No error (0)	js.hs-analytics.net	104.17.175.201	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.825804949 CET	1.1.1.1	192.168.2.4	0x11f1	No error (0)	js.hs-analytics.net	104.16.160.168	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.826054096 CET	1.1.1.1	192.168.2.4	0x6d8e	No error (0)	js.hs-analytics.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:02.828922987 CET	1.1.1.1	192.168.2.4	0xadb6	No error (0)	js.hs-banner.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:02.829034090 CET	1.1.1.1	192.168.2.4	0xd74c	No error (0)	js.hs-banner.com	172.64.147.16	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:02.829034090 CET	1.1.1.1	192.168.2.4	0xd74c	No error (0)	js.hs-banner.com	104.18.40.240	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.517864943 CET	1.1.1.1	192.168.2.4	0xdae2	No error (0)	forms-na1.hsforms.com	104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.517864943 CET	1.1.1.1	192.168.2.4	0xdae2	No error (0)	forms-na1.hsforms.com	104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.518661976 CET	1.1.1.1	192.168.2.4	0x64e2	No error (0)	forms-na1.hsforms.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:03.555380106 CET	1.1.1.1	192.168.2.4	0xd208	No error (0)	forms.hsforms.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:03.555476904 CET	1.1.1.1	192.168.2.4	0x12d6	No error (0)	forms.hsforms.com	104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.555476904 CET	1.1.1.1	192.168.2.4	0x12d6	No error (0)	forms.hsforms.com	104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.590147018 CET	1.1.1.1	192.168.2.4	0xde57	No error (0)	48586112.fs1.hubspotusercontent-na1.net	104.18.41.124	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.590147018 CET	1.1.1.1	192.168.2.4	0xde57	No error (0)	48586112.fs1.hubspotusercontent-na1.net	172.64.146.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:03.590898037 CET	1.1.1.1	192.168.2.4	0x26b1	No error (0)	48586112.fs1.hubspotusercontent-na1.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:04.782371044 CET	1.1.1.1	192.168.2.4	0x68db	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:04.782428026 CET	1.1.1.1	192.168.2.4	0x20	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908862114 CET	1.1.1.1	192.168.2.4	0x320f	No error (0)	forms.hscollectedforms.net	104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908862114 CET	1.1.1.1	192.168.2.4	0x320f	No error (0)	forms.hscollectedforms.net	104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908862114 CET	1.1.1.1	192.168.2.4	0x320f	No error (0)	forms.hscollectedforms.net	104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908862114 CET	1.1.1.1	192.168.2.4	0x320f	No error (0)	forms.hscollectedforms.net	104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908862114 CET	1.1.1.1	192.168.2.4	0x320f	No error (0)	forms.hscollectedforms.net	104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908896923 CET	1.1.1.1	192.168.2.4	0xaf0e	No error (0)	track.hubspot.com	104.16.118.116	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908896923 CET	1.1.1.1	192.168.2.4	0xaf0e	No error (0)	track.hubspot.com	104.16.117.116	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:04.908926964 CET	1.1.1.1	192.168.2.4	0x1553	No error (0)	forms.hscollectedforms.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:04.908957958 CET	1.1.1.1	192.168.2.4	0xf965	No error (0)	track.hubspot.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:05.525665998 CET	1.1.1.1	192.168.2.4	0x4eef	No error (0)	forms-na1.hsforms.com	104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:05.525665998 CET	1.1.1.1	192.168.2.4	0x4eef	No error (0)	forms-na1.hsforms.com	104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:05.525708914 CET	1.1.1.1	192.168.2.4	0xe58a	No error (0)	forms-na1.hsforms.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:06.169540882 CET	1.1.1.1	192.168.2.4	0x8da9	No error (0)	48586112.fs1.hubspotusercontent-na1.net		65	IN (0x0001)	false
Dec 18, 2024 22:14:06.171708107 CET	1.1.1.1	192.168.2.4	0x133f	No error (0)	48586112.fs1.hubspotusercontent-na1.net	104.18.41.124	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:06.171708107 CET	1.1.1.1	192.168.2.4	0x133f	No error (0)	48586112.fs1.hubspotusercontent-na1.net	172.64.146.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:07.454613924 CET	1.1.1.1	192.168.2.4	0xa549	No error (0)	www.google.com	172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:07.454647064 CET	1.1.1.1	192.168.2.4	0x7e49	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:11.289094925 CET	1.1.1.1	192.168.2.4	0xcce3	No error (0)	www.google.com	172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 18, 2024 22:14:11.289930105 CET	1.1.1.1	192.168.2.4	0x94d5	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 18, 2024 22:14:35.063781023 CET	1.1.1.1	192.168.2.4	0xe817	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

share.hsforms.com

https:

static.hsappstatic.net

js.hs-scripts.com

js.hsforms.net

js.hscollectedforms.net

js.hs-banner.com

js.hs-analytics.net

forms.hsforms.com

forms.hscollectedforms.net

track.hubspot.com

forms-na1.hsforms.com

48586112.fs1.hubspotusercontent-na1.net

www.google.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:13:57 UTC	688	OUT	GET /1IRrYqkWKQoiBbzgMszUPYQsxda8 HTTP/1.1 Host: share.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:13:58 UTC	1270	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:13:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Wed, 18 Dec 2024 15:50:01 UTC x-amz-server-side-encryption: AES256 x-amz-meta-ao: {"allowIFrame":"always"} x-amz-version-id: hNQ.tnW29dOByIvl5AaorVGQ0.S0dYfJ vary: origin x-cache: Hit from cloudfront via: 1.1 caafbc8a9aa04b09dd564a3ddef60622.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: ig850FRsGA_lTD6mBHulfn0kYX-T6a4zQgHdmJZ039SBFDhOTQYFaw== Age: 1250 access-control-allow-credentials: false Cache-Control: max-age=600 x-hs-target-asset: forms-submission-pages/static-1.5536/html/share.html x-content-type-options: nosniff x-hs-cache-status: HIT x-envoy-upstream-service-time: 0 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 69488692-b0eb-4bd7-9498-91f6d2af61cb x-evy-trace-served-by-pod: iad02/star-td/envoy-proxy-5695886f75-6s2pm x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 69488692-b0eb-4bd7-9498-91f6d2af61cb cache-tag: staticjsapp-forms-submission-pages-web-prod,staticjsapp-prod CF-Cache-Status: DYNAMIC
2024-12-18 21:13:58 UTC	584	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 66 61 51 49 56 6a 68 76 71 4e 74 33 72 72 65 4b 55 33 46 6a 76 49 77 4b 69 37 6b 57 4f 66 61 70 30 42 64 67 37 68 2e 64 73 78 30 2d 31 37 33 34 35 35 36 34 33 38 2d 31 2e 30 2e 31 2e 31 2d 72 43 52 67 46 50 59 36 43 65 70 4c 52 62 46 57 48 6c 72 55 41 77 46 2e 65 52 38 69 45 6f 42 5a 78 52 6b 6e 35 45 58 67 49 66 56 6e 52 72 72 35 32 70 4c 5f 51 47 31 75 2e 72 67 58 32 4d 45 6d 50 35 70 6d 38 39 62 63 7a 46 4f 68 78 69 68 79 67 77 72 77 64 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 31 38 2d 44 65 63 2d 32 34 20 32 31 3a 34 33 3a 35 38 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; path=/; expires=Wed, 18-Dec-24 21:43:58 GMT; domain=.hsforms.com; HttpOnly; Secure;
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 33 34 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 3c 74 69 74 6c 65 3e 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 Data Ascii: 3470<!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><link rel="preconnect" href="https://static.hsappstatic.net" crossorigin="anonymous"/><title>Form</title><meta name="viewport"
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 2e 68 73 46 6f 72 6d 73 4f 6e 52 65 61 64 79 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 5f 68 73 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 69 73 61 62 6c 65 64 48 73 50 6f 70 75 70 73 20 3d 20 5b 27 41 44 53 27 2c 20 27 4c 45 41 44 46 4c 4f 57 27 2c 20 27 4c 49 56 45 5f 43 48 41 54 27 2c 20 27 46 45 45 44 42 41 43 4b 27 2c 20 27 43 41 4c 4c 53 5f 54 4f 5f 41 43 54 49 4f 4e 27 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 51 61 20 3d 20 69 73 51 61 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 4c 6f 63 61 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 5b 30 5d 20 3d Data Ascii: .hsFormsOnReady = []; window._hsq = window._hsq \|\| []; window.disabledHsPopups = ['ADS', 'LEADFLOW', 'LIVE_CHAT', 'FEEDBACK', 'CALLS_TO_ACTION']; window.isQa = isQa; window.isLocal = window.location.hostname.split('.')[0] =
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 2f 66 6f 72 6d 73 2d 65 6d 62 65 64 2f 73 74 61 74 69 63 2f 62 75 6e 64 6c 65 73 2f 70 72 6f 6a 65 63 74 2d 76 33 2e 6a 73 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 70 69 48 75 62 73 70 6f 74 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 42 75 69 6c 64 65 72 73 5b 27 61 70 69 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 27 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 66 6f 72 6d 73 48 73 46 6f 72 6d 73 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 42 75 69 6c 64 65 72 73 5b 27 66 6f 72 6d 73 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 3d 20 64 6f 6d Data Ascii: hsappstatic.net/forms-embed/static/bundles/project-v3.js' } }; window.apiHubspotUrl = domainBuilders['api.hubspot.com'](); window.formsHsFormsUrl = domainBuilders['forms.hsforms.com'](); window.jsHsFormsUrl = dom
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 61 6c 20 3f 20 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 3a 20 20 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 2b 20 27 2f 66 6f 72 6d 73 2f 65 6d 62 65 64 2f 27 20 2b 20 68 73 56 65 72 73 69 6f 6e 20 2b 20 27 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 4a 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 4a 73 2e 64 65 66 65 72 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6e 73 50 72 65 66 65 74 63 68 4a 73 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6e 73 50 72 65 66 65 74 63 68 46 6f 72 6d 73 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 Data Ascii: al ? jsHsFormsUrl : jsHsFormsUrl + '/forms/embed/' + hsVersion + '.js'; scriptJs.async = true; scriptJs.defer = true; document.head.appendChild(dnsPrefetchJs); document.head.appendChild(dnsPrefetchForms); document
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 68 61 73 48 72 65 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 75 72 6c 54 6f 47 6f 54 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 75 72 6c 54 6f 47 6f 54 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 Data Ascii: pportedBrowser === false) { if (hasHref) { window.location.href = urlToGoTo; } else { window.location = urlToGoTo; } } } } }
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 43 6f 64 65 41 74 28 69 6e 64 65 78 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 77 69 6e 64 6f 77 2e 55 69 6e 74 38 41 72 72 61 79 28 72 65 73 75 6c 74 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 65 72 73 69 6f 6e 46 72 6f 6d 53 79 6d 62 6f 6c 28 73 79 6d 62 6f 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 61 72 73 65 49 6e 74 28 73 79 6d 62 6f 6c 2c 20 33 36 29 20 2b 0a 20 20 20 20 20 20 20 20 20 20 28 69 73 4e 61 4e 28 73 79 6d 62 6f 6c 20 2a 20 31 29 20 26 26 20 73 79 6d 62 6f 6c 20 3d 3d 3d 20 73 79 6d 62 6f 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 20 3f 20 32 36 20 3a 20 30 29 0a 20 20 20 20 Data Ascii: CodeAt(index)); } return new window.Uint8Array(result); } function getVersionFromSymbol(symbol) { return ( parseInt(symbol, 36) + (isNaN(symbol * 1) && symbol === symbol.toUpperCase() ? 26 : 0)
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 72 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 67 61 63 79 55 75 69 64 20 3d 20 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 3d 20 4c 45 47 41 43 59 5f 55 55 49 44 5f 49 44 45 4e 54 49 46 49 45 52 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 6c 65 67 61 63 79 55 75 69 64 20 3f 20 32 20 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 47 75 69 64 20 3d 20 42 36 34 54 6f 55 75 69 64 28 0a 20 20 20 20 20 20 20 20 20 20 75 6e 65 73 63 61 70 65 42 61 73 65 36 34 28 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 73 75 62 73 74 72 69 6e 67 28 6f 66 66 73 65 74 2c 20 32 32 20 2b 20 6f 66 66 73 65 74 29 29 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 Data Ascii: ring) { var legacyUuid = encodedString.charAt(0) === LEGACY_UUID_IDENTIFIER; var offset = legacyUuid ? 2 : 1; var formGuid = B64ToUuid( unescapeBase64(encodedString.substring(offset, 22 + offset)) ); retur
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 65 73 74 50 61 72 61 6d 73 2e 72 65 67 69 6f 6e 20 3d 20 67 65 74 48 75 62 6c 65 74 46 72 6f 6d 55 72 6c 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 50 61 72 61 6d 73 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 47 65 74 20 46 6f 72 6d 20 72 65 71 75 65 73 74 20 70 61 72 61 6d 73 20 68 61 73 68 20 66 72 6f 6d 20 75 72 6c 0a 20 20 20 20 20 20 72 65 71 75 65 73 74 4f 62 6a 20 3d 20 70 61 72 73 65 52 65 71 75 65 73 74 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 28 29 3b 0a 0a 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 67 6c 6f 62 61 6c 0a 20 20 20 20 20 20 52 65 71 75 65 73 74 50 61 72 61 6d 73 2e 70 6f 72 74 61 6c 49 64 20 3d 20 72 65 71 75 65 73 74 4f 62 6a 2e 70 6f 72 74 61 6c 49 64 3b 0a 20 20 20 20 20 Data Ascii: estParams.region = getHubletFromUrl(); return requestParams; } // Get Form request params hash from url requestObj = parseRequestParamsFromUrl(); // Set to global RequestParams.portalId = requestObj.portalId;
2024-12-18 21:13:58 UTC	1369	IN	Data Raw: 27 20 7d 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 20 30 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 72 65 61 74 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 20 3d 20 77 69 6e 64 6f 77 2e 68 62 73 70 74 2e 66 6f 72 6d 73 2e 63 72 65 61 74 65 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 6f 6e 28 27 6f 6e 46 6f 72 6d 52 65 61 64 79 27 2c 20 75 70 64 61 74 65 48 74 6d 6c 4c 61 6e 67 29 3b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 6f 6e 28 27 6f 6e 50 61 67 65 43 68 61 6e 67 65 27 2c 20 73 63 72 6f 6c 6c 54 6f 54 6f 70 29 3b 0a 20 20 20 20 20 Data Ascii: ' }); } catch (e) { window.scrollTo(0, 0); } } create = function () { instance = window.hbspt.forms.create(context); instance.on('onFormReady', updateHtmlLang); instance.on('onPageChange', scrollToTop);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	104.17.172.91	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:13:59 UTC	615	OUT	GET /forms-submission-pages/static-1.5536/bundles/share-legacy.js HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:00 UTC	1305	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Wed, 18 Dec 2024 14:48:07 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: IieDg0.PbbUg1q7J9fsYtvJAbHi1nH6A etag: W/"1e93b7fc6774b145a478bdbb6c9b7c5c" x-cache: Miss from cloudfront via: 1.1 fb1dc2e3bf4105b403e3bfa3a5067970.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: sOw5nY5kq6tzQ-OYpHTEu9QLYNDs--8DIcmKJtcbw_wsYg4i3NzZeA== CF-Cache-Status: HIT Age: 19431 Expires: Thu, 18 Dec 2025 21:14:00 GMT Cache-Control: public, max-age=31536000 Set-Cookie: __cf_bm=DW9j2rlCO8liwaQl1iqKAR8Y5IqvNGGJewAbDWUkznU-1734556440-1.0.1.1-NAj35uGS084kWJvrRvUzM5STVImkeU4kzGtCKfGT.lkn7vQhgm3g7x9GhWktehvXWH1TUnVDbCa2fz4sbAwnOw; path=/; expires=Wed, 18-Dec-24 21:44:00 GMT; domain=.hsappstatic.net; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lGIWW33plYaaFLb1MyxBxIVic1QAWWSTd%2BnEh3DWj2VTprnDIcPM6atG%2Fi5dAvvNlL1neBnfiNK%2FwBIXqFOv3w6XLoW2XSBvTmGqCqZysxzZFym3nZC1tQ0xB6V0fKeC4e07Vsod1Fg%3D"}],"group":"cf-nel","max_age":604800}
2024-12-18 21:14:00 UTC	286	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-MethodServer: cloudflareC
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 63 36 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 68 73 66 6f 72 6d 73 22 2c 72 3d 7b 68 73 66 6f 72 6d 73 3a 7b 70 72 6f 64 3a 22 68 73 66 6f 72 6d 73 2e 63 6f 6d 22 2c 71 61 3a 22 68 73 66 6f 72 6d 73 71 61 2e 63 6f 6d 22 7d 7d 2c 6e 3d 22 73 68 61 72 65 22 2c 6f 3d 22 73 75 72 76 65 79 22 2c 65 3d 7b 5b 6e 5d 3a 22 73 68 61 72 65 22 2c 5b 6f 5d 3a 22 73 75 72 76 65 79 22 7d 2c 73 3d 74 3d 3e 74 26 26 22 6e 61 31 22 21 3d 3d 74 3f 60 2d 24 7b 74 7d 60 3a 22 22 2c 61 3d 74 3d 3e 22 6c 6f 63 61 6c 22 3d 3d 3d 74 7c 7c 22 71 61 22 3d 3d 3d 74 3f 22 71 61 22 3a 22 70 72 6f 64 22 2c 69 3d 74 3d 3e 65 5b 74 5d 2c 63 3d 28 74 2c 6e 29 3d 3e 72 5b 74 5d 5b 61 28 6e 29 5d 2c 75 3d 28 72 2c 6e 3d Data Ascii: c6a!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n=
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 29 3a 28 6c 2d 32 36 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 55 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 68 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 5b 31 5d 3a 6e 75 6c 6c 7d 2c 78 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 2e 63 68 61 72 41 74 28 30 29 3d 3d 3d 64 2c 6e 3d 72 3f 32 3a 31 2c 6f 3d 24 28 49 28 74 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 32 32 2b 6e 29 29 29 3b 72 65 74 75 72 6e 7b 66 6f 72 6d 47 75 69 64 3a 72 3f 6f 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 3a 6f 2c 70 6f 72 74 61 6c 49 64 3a 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 32 32 2b 6e 29 2c 33 36 29 2c 76 65 72 73 69 6f 6e 3a 43 28 74 2e 63 68 61 72 41 74 28 6e Data Ascii: ):(l-26).toString(36).toUpperCase(),U=t=>{const r=h.exec(t);return r&&r.length?r[1]:null},x=t=>{const r=t.charAt(0)===d,n=r?2:1,o=$(I(t.substring(n,22+n)));return{formGuid:r?o.replace(/-/g,""):o,portalId:parseInt(t.substring(22+n),36),version:C(t.charAt(n
2024-12-18 21:14:00 UTC	447	IN	Data Raw: 68 28 5b 22 73 65 74 43 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 2c 44 28 29 5d 29 3b 4b 28 29 2e 6f 6e 46 6f 72 6d 52 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 28 29 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2e 73 65 74 43 6f 6e 74 65 78 74 28 7b 70 61 67 65 55 72 6c 3a 42 28 29 2b 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 61 64 65 64 22 29 7d 29 29 3b 4b 28 29 2e 6f 6e 52 65 6e 64 65 72 45 72 72 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 Data Ascii: h(["setCanonicalUrl",D()]);K().onFormReady((function(){K().currentForm.setContext({pageUrl:B()+""+window.location.search});document.querySelector(".container").classList.add("loaded")}));K().onRenderError((function(){document.querySelector(".container").c
2024-12-18 21:14:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	104.16.140.209	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:13:59 UTC	529	OUT	GET /48586112.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:00 UTC	858	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:00 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: 5742b161-85f0-4c87-b61a-c74d1e73867f access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://share.hsforms.com Last-Modified: Wed, 18 Dec 2024 21:12:52 GMT CF-Cache-Status: HIT Expires: Wed, 18 Dec 2024 21:15:30 GMT Cache-Control: public, max-age=90 Set-Cookie: __cf_bm=tBpYkHFmfkF_nNgBUPQImVykazy4vD7T5lEbpAqmZbU-1734556440-1.0.1.1-9ikge7MO8DqqblLM5VQr1z.NMF3ClrDAK5HSzMSxSdL_mNzV5QZpIS_y._7napbftXJne996AUSjP_CdxXzd2w; path=/; expires=Wed, 18-Dec-24 21:44:00 GMT; domain=.hs-scripts.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f4228f6bf0441db-EWR
2024-12-18 21:14:00 UTC	511	IN	Data Raw: 36 31 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 33 34 35 35 36 32 30 30 30 30 30 2f 34 38 35 38 36 31 31 32 2e Data Ascii: 615// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734556200000/48586112.
2024-12-18 21:14:00 UTC	1053	IN	Data Raw: 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 62 61 6e 6e 65 72 2e 63 6f 6d 2f 76 32 2f 34 38 35 38 36 31 31 32 2f 62 61 6e 6e 65 72 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 Data Ascii: );!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/48586112/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.get
2024-12-18 21:14:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	104.18.142.119	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:13:59 UTC	532	OUT	GET /forms/embed/v3.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:00 UTC	1334	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:00 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:46:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: NleS4zhpR.RgCyKUKjNliOHGyZMPXoaR etag: W/"9045150ea546201948ca19ee2f5bfd0b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c13d71f8919c23db6bbd1c08a4dfb350.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: lUrSNupvw9KxkSLfXTsnR9Pqk6srQhHcPqTUOSSfcusic5ZgUGC89w== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.6926/bundles/project-v3.js&cfRay=8f11614c36a9ad83-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: forms-embed/static-1.6926/bundles/project-v3.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: HIT x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5ca3813e-e124-4b61-bea7-7534677f77a1 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-9vk2x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-12-18 21:14:00 UTC	898	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 35 63 61 33 38 31 33 65 2d 65 31 32 34 2d 34 62 36 31 2d 62 65 61 37 2d 37 35 33 34 36 37 37 66 37 37 61 31 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 33 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 31 32 37 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 69 67 5f 6c 48 6a 4f 49 33 76 76 49 41 41 57 4a 41 51 55 54 31 33 4e 5a 6d 78 6c 78 34 7a 53 6b 30 4f 5a 45 4a 49 4d 46 6a 74 6b 2d 31 37 33 34 35 35 36 34 34 30 2d 31 2e 30 2e 31 2e 31 2d 7a 4f 38 4a 34 69 2e 78 69 66 67 6c 6b 7a 71 7a 39 50 4f 5f 31 6f 49 Data Ascii: x-request-id: 5ca3813e-e124-4b61-bea7-7534677f77a1cache-tag: staticjsapp-forms-embed-v3-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 127Set-Cookie: __cf_bm=ig_lHjOI3vvIAAWJAQUT13NZmxlx4zSk0OZEJIMFjtk-1734556440-1.0.1.1-zO8J4i.xifglkzqz9PO_1oI
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ffa!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 2c 22 2b 5a 32 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 2c 74 3d 22 22 2c 6e 2c 61 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 5b 69 2c 2e 2e 2e 6f 5d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 21 61 2e 6f 76 65 72 77 72 69 74 65 7c 7c 28 65 5b 74 5d 3d 6e 29 3b 65 6c 73 65 7b 28 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 Data Ascii: xOf(n)>=0\|\|(a[n]=e[n])}return a}},"+Z2S":function(e,t,n){"use strict";const r=(e={},t="",n,a={})=>{const[i,...o]=t.split(".");if(0===o.length)e.hasOwnProperty(t)&&!a.overwrite\|\|(e[t]=n);else{(!e.hasOwnProperty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 65 2e 73 70 6c 69 74 28 22 40 22 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 65 3d 3e 65 2e 62 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 41 64 64 72 65 73 73 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 3b 76 61 72 20 70 3d 28 65 3d 7b 7d 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 64 28 65 2e 65 6d 61 69 6c 29 2c 6f 3d 5b 2e 2e 2e 66 28 65 29 2c 2e 2e 2e 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3f 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3a 5b 5d 5d 2c 73 3d 21 21 65 2e 73 75 63 63 65 73 73 2c 6c 3d 21 21 65 2e 65 6d 61 69 6c 53 68 6f 75 6c 64 52 65 73 75 Data Ascii: 6Nfw");const d=e=>e.split("@")[1].toLowerCase(),f=e=>e.blockedDomainAddresses.split(",").map(e=>e.trim());var p=(e={},t,n)=>{const r=[],a=[],i=d(e.email),o=[...f(e),...e.contextBlockedDomains?e.contextBlockedDomains:[]],s=!!e.success,l=!!e.emailShouldResu
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 76 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 61 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 45 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 6b 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 Data Ascii: unction(){return P}));n.d(t,"a",(function(){return F}));n.d(t,"b",(function(){return U}));function T(e){return{type:r.v,payload:e}}function x(e){return{type:r.a,payload:e}}function A(e){return{type:r.E,payload:e}}function L(e){return{type:r.k,payload:e}}c
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 7d 2c 55 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 61 29 2c 66 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 61 2c 74 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 79 2e 61 29 28 74 29 26 26 4f 62 6a 65 63 74 28 75 2e 62 29 28 74 29 29 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 64 29 29 3b 6b 28 7b 75 72 6c 3a 64 2c 70 6f 72 74 61 6c 49 64 3a 73 2c 66 6f 72 6d 49 64 3a 63 2c 65 6d 61 69 6c 3a 74 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 66 29 29 3b 6e 28 41 28 5b 74 2c 7b 72 65 73 75 62 73 63 72 69 62 65 64 3a 21 30 7d 5d 29 29 Data Ascii: },U=([e,t])=>(n,r)=>{const a=r(),s=Object(o.y)(a),c=Object(o.k)(a),d=Object(l.a)(a),f=Object(i.a)(a,t);if(!Object(y.a)(t)&&Object(u.b)(t)){n(Object(v.c)(E.d));k({url:d,portalId:s,formId:c,email:t}).then(()=>{n(Object(v.c)(E.f));n(A([t,{resubscribed:!0}]))
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 7d 29 3b 63 61 73 65 22 73 65 74 46 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 61 29 28 5b 6f 2c 28 29 3d 3e 6e 75 6c 6c 5d 29 2c 75 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 Data Ascii: bmissionError":return Object.assign({},e,{formSubmissionError:t.formSubmissionError});case"setFormSubmissionWarning":return Object.assign({},e,{formSubmissionWarning:t.formSubmissionWarning});default:return e}},l=Object(a.a)([o,()=>null]),u=({children:e})
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 62 65 6c 3a 4f 62 6a 65 63 74 28 75 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c 7d 2c 7b 6c 6f 63 61 6c 65 3a 4f 62 6a 65 63 74 28 70 2e 61 29 28 65 29 7d 29 2c 62 3d 28 65 2c 7b 66 69 65 6c 64 3a 74 7d 29 3d 3e 28 7b 75 70 64 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 67 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 49 6e 70 75 74 53 74 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 65 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 Data Ascii: bel:Object(u.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null},{locale:Object(p.a)(e)}),b=(e,{field:t})=>({update:n=>e(Object(i.g)([t,n])),updateInputState:n=>e(Object(i.e)([t,n])),update
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 7a 69 70 22 3a 72 65 74 75 72 6e 22 70 6f 73 74 61 6c 2d 63 6f 64 65 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 32 52 46 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 6d 67 66 22 29 3b 76 61 72 20 61 3d 65 3d Data Ascii: ;case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"country-name";case"zip":return"postal-code";default:return}};t.a=r},"2RFi":function(e,t,n){"use strict";var r=n("pmgf");var a=e=
2024-12-18 21:14:00 UTC	1369	IN	Data Raw: 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 29 3f 6e 75 6c 6c 3a 60 24 7b 65 7d 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 7d 2c 6f 3d 6e 28 22 47 33 49 50 22 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 28 7b 74 79 70 65 3a 6f 2e 62 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 6c 3d 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3d 3e 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 69 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3b 72 26 26 6e 28 73 28 72 29 29 7d 7d 2c 22 32 5a 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ect(r.a)(t);return Object(a.a)(n)?null:`${e}: ${JSON.stringify(t)}`},o=n("G3IP");n.d(t,"a",(function(){return l}));const s=e=>({type:o.b,payload:e}),l=({message:e,properties:t})=>n=>{const r=i({message:e,properties:t});r&&n(s(r))}},"2Zks":function(e,t,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	104.17.172.91	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:01 UTC	406	OUT	GET /forms-submission-pages/static-1.5536/bundles/share-legacy.js HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:02 UTC	1361	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Wed, 18 Dec 2024 14:48:07 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: IieDg0.PbbUg1q7J9fsYtvJAbHi1nH6A etag: W/"1e93b7fc6774b145a478bdbb6c9b7c5c" x-cache: Miss from cloudfront via: 1.1 cd7dae0c96563a292a61aa72a3e889e0.cloudfront.net (CloudFront) x-amz-cf-pop: ORD58-P3 x-amz-cf-id: xWS-Z26ijzDe49QHrdsDt6dfvs17hA1Rr2DPCA73YyV1ySwMqrZvPA== CF-Cache-Status: HIT Age: 19137 Expires: Thu, 18 Dec 2025 21:14:01 GMT Cache-Control: public, max-age=31536000 Set-Cookie: __cf_bm=oRvaznjbtNPKz.KDB0Pmb5107Sbr8KeLpf1omHb.vmc-1734556441-1.0.1.1-_HKfhk0c03LJfiTaqBAlUlebgeFZBJ.TG0CPp1mtv3.IR0YvKVRPDK6IzDyTv2y1gfNvXC2Jz9RLRHggbb9rzw; path=/; expires=Wed, 18-Dec-24 21:44:01 GMT; domain=.hsappstatic.net; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B4t3kZUd4wDaiFNNFdOS222gyicEfxML1x0WZd09c5mSrtza7tcHiyCkz%2BPAG%2B0lpgcKV3AM7K8jBDb%2Bm06ZeJODMMTOpXX%2F2%2FYGtiZVfab%2BB9R8nTt4xi4nQ%2Bo2G0Buj4u2HoTll%2BA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-18 21:14:02 UTC	143	IN	Data Raw: 76 61 72 79 3a 20 4f 72 69 67 69 6e 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 34 32 32 39 30 32 32 66 62 61 37 63 61 38 2d 45 57 52 0d 0a 0d 0a Data Ascii: vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-MethodServer: cloudflareCF-RAY: 8f4229022fba7ca8-EWR
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 63 36 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 68 73 66 6f 72 6d 73 22 2c 72 3d 7b 68 73 66 6f 72 6d 73 3a 7b 70 72 6f 64 3a 22 68 73 66 6f 72 6d 73 2e 63 6f 6d 22 2c 71 61 3a 22 68 73 66 6f 72 6d 73 71 61 2e 63 6f 6d 22 7d 7d 2c 6e 3d 22 73 68 61 72 65 22 2c 6f 3d 22 73 75 72 76 65 79 22 2c 65 3d 7b 5b 6e 5d 3a 22 73 68 61 72 65 22 2c 5b 6f 5d 3a 22 73 75 72 76 65 79 22 7d 2c 73 3d 74 3d 3e 74 26 26 22 6e 61 31 22 21 3d 3d 74 3f 60 2d 24 7b 74 7d 60 3a 22 22 2c 61 3d 74 3d 3e 22 6c 6f 63 61 6c 22 3d 3d 3d 74 7c 7c 22 71 61 22 3d 3d 3d 74 3f 22 71 61 22 3a 22 70 72 6f 64 22 2c 69 3d 74 3d 3e 65 5b 74 5d 2c 63 3d 28 74 2c 6e 29 3d 3e 72 5b 74 5d 5b 61 28 6e 29 5d 2c 75 3d 28 72 2c 6e 3d Data Ascii: c6a!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n=
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 29 3a 28 6c 2d 32 36 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 55 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 68 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 5b 31 5d 3a 6e 75 6c 6c 7d 2c 78 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 2e 63 68 61 72 41 74 28 30 29 3d 3d 3d 64 2c 6e 3d 72 3f 32 3a 31 2c 6f 3d 24 28 49 28 74 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 32 32 2b 6e 29 29 29 3b 72 65 74 75 72 6e 7b 66 6f 72 6d 47 75 69 64 3a 72 3f 6f 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 3a 6f 2c 70 6f 72 74 61 6c 49 64 3a 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 32 32 2b 6e 29 2c 33 36 29 2c 76 65 72 73 69 6f 6e 3a 43 28 74 2e 63 68 61 72 41 74 28 6e Data Ascii: ):(l-26).toString(36).toUpperCase(),U=t=>{const r=h.exec(t);return r&&r.length?r[1]:null},x=t=>{const r=t.charAt(0)===d,n=r?2:1,o=$(I(t.substring(n,22+n)));return{formGuid:r?o.replace(/-/g,""):o,portalId:parseInt(t.substring(22+n),36),version:C(t.charAt(n
2024-12-18 21:14:02 UTC	447	IN	Data Raw: 68 28 5b 22 73 65 74 43 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 2c 44 28 29 5d 29 3b 4b 28 29 2e 6f 6e 46 6f 72 6d 52 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 28 29 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2e 73 65 74 43 6f 6e 74 65 78 74 28 7b 70 61 67 65 55 72 6c 3a 42 28 29 2b 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 61 64 65 64 22 29 7d 29 29 3b 4b 28 29 2e 6f 6e 52 65 6e 64 65 72 45 72 72 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 Data Ascii: h(["setCanonicalUrl",D()]);K().onFormReady((function(){K().currentForm.setContext({pageUrl:B()+""+window.location.search});document.querySelector(".container").classList.add("loaded")}));K().onRenderError((function(){document.querySelector(".container").c
2024-12-18 21:14:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	104.16.140.209	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:01 UTC	519	OUT	GET /48586112.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=tBpYkHFmfkF_nNgBUPQImVykazy4vD7T5lEbpAqmZbU-1734556440-1.0.1.1-9ikge7MO8DqqblLM5VQr1z.NMF3ClrDAK5HSzMSxSdL_mNzV5QZpIS_y._7napbftXJne996AUSjP_CdxXzd2w
2024-12-18 21:14:02 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:02 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: 5742b161-85f0-4c87-b61a-c74d1e73867f access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://share.hsforms.com Last-Modified: Wed, 18 Dec 2024 21:12:52 GMT CF-Cache-Status: HIT Age: 2 Expires: Wed, 18 Dec 2024 21:15:32 GMT Cache-Control: public, max-age=90 Server: cloudflare CF-RAY: 8f42290288b68c9b-EWR
2024-12-18 21:14:02 UTC	776	IN	Data Raw: 36 31 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 33 34 35 35 36 32 30 30 30 30 30 2f 34 38 35 38 36 31 31 32 2e Data Ascii: 615// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734556200000/48586112.
2024-12-18 21:14:02 UTC	788	IN	Data Raw: 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 34 38 35 38 36 31 31 32 22 2c 30 2c 7b 22 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 22 3a 22 69 67 6e 6f 72 65 22 2c 22 64 61 74 61 2d 68 73 2d 69 67 6e 6f 72 65 22 3a 74 72 75 65 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 34 38 35 38 36 31 31 32 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: TagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-48586112",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48586112,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});!function(t
2024-12-18 21:14:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	104.16.110.254	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:01 UTC	573	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:02 UTC	1327	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Mon, 09 Dec 2024 13:03:17 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: 8IiNiFnnn0n9avBP.k8Mr32sZxpD8Dx_ etag: W/"ceb8bcb73e5536d8416735a3977d227a" vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,accept-encoding x-cache: Hit from cloudfront via: 1.1 9d2dee9b44718f249b789987d2cbe62c.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: ZFo4wIOhWFSafSppRynaje5SmjR82hh4evAaiVQ4QzZwHe2CZsUVgQ== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1112/bundles/project.js&cfRay=8ef543a459b9f856-ORD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1112/bundles/project.js x-content-type-options: nosniff x-hs-cache-status: MISS x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a74faa9d-daca-4788-9444-27b386108282
2024-12-18 21:14:02 UTC	651	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 38 35 36 64 38 37 38 37 64 35 2d 71 67 37 6e 78 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 37 34 66 61 61 39 64 2d 64 61 63 61 2d 34 37 38 38 2d 39 34 34 34 2d 32 37 62 33 38 36 31 30 38 32 38 32 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-qg7nxx-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: a74faa9d-daca-4788-9444-27b386108282cache-tag: staticjsapp-collected-forms-emb
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=d(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 24 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 66 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[$]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=f((func
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 4f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,O((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?f(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 42 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[B("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 66 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 58 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return fe(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):fe(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=X.f,Ee=S.f,
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=d(e,!0);if(t!==Pe\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 6b 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 44 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 41 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 65 28 29 Data Ascii: 0,forced:!k,sham:!h},{create:qe,defineProperty:De,defineProperties:$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Ae&&kt({target:"JSON",stat:!0,forced:!k\|\|f((function(){var t=Oe()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	172.64.147.16	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:01 UTC	538	OUT	GET /v2/48586112/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:02 UTC	1366	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:02 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: xeBo8vfSlLXv3B2uK14ZB9YmWoIHysNLQV6txPLulj59WGgHIcqWmPF2R1ed+LfcSI8a3W4bYHy2n7Cst8mWmDAYI+BNBczyAyB9Czq3ll8= x-amz-request-id: GF28DWN5WWEBGTSB last-modified: Tue, 17 Dec 2024 15:28:16 GMT etag: W/"41cd614699ee100dd9ec05430200317f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: LPDxMxxufzK3LJpupJ4IC6A8vhrEypJt access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-12-18 21:14:02 UTC	1026	IN	Data Raw: 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 36 30 34 38 30 30 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 38 20 44 65 63 20 32 30 32 34 20 32 Data Ascii: access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timingaccess-control-allow-credentials: trueaccess-control-max-age: 604800timing-allow-origin: *vary: originexpires: Wed, 18 Dec 2024 2
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 6d 61 67 6e 6f 6c 69 61 2d 63 61 72 65 65 72 2e 75 73 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.magnolia-career.us']);_hsp.push(['a
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 2e 72 65 6d 6f 76 65 5f 63 6f 6e 74 65 6e 74 73 5b 65 5d 5d 3d 21 30 3b 65 6c 73 65 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 5f 61 6c 6c 5f 63 6f 6e 74 65 6e 74 73 3d 21 30 3b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3a 5b 5d 7d 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 3d 2f 5e 28 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2b 5c 2d 5c 2e 5c 26 5c 3b 5c 2a 5c 73 5d 2a 3f 29 28 3f 3a 5c 3a 7c 26 2a 30 2a 35 38 7c 26 2a 78 30 2a 33 61 29 2f 69 3b 6f 2e 52 45 4c 41 54 49 56 45 3d 22 5f 5f 52 45 4c 41 54 49 56 45 5f 5f 22 3b 6f 2e 41 4c 4c 3d 22 5f 5f 41 4c 4c 5f 5f 22 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 5f 6e 6f 64 65 3d 66 75 6e Data Ascii: .remove_contents[e]]=!0;else this.config.remove_all_contents=!0;this.transformers=t.transformers?t.transformers:[]}o.REGEX_PROTOCOL=/^([A-Za-z0-9\+\-\.\&\;\\s]?)(?:\:\|&058\|&x03a)/i;o.RELATIVE="__RELATIVE__";o.ALL="__ALL__";o.prototype.clean_node=fun
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 6f 6c 73 5b 61 5d 5b 64 5d 29 7b 67 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 6f 74 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 3b 5f 3d 28 66 3d 68 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 29 29 3f 2d 31 21 3d 6e 28 66 5b 31 5d 2c 67 29 3a 2d 31 21 3d 6e 28 6f 2e 52 45 4c 41 54 49 56 45 2c 67 29 7d 69 66 28 5f 29 7b 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 64 29 29 2e 76 61 6c 75 65 3d 68 2e 76 61 6c 75 65 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 7d 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 5d 29 Data Ascii: ols[a][d]){g=this.config.protocols[a][d];_=(f=h.value.toLowerCase().match(o.REGEX_PROTOCOL))?-1!=n(f[1],g):-1!=n(o.RELATIVE,g)}if(_){(u=document.createAttribute(d)).value=h.value;this.current_element.setAttributeNode(u)}}}if(this.config.add_attributes[a])
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 26 26 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 2e 70 75 73 68 28 69 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 5b 6f 5d 29 3b 72 2e 77 68 69 74 65 6c 69 73 74 3d 21 21 69 2e 77 68 69 74 65 6c 69 73 74 3b 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 26 26 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 3d 73 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 2c 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 29 29 3b 72 2e 6e 6f 64 65 3d 69 2e 6e 6f 64 65 3f 69 2e 6e 6f 64 65 3a 72 2e 6e 6f 64 65 7d 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 63 68 69 6c 64 Data Ascii: hitelist_nodes)&&this.whitelist_nodes.push(i.whitelist_nodes[o]);r.whitelist=!!i.whitelist;i.attr_whitelist&&(r.attr_whitelist=s(r.attr_whitelist,i.attr_whitelist));r.node=i.node?i.node:r.node}return r}for(i=0;i<e.childNodes.length;i++)r.call(this,e.child
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 61 6e 6e 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 20 2e 35 73 20 66 6f 72 77 61 72 64 73 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 Data Ascii: 00vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);animation:banner_animation .5s forwards}#hs-banner-gpc #hs-banner-gpc-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2e
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 Data Ascii: e-x,-50%),200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);opacity:0}99%{opacity:0}to{transform:translate(var(--hs-banner-translate-x,-50%),var(--hs-banner-translate-y,0));-webkit-transform:translate(var
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 6f 70 74 2d 69 6e 2d 62 75 74 74 6f 6e 73 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 73 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 7b 66 6c 65 78 3a 31 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 Data Ascii: eu-cookie-confirmation #hs-eu-opt-in-buttons{flex-grow:1}#hs-eu-cookie-confirmation #hs-eu-confirmation-button,#hs-eu-cookie-confirmation #hs-eu-cookie-settings-button,#hs-eu-cookie-confirmation #hs-eu-decline-button{flex:1;cursor:pointer;border-radius:va
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 64 69 61 20 70 72 69 6e 74 7b 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 31 2e 31 65 6d 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 3b 77 69 64 74 68 3a 6d 69 6e 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 77 69 64 74 68 2c 35 30 2e 33 65 6d 29 2c 31 30 30 Data Ascii: dia print{#hs-banner-parent #hs-modal{display:none!important}}#hs-banner-parent #hs-modal-content{position:absolute;display:flex;flex-direction:column;gap:1.1em;padding:var(--hs-banner-modal-padding,2.2em);width:min(var(--hs-banner-modal-width,50.3em),100
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 65 6d 7d 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 68 73 2d 63 61 74 65 67 6f 72 69 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 63 61 74 65 67 6f 72 79 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 6f 67 72 79 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 72 6e 65 72 73 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 29 3b 70 61 64 64 69 6e 67 3a 32 65 6d 7d 23 Data Ascii: em}#hs-modal-content #hs-categories-container .hs-category-row{display:flex;flex-direction:column;background:var(--hs-banner-modal-cateogry-color,#fff);border-radius:var(--hs-banner-modal-category-corners,var(--hs-banner-modal-corners,12px));padding:2em}#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	104.16.160.168	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:01 UTC	555	OUT	GET /analytics/1734556200000/48586112.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:02 UTC	1332	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:02 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: 57WhTGRHSuFx5XLt2jiz+xoFYWIPaomMbrL9SxhxCgQxvUWM2iZx21KbvJbNOmQ7kDU9drfArjORJHerZeYXVOyHNNzACmootXjv1NxmXr4= x-amz-request-id: C8WWNBAX4TM9FZ3C last-modified: Tue, 17 Dec 2024 15:28:18 GMT etag: W/"a583e36b465b64deadd18075d1bfc8e8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Wed, 18 Dec 2024 21:16:07 GMT x-envoy-upstream-service-time: 37 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: ee275b1b-ceaf-4316-9ab2-69e446a2109b x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-8586d94f84-vkszw x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: ee275b1b-ceaf-4316-9ab2-69e446a2109b CF-Cache-Status: HIT Set-Cookie: __cf_bm=eMlEWH_sY.aYPi9sWr0DpgErgOohtB8Y9ahptXJozoA-1734556442-1.0.1.1-FLAg5c4QXSFnNJ7nXqu.1yXaf8nTYu4sEKnyym0s6LCJPno3zRwjiTG3O.gK4F_QDnbORYY7KiE9X2fwHaJEnw; path=/; expires=Wed, 18-Dec-24 21:44:02 GMT; domain=.hs-analytics.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f4229028fe16a5f-EWR
2024-12-18 21:14:02 UTC	37	IN	Data Raw: 37 61 36 64 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b Data Ascii: 7a6d/** * HubSpot Analytics Track
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 31 31 39 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 38 35 38 36 31 31 32 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c 65 67 61 63 79 27 2c 20 66 61 6c 73 65 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 32 34 38 39 Data Ascii: ing Code Build Number 1.1194 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 48586112]);_hsq.push(['trackPageView']);_hsq.push(['setLegacy', false]);_hsq.push(['addHashedCookieDomain', '22489
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 69 3a 33 26 69 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 29 7d 2c 5f 63 72 79 70 74 6f 55 75 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 2c 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 38 29 3b 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 65 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 65 2e 6c 65 6e 67 74 68 3c 34 3b 29 65 3d 22 30 22 2b 65 3b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 65 5b 30 5d 29 2b 69 28 65 5b 31 5d 29 2b 69 28 65 5b 32 5d 29 2b 69 28 65 5b 33 5d 29 2b 69 28 65 5b 34 5d 29 2b 69 28 65 5b 35 5d 29 Data Ascii: i:3&i\|8).toString(16)}))},_cryptoUuid:function(){var t=window.crypto\|\|window.msCrypto,e=new Uint16Array(8);t.getRandomValues(e);var i=function(t){for(var e=t.toString(16);e.length<4;)e="0"+e;return e};return i(e[0])+i(e[1])+i(e[2])+i(e[3])+i(e[4])+i(e[5])
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 48 6f 73 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 68 6f 73 74 6e 61 6d 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 64 6f 6d 61 69 6e 7d 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 74 68 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 70 61 74 68 6e 61 6d 65 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f Data Ascii: .prototype.getHostName=function(){try{return this.loc.hostname}catch(t){return this.doc.domain}};hstc.global.Context.prototype.getPathName=function(){return this.loc.pathname};hstc.global.Context.prototype.getTop=function(){return this.top};hstc.global.Co
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 74 68 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 7c 7c 6e 65 77 20 44 61 74 65 2c 69 3d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 3b 69 3d 3d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 3b 29 7b 30 3b 65 2e 73 65 74 44 61 74 65 28 65 2e 67 65 74 44 61 74 65 28 29 2b 31 29 7d 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 28 65 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 65 74 48 6f 75 72 73 28 30 29 3b 74 2e 73 65 74 4d 69 6e 75 74 65 73 28 30 29 3b 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 30 29 3b 74 2e 73 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 30 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 Data Ascii: thStart=function(t){for(var e=t\|\|new Date,i=e.getMonth();i==e.getMonth();){0;e.setDate(e.getDate()+1)}return hstc.utils.clearTimePart(e)};hstc.utils.clearTimePart=function(t){t.setHours(0);t.setMinutes(0);t.setSeconds(0);t.setMilliseconds(0);return t};hst
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 26 26 28 72 26 26 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 21 63 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 73 5d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 65 78 74 65 6e 64 28 72 2c 6f 7c 7c 28 6e 75 6c 6c 21 3d 3d 63 2e 6c 65 6e 67 74 68 3f 5b 5d 3a 7b 7d 29 2c 63 29 3a 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 65 5b 73 5d 3d 63 29 29 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 7b 66 6f 72 28 69 20 69 6e 20 74 29 69 66 28 21 31 3d 3d 3d 65 2e 63 61 6c 6c 28 74 5b 69 5d 2c 69 2c 74 5b 69 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 73 3d 74 Data Ascii: &&(r&&c&&"object"==typeof c&&!c.nodeType?e[s]=hstc.utils.extend(r,o\|\|(null!==c.length?[]:{}),c):void 0!==c&&(e[s]=c))}return e};hstc.utils.each=function(t,e){var i,n=0,r=t.length;if(void 0===r){for(i in t)if(!1===e.call(t[i],i,t[i]))break}else for(var s=t
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 74 3d 74 2e 73 70 6c 69 74 28 22 2b 22 29 2e 6a 6f 69 6e 28 22 20 22 29 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 74 72 79 7b 69 3d 65 3f 64 65 63 6f 64 65 55 52 49 28 74 29 3a 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 75 6e 65 73 63 61 70 65 28 74 29 7d 65 6c 73 65 20 69 3d 75 6e 65 73 63 61 70 65 28 74 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 74 6f 73 74 72 2e 63 61 6c 6c 28 74 29 7d 3b 68 Data Ascii: ction(t,e){var i,n=decodeURIComponent;t=t.split("+").join(" ");if(n instanceof Function)try{i=e?decodeURI(t):n(t)}catch(e){i=unescape(t)}else i=unescape(t);return i};hstc.utils.isFunction=function(t){return"[object Function]"===hstc.utils.tostr.call(t)};h
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 32 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 7b 73 3d 68 73 74 63 2e 75 74 69 6c 73 2e 64 65 63 6f 64 65 50 61 72 61 6d 28 6f 5b 31 5d 29 3b 65 26 26 28 73 3d 73 26 26 21 69 73 4e 61 4e 28 73 29 3f 2b 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 76 6f 69 64 20 30 21 3d 3d 6e 5b 73 5d 3f 6e 5b 73 5d 3a 73 29 3b 69 66 28 6c 29 66 6f 72 28 3b 68 3c 3d 6c 3b 68 2b 2b 29 7b 63 3d 22 22 3d 3d 3d 75 5b 68 5d 3f 61 2e 6c 65 6e 67 74 68 3a 75 5b 68 5d 3b 61 3d 61 5b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 5d 3d 68 3c 6c 3f 61 5b 63 5d 7c 7c 28 75 5b 68 2b 31 5d 26 26 69 73 4e 61 4e 28 75 5b 68 2b 31 5d 29 3f 7b 7d 3a 5b 5d 29 3a 73 7d 65 6c 73 65 7b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 3b 68 73 74 63 2e 75 74 69 6c 73 2e Data Ascii: 2===o.length){s=hstc.utils.decodeParam(o[1]);e&&(s=s&&!isNaN(s)?+s:"undefined"===s?void 0:void 0!==n[s]?n[s]:s);if(l)for(;h<=l;h++){c=""===u[h]?a.length:u[h];a=a[c=sanitizeKey(c)]=h<l?a[c]\|\|(u[h+1]&&isNaN(u[h+1])?{}:[]):s}else{c=sanitizeKey(c);hstc.utils.
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 26 26 74 2e 63 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 69 6e 41 72 72 61 79 28 65 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 22 20 22 29 29 3e 2d 31 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 74 72 69 70 4e 75 6d 65 72 69 63 42 72 61 63 6b 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5e 2e 2b 3f 29 5c 5b 28 2e 2b 3f 29 5c 5d 2f 2c 22 24 31 5f 24 32 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 73 65 43 75 72 72 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 74 2e Data Ascii: ion(t,e){if(t&&t.className)return hstc.utils.inArray(e,t.className.split(" "))>-1};hstc.utils.stripNumericBrackets=function(t){return(t\|\|"").replace(/(^.+?)\[(.+?)\]/,"$1_$2")};hstc.utils.parseCurrency=function(t,e){if("number"==typeof t)return t;var i=t.
2024-12-18 21:14:02 UTC	1369	IN	Data Raw: 73 46 75 6e 63 74 69 6f 6e 28 65 2e 69 73 45 71 75 61 6c 29 29 72 65 74 75 72 6e 20 65 2e 69 73 45 71 75 61 6c 28 74 29 3b 76 61 72 20 6e 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 3b 69 66 28 6e 21 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3a 72 65 74 75 72 6e 20 74 3d 3d 53 74 72 69 6e 67 28 65 29 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 20 74 21 3d 2b 74 3f 65 21 3d 2b 65 3a 30 3d 3d 74 3f 31 2f 74 3d 3d 31 2f 65 3a 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 Data Ascii: sFunction(e.isEqual))return e.isEqual(t);var n=toString.call(t);if(n!=toString.call(e))return!1;switch(n){case"[object String]":return t==String(e);case"[object Number]":return t!=+t?e!=+e:0==t?1/t==1/e:t==+e;case"[object Date]":case"[object Boolean]":ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	104.18.80.204	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:02 UTC	742	OUT	GET /embed/v3/form/48586112/211ad8aa-458a-4288-816f-380cb3350f61/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:03 UTC	1306	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:03 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 27 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: c2e2d86c-81b3-4c8e-be7e-359a161d3c1b x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-9cthp x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: c2e2d86c-81b3-4c8e-be7e-359a161d3c1b CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=n3AFvFxRxPJH3_jDx4zRAbHQVq0dcI95f8ZgABoHCds-1734556443-1.0.1.1-X3STdJo460k4.rnsN6P9ghD7YSRO04VV8OP6n3S5pMGnpd0JgEr6EggO2oDnBS4.9wxShpWqdyBm64abeHRIYw; path=/; expires=Wed, 18-Dec-24 21:44:03 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-18 21:14:03 UTC	241	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 32 70 47 46 47 79 6e 45 7a 48 50 79 70 4f 34 4b 4d 38 54 67 67 2e 70 74 33 53 49 37 6c 7a 44 54 44 4f 59 46 45 66 62 5f 58 34 55 2d 31 37 33 34 35 35 36 34 34 33 31 38 30 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 34 32 32 39 30 39 37 64 31 34 38 63 32 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=2pGFGynEzHPypO4KM8Tgg.pt3SI7lzDTDOYFEfb_X4U-1734556443180-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8f4229097d148c24-EWRalt-svc: h3=":443"; ma=86400
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 32 33 64 37 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 38 36 31 31 32 2c 22 67 75 69 64 22 3a 22 32 31 31 61 64 38 61 61 2d 34 35 38 61 2d 34 32 38 38 2d 38 31 36 66 2d 33 38 30 63 62 33 33 35 30 66 36 31 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 2d 70 72 6f 66 69 6c 65 2e 63 6f 6d 2f 3f 68 6c 6e 6a 77 6f 76 64 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 69 65 77 20 2f 20 44 6f 77 6e 6c 6f 61 64 20 28 70 64 66 2e 20 31 33 31 2e 6b 62 29 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c Data Ascii: 23d7{"form":{"portalId":48586112,"guid":"211ad8aa-458a-4288-816f-380cb3350f61","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://re-profile.com/?hlnjwovd","submitText":"View / Download (pdf. 131.kb)","formFieldGroups":[{"fields":[],
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 73 74 79 6c 65 22 3a 22 7b 5c 22 66 6f 6e 74 46 61 6d 69 6c 79 5c 22 3a 5c 22 61 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 5c 22 2c 5c 22 62 61 63 6b 67 72 6f 75 6e 64 57 69 64 74 68 5c 22 3a 5c 22 31 30 30 25 5c 22 2c 5c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 5c 22 3a 5c 22 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 2c 5c 22 62 6f 72 64 65 72 52 61 64 69 75 73 5c 22 3a 5c 22 30 70 78 5c 22 2c 5c 22 70 61 64 64 69 6e 67 5c 22 3a 5c 22 30 70 78 5c 22 2c 5c 22 6c 61 62 65 6c 54 65 78 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 32 31 32 44 33 41 5c 22 2c 5c 22 6c 69 6e 6b 43 6f 6c 6f 72 5c 22 3a 5c 22 23 30 30 30 30 45 45 5c 22 2c 5c 22 63 6c 69 63 6b 65 64 4c 69 6e 6b 43 6f 6c 6f 72 5c 22 3a 5c 22 23 35 35 31 41 38 42 5c Data Ascii: style":"{\"fontFamily\":\"arial, helvetica, sans-serif\",\"backgroundWidth\":\"100%\",\"backgroundColor\":\"transparent\",\"borderRadius\":\"0px\",\"padding\":\"0px\",\"labelTextColor\":\"#212D3A\",\"linkColor\":\"#0000EE\",\"clickedLinkColor\":\"#551A8B\
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 32 34 70 78 7d 2e 68 73 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 68 73 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 37 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 37 33 7d 2e 68 73 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 36 65 35 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 36 36 65 35 30 7d 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: ff;border-radius:3px;border-style:solid;border-width:1px;font-size:14px;padding:12px 24px}.hs-button:hover,.hs-button:focus{background-color:#ff8f73;border-color:#ff8f73}.hs-button:active{background-color:#e66e50;border-color:#e66e50}label{font-size:14px;
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 67 3a 39 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 34 37 35 62 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 62 64 36 65 32 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 Data Ascii: g:9px 10px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif;font-size:16px;font-weight:normal;line-height:22px;color:#33475b;border:1px solid #cbd6e2;box-sizing:border-box;-webkit-border-radius:3px;-moz-border-radius:3px;-ms-border-radius:3px;bor
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 6d 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 37 70 78 20 30 70 78 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 3e 6c 69 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 20 6c 61 62 65 6c 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 69 6e 70 Data Ascii: m:18px;padding:17px 0px}.inputs-list{margin:0 0 5px;width:100%;padding-left:5px}.inputs-list>li{display:block;padding:0;width:100%;padding-top:0}.inputs-list label{float:none;width:auto;padding:0;line-height:18px;white-space:normal;font-weight:normal}.inp
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 72 61 70 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 61 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 30 70 78 29 2c 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: rap}.email-correction,.email-validation{padding-top:3px;font-size:12px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif}.email-correction a,.email-validation a{cursor:pointer}@media(max-width: 400px),(min-device-width: 320px)and (max-device-width
2024-12-18 21:14:03 UTC	969	IN	Data Raw: 68 73 2d 62 75 74 74 6f 6e 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 68 6f 6e 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 74 65 78 74 61 72 65 61 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d Data Ascii: hs-button,.hs-form-field input[type=text],.hs-form-field input[type=email],.hs-form-field input[type=phone],.hs-form-field input[type=number],.hs-form-field input[type=tel],.hs-form-field input[type=date],.hs-form-field textarea{-webkit-appearance:none;-m
2024-12-18 21:14:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	104.18.142.119	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:02 UTC	522	OUT	GET /forms/embed/v3.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ig_lHjOI3vvIAAWJAQUT13NZmxlx4zSk0OZEJIMFjtk-1734556440-1.0.1.1-zO8J4i.xifglkzqz9PO_1oI.8.1ACCX0AbAiQdrnchmJBN8B2v8QiRYsfKUWRcWQ.rtqZKS_UbOsrjrfS9Xl5Q
2024-12-18 21:14:03 UTC	1334	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:46:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: NleS4zhpR.RgCyKUKjNliOHGyZMPXoaR etag: W/"9045150ea546201948ca19ee2f5bfd0b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c13d71f8919c23db6bbd1c08a4dfb350.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: lUrSNupvw9KxkSLfXTsnR9Pqk6srQhHcPqTUOSSfcusic5ZgUGC89w== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.6926/bundles/project-v3.js&cfRay=8f11614c36a9ad83-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: forms-embed/static-1.6926/bundles/project-v3.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: HIT x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5ca3813e-e124-4b61-bea7-7534677f77a1 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-9vk2x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-12-18 21:14:03 UTC	632	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 35 63 61 33 38 31 33 65 2d 65 31 32 34 2d 34 62 36 31 2d 62 65 61 37 2d 37 35 33 34 36 37 37 66 37 37 61 31 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 33 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 31 33 30 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 36 25 32 42 34 6f 35 41 32 42 55 61 31 6c 4f 33 66 6d 4b 49 75 67 45 7a 63 39 48 Data Ascii: x-request-id: 5ca3813e-e124-4b61-bea7-7534677f77a1cache-tag: staticjsapp-forms-embed-v3-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 130Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=46%2B4o5A2BUa1lO3fmKIugEzc9H
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ff9!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 2c 22 2b 5a 32 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 2c 74 3d 22 22 2c 6e 2c 61 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 5b 69 2c 2e 2e 2e 6f 5d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 21 61 2e 6f 76 65 72 77 72 69 74 65 7c 7c 28 65 5b 74 5d 3d 6e 29 3b 65 6c 73 65 7b 28 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 Data Ascii: xOf(n)>=0\|\|(a[n]=e[n])}return a}},"+Z2S":function(e,t,n){"use strict";const r=(e={},t="",n,a={})=>{const[i,...o]=t.split(".");if(0===o.length)e.hasOwnProperty(t)&&!a.overwrite\|\|(e[t]=n);else{(!e.hasOwnProperty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 65 2e 73 70 6c 69 74 28 22 40 22 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 65 3d 3e 65 2e 62 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 41 64 64 72 65 73 73 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 3b 76 61 72 20 70 3d 28 65 3d 7b 7d 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 64 28 65 2e 65 6d 61 69 6c 29 2c 6f 3d 5b 2e 2e 2e 66 28 65 29 2c 2e 2e 2e 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3f 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3a 5b 5d 5d 2c 73 3d 21 21 65 2e 73 75 63 63 65 73 73 2c 6c 3d 21 21 65 2e 65 6d 61 69 6c 53 68 6f 75 6c 64 52 65 73 75 Data Ascii: 6Nfw");const d=e=>e.split("@")[1].toLowerCase(),f=e=>e.blockedDomainAddresses.split(",").map(e=>e.trim());var p=(e={},t,n)=>{const r=[],a=[],i=d(e.email),o=[...f(e),...e.contextBlockedDomains?e.contextBlockedDomains:[]],s=!!e.success,l=!!e.emailShouldResu
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 76 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 61 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 45 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 6b 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 Data Ascii: unction(){return P}));n.d(t,"a",(function(){return F}));n.d(t,"b",(function(){return U}));function T(e){return{type:r.v,payload:e}}function x(e){return{type:r.a,payload:e}}function A(e){return{type:r.E,payload:e}}function L(e){return{type:r.k,payload:e}}c
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 7d 2c 55 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 61 29 2c 66 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 61 2c 74 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 79 2e 61 29 28 74 29 26 26 4f 62 6a 65 63 74 28 75 2e 62 29 28 74 29 29 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 64 29 29 3b 6b 28 7b 75 72 6c 3a 64 2c 70 6f 72 74 61 6c 49 64 3a 73 2c 66 6f 72 6d 49 64 3a 63 2c 65 6d 61 69 6c 3a 74 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 66 29 29 3b 6e 28 41 28 5b 74 2c 7b 72 65 73 75 62 73 63 72 69 62 65 64 3a 21 30 7d 5d 29 29 Data Ascii: },U=([e,t])=>(n,r)=>{const a=r(),s=Object(o.y)(a),c=Object(o.k)(a),d=Object(l.a)(a),f=Object(i.a)(a,t);if(!Object(y.a)(t)&&Object(u.b)(t)){n(Object(v.c)(E.d));k({url:d,portalId:s,formId:c,email:t}).then(()=>{n(Object(v.c)(E.f));n(A([t,{resubscribed:!0}]))
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 7d 29 3b 63 61 73 65 22 73 65 74 46 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 61 29 28 5b 6f 2c 28 29 3d 3e 6e 75 6c 6c 5d 29 2c 75 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 Data Ascii: bmissionError":return Object.assign({},e,{formSubmissionError:t.formSubmissionError});case"setFormSubmissionWarning":return Object.assign({},e,{formSubmissionWarning:t.formSubmissionWarning});default:return e}},l=Object(a.a)([o,()=>null]),u=({children:e})
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 62 65 6c 3a 4f 62 6a 65 63 74 28 75 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c 7d 2c 7b 6c 6f 63 61 6c 65 3a 4f 62 6a 65 63 74 28 70 2e 61 29 28 65 29 7d 29 2c 62 3d 28 65 2c 7b 66 69 65 6c 64 3a 74 7d 29 3d 3e 28 7b 75 70 64 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 67 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 49 6e 70 75 74 53 74 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 65 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 Data Ascii: bel:Object(u.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null},{locale:Object(p.a)(e)}),b=(e,{field:t})=>({update:n=>e(Object(i.g)([t,n])),updateInputState:n=>e(Object(i.e)([t,n])),update
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 7a 69 70 22 3a 72 65 74 75 72 6e 22 70 6f 73 74 61 6c 2d 63 6f 64 65 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 32 52 46 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 6d 67 66 22 29 3b 76 61 72 20 61 3d 65 3d Data Ascii: ;case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"country-name";case"zip":return"postal-code";default:return}};t.a=r},"2RFi":function(e,t,n){"use strict";var r=n("pmgf");var a=e=
2024-12-18 21:14:03 UTC	1369	IN	Data Raw: 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 29 3f 6e 75 6c 6c 3a 60 24 7b 65 7d 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 7d 2c 6f 3d 6e 28 22 47 33 49 50 22 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 28 7b 74 79 70 65 3a 6f 2e 62 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 6c 3d 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3d 3e 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 69 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3b 72 26 26 6e 28 73 28 72 29 29 7d 7d 2c 22 32 5a 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ect(r.a)(t);return Object(a.a)(n)?null:`${e}: ${JSON.stringify(t)}`},o=n("G3IP");n.d(t,"a",(function(){return l}));const s=e=>({type:o.b,payload:e}),l=({message:e,properties:t})=>n=>{const r=i({message:e,properties:t});r&&n(s(r))}},"2Zks":function(e,t,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49758	104.17.172.91	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:03 UTC	806	OUT	GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=oRvaznjbtNPKz.KDB0Pmb5107Sbr8KeLpf1omHb.vmc-1734556441-1.0.1.1-_HKfhk0c03LJfiTaqBAlUlebgeFZBJ.TG0CPp1mtv3.IR0YvKVRPDK6IzDyTv2y1gfNvXC2Jz9RLRHggbb9rzw
2024-12-18 21:14:04 UTC	1348	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:04 GMT Content-Type: image/webp Content-Length: 450 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=1386 Content-Disposition: inline; filename="favicon-32x32.webp" etag: "b29cd4fae32431fd350ffa1394aa4ee6" last-modified: Wed, 11 Dec 2024 17:37:25 GMT via: 1.1 2b2491fc3c8b84a7fd8dd41a09ba5510.cloudfront.net (CloudFront) x-amz-cf-id: Q8_Nq_wwmGwlCWrYeoREqRqX-JV7QuvJiwNMnTEhpL5cwvJjtElU4A== x-amz-cf-pop: BOS50-P4 x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: m5BtXInt1MshKT3PP_DHy5f_9fvyzpVU x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 616604 Expires: Thu, 18 Dec 2025 21:14:04 GMT Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A1yNdHrm9jrN3UmyzgWlzmRmJIaYM%2BVnwixe11HfNwA9giQu9%2F9kyMRltp5tjHhq8Q7o8Y0apYDpMgL0HQpq9flKVR54a7HZczlgmkj%2BfaHNcMc31HVeDpZ8trFCHzwMPlpOsHMW5%2F0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Server: cloudflare CF-RAY: 8f42291018145e5f-EWR
2024-12-18 21:14:04 UTC	21	IN	Data Raw: 52 49 46 46 ba 01 00 00 57 45 42 50 56 50 38 4c ae 01 00 00 2f Data Ascii: RIFFWEBPVP8L/
2024-12-18 21:14:04 UTC	429	IN	Data Raw: 1f c0 07 10 16 88 8d 24 29 92 fc 0e ef 5f b7 74 67 c1 3c 63 3e 33 a9 ff cd 82 02 00 00 c1 66 b6 cd db b6 91 6c db 4c 7e b2 ed a7 27 db b6 6d 26 db b6 c9 c0 6d db 46 74 db db 33 77 9f 18 07 09 20 f0 ef 7e f0 88 57 2d 9d e8 ca 7d 42 80 2e 42 d4 e6 bf 8c 63 2d 81 15 6e 40 03 bd df 05 ac 7d 54 7e 38 2d 11 e2 bb ec 92 5a c0 c3 6f d5 f1 02 30 ed 95 3f 9e 0b f0 5b ab b2 c9 0a 78 06 48 49 e5 9d f9 58 08 5d 7d 37 a6 ec e5 4e e4 e7 98 86 ba f5 2e 94 c1 2f ee 0c 83 0b 47 c9 b0 3f 5f 2a f1 cf ee 83 af ff 1b 02 63 35 58 0a bd 67 8e 2e e0 04 c7 ac 63 8c f5 40 0a 74 e1 df 09 3f f0 29 1b 98 9b aa 47 cf 72 5e e5 a1 8d 67 5e 7a f2 a0 e0 14 7a cb 0c 11 0d be fd ea 12 6e cd 4f 95 97 3b 32 5b 1a 82 c4 9b fc 36 cb 3d a5 2d 0d 58 6a e5 cf a9 49 4b 9e 2a 43 a8 1b 5c e9 28 df 8a Data Ascii: $)_tg<c>3flL~'m&mFt3w ~W-}B.Bc-n@}T~8-Zo0?[xHIX]}7N./G?_c5Xg.c@t?)Gr^g^zznO;2[6=-XjIKC\(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	104.16.108.254	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	641	OUT	GET /collected-forms/v1/config/json?portalId=48586112&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:04 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:04 GMT Content-Type: application/json;charset=utf-8 Content-Length: 136 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 9 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 50af3687-86bf-42f7-b7f2-0030864e5757 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-4wq5t x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 50af3687-86bf-42f7-b7f2-0030864e5757 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=ZrLqa.bB2oNC3yuG1EYht6lHNfGfTLMuzkOHwqMnSHc-1734556444-1.0.1.1-bHZB0iVjJpqK9sQgy4NrYZ.CLedmbDbioUQ7uSvwePPoqTQSmgbdIhV3r0mByGaDxwO06kvSgMVyjVG8m3NYmQ; path=/; expires=Wed, 18-Dec-24 21:44:04 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f422910cab27c90-EWR
2024-12-18 21:14:04 UTC	136	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 38 36 31 31 32 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 2d 31 33 36 31 31 32 37 37 31 30 7d Data Ascii: {"portalId":48586112,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-1361127710}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	172.64.147.16	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	528	OUT	GET /v2/48586112/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=JGWks0UadJAM6o4DTXobs.eEvtWgn2uyhfwXD0.kHcc-1734556442-1.0.1.1-Z6Ob282ydJvR9hUozvoBmL8XyLBxxIQLAuYMo7ymZBIiUKx7Dij3hHK9guWHl9tAQSqoHtCieJDSVbGmxcSi1g
2024-12-18 21:14:04 UTC	1366	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:04 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: xeBo8vfSlLXv3B2uK14ZB9YmWoIHysNLQV6txPLulj59WGgHIcqWmPF2R1ed+LfcSI8a3W4bYHy2n7Cst8mWmDAYI+BNBczyAyB9Czq3ll8= x-amz-request-id: GF28DWN5WWEBGTSB last-modified: Tue, 17 Dec 2024 15:28:16 GMT etag: W/"41cd614699ee100dd9ec05430200317f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: LPDxMxxufzK3LJpupJ4IC6A8vhrEypJt access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-12-18 21:14:04 UTC	762	IN	Data Raw: 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 36 30 34 38 30 30 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 38 20 44 65 63 20 32 30 32 34 20 32 Data Ascii: access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timingaccess-control-allow-credentials: trueaccess-control-max-age: 604800timing-allow-origin: *vary: originexpires: Wed, 18 Dec 2024 2
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 6d 61 67 6e 6f 6c 69 61 2d 63 61 72 65 65 72 2e 75 73 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.magnolia-career.us']);_hsp.push(['a
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 2e 72 65 6d 6f 76 65 5f 63 6f 6e 74 65 6e 74 73 5b 65 5d 5d 3d 21 30 3b 65 6c 73 65 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 5f 61 6c 6c 5f 63 6f 6e 74 65 6e 74 73 3d 21 30 3b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3a 5b 5d 7d 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 3d 2f 5e 28 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2b 5c 2d 5c 2e 5c 26 5c 3b 5c 2a 5c 73 5d 2a 3f 29 28 3f 3a 5c 3a 7c 26 2a 30 2a 35 38 7c 26 2a 78 30 2a 33 61 29 2f 69 3b 6f 2e 52 45 4c 41 54 49 56 45 3d 22 5f 5f 52 45 4c 41 54 49 56 45 5f 5f 22 3b 6f 2e 41 4c 4c 3d 22 5f 5f 41 4c 4c 5f 5f 22 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 5f 6e 6f 64 65 3d 66 75 6e Data Ascii: .remove_contents[e]]=!0;else this.config.remove_all_contents=!0;this.transformers=t.transformers?t.transformers:[]}o.REGEX_PROTOCOL=/^([A-Za-z0-9\+\-\.\&\;\\s]?)(?:\:\|&058\|&x03a)/i;o.RELATIVE="__RELATIVE__";o.ALL="__ALL__";o.prototype.clean_node=fun
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 6f 6c 73 5b 61 5d 5b 64 5d 29 7b 67 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 6f 74 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 3b 5f 3d 28 66 3d 68 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 29 29 3f 2d 31 21 3d 6e 28 66 5b 31 5d 2c 67 29 3a 2d 31 21 3d 6e 28 6f 2e 52 45 4c 41 54 49 56 45 2c 67 29 7d 69 66 28 5f 29 7b 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 64 29 29 2e 76 61 6c 75 65 3d 68 2e 76 61 6c 75 65 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 7d 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 5d 29 Data Ascii: ols[a][d]){g=this.config.protocols[a][d];_=(f=h.value.toLowerCase().match(o.REGEX_PROTOCOL))?-1!=n(f[1],g):-1!=n(o.RELATIVE,g)}if(_){(u=document.createAttribute(d)).value=h.value;this.current_element.setAttributeNode(u)}}}if(this.config.add_attributes[a])
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 26 26 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 2e 70 75 73 68 28 69 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 5b 6f 5d 29 3b 72 2e 77 68 69 74 65 6c 69 73 74 3d 21 21 69 2e 77 68 69 74 65 6c 69 73 74 3b 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 26 26 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 3d 73 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 2c 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 29 29 3b 72 2e 6e 6f 64 65 3d 69 2e 6e 6f 64 65 3f 69 2e 6e 6f 64 65 3a 72 2e 6e 6f 64 65 7d 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 63 68 69 6c 64 Data Ascii: hitelist_nodes)&&this.whitelist_nodes.push(i.whitelist_nodes[o]);r.whitelist=!!i.whitelist;i.attr_whitelist&&(r.attr_whitelist=s(r.attr_whitelist,i.attr_whitelist));r.node=i.node?i.node:r.node}return r}for(i=0;i<e.childNodes.length;i++)r.call(this,e.child
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 61 6e 6e 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 20 2e 35 73 20 66 6f 72 77 61 72 64 73 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 Data Ascii: 00vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);animation:banner_animation .5s forwards}#hs-banner-gpc #hs-banner-gpc-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2e
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 Data Ascii: e-x,-50%),200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);opacity:0}99%{opacity:0}to{transform:translate(var(--hs-banner-translate-x,-50%),var(--hs-banner-translate-y,0));-webkit-transform:translate(var
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 6f 70 74 2d 69 6e 2d 62 75 74 74 6f 6e 73 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 73 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 7b 66 6c 65 78 3a 31 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 Data Ascii: eu-cookie-confirmation #hs-eu-opt-in-buttons{flex-grow:1}#hs-eu-cookie-confirmation #hs-eu-confirmation-button,#hs-eu-cookie-confirmation #hs-eu-cookie-settings-button,#hs-eu-cookie-confirmation #hs-eu-decline-button{flex:1;cursor:pointer;border-radius:va
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 64 69 61 20 70 72 69 6e 74 7b 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 31 2e 31 65 6d 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 3b 77 69 64 74 68 3a 6d 69 6e 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 77 69 64 74 68 2c 35 30 2e 33 65 6d 29 2c 31 30 30 Data Ascii: dia print{#hs-banner-parent #hs-modal{display:none!important}}#hs-banner-parent #hs-modal-content{position:absolute;display:flex;flex-direction:column;gap:1.1em;padding:var(--hs-banner-modal-padding,2.2em);width:min(var(--hs-banner-modal-width,50.3em),100
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 65 6d 7d 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 68 73 2d 63 61 74 65 67 6f 72 69 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 63 61 74 65 67 6f 72 79 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 6f 67 72 79 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 72 6e 65 72 73 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 29 3b 70 61 64 64 69 6e 67 3a 32 65 6d 7d 23 Data Ascii: em}#hs-modal-content #hs-categories-container .hs-category-row{display:flex;flex-direction:column;background:var(--hs-banner-modal-cateogry-color,#fff);border-radius:var(--hs-banner-modal-category-corners,var(--hs-banner-modal-corners,12px));padding:2em}#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	104.16.110.254	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	364	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:04 UTC	1355	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Mon, 09 Dec 2024 13:03:17 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: 8IiNiFnnn0n9avBP.k8Mr32sZxpD8Dx_ etag: W/"ceb8bcb73e5536d8416735a3977d227a" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c0b0d7167cc2eb52d8d154aa7fc03a0a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: 8sX57u4JfTrsGzB3lSwHU6fbgllUbXMDTCgr2IYm6pwXFnifpg9f8A== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1112/bundles/project.js&cfRay=8ef5439dc84805c6-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1112/bundles/project.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 13ad2578-347e-440b-bf50-05745e964ba6 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-mglm2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-12-18 21:14:04 UTC	490	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 33 61 64 32 35 37 38 2d 33 34 37 65 2d 34 34 30 62 2d 62 66 35 30 2d 30 35 37 34 35 65 39 36 34 62 61 36 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 33 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 4b 62 6e 4e 4b 64 30 50 5f 6f 32 4a 59 45 48 42 35 53 53 47 63 41 42 59 6d 4f 6d 71 32 46 4e 66 42 65 44 6b 39 6f 64 51 4b 54 49 2d 31 37 33 34 35 35 36 34 34 34 2d 31 2e 30 2e 31 2e 31 2d 6a 2e 6e 38 76 67 74 4d 48 58 4b 44 66 Data Ascii: x-request-id: 13ad2578-347e-440b-bf50-05745e964ba6cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 300Set-Cookie: __cf_bm=KbnNKd0P_o2JYEHB5SSGcABYmOmq2FNfBeDk9odQKTI-1734556444-1.0.1.1-j.n8vgtMHXKDf
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=d(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 24 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 66 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[$]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=f((func
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 4f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,O((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?f(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 42 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[B("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 66 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 58 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return fe(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):fe(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=X.f,Ee=S.f,
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=d(e,!0);if(t!==Pe\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 6b 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 44 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 41 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 65 28 29 Data Ascii: 0,forced:!k,sham:!h},{create:qe,defineProperty:De,defineProperties:$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Ae&&kt({target:"JSON",stat:!0,forced:!k\|\|f((function(){var t=Oe()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	989	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442221&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:04 UTC	1122	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:04 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f422910f81143ef-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 4 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-rkp6r x-evy-trace-virtual-host: all x-hubspot-correlation-id: b9966d8c-135f-4e98-b0a9-3ee8686926a6 x-request-id: b9966d8c-135f-4e98-b0a9-3ee8686926a6 x-robots-tag: none Set-Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; path=/; expires=Wed, 18-Dec-24 21:44:04 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-12-18 21:14:04 UTC	503	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 58 73 52 36 6e 48 50 56 35 30 67 65 65 78 57 69 25 32 42 53 74 6f 5a 41 39 67 31 55 79 6f 74 4e 53 58 31 49 55 35 32 66 44 41 65 4a 74 4b 55 41 50 4c 6d 4e 58 74 48 77 73 71 52 4c 72 7a 6d 64 65 34 73 41 4b 71 47 4d 59 35 6d 6d 32 52 41 6b 63 63 77 5a 31 52 32 48 50 34 54 59 74 51 44 4c 53 62 6a 4e 61 32 49 44 4a 4a 76 77 53 67 7a 49 37 6d 34 64 5a 30 4c 4f 44 49 55 67 4c 32 35 36 65 74 39 4e 74 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PXsR6nHPV50geexWi%2BStoZA9g1UyotNSX1IU52fDAeJtKUAPLmNXtHwsqRLrzmde4sAKqGMY5mm2RAkccwZ1R2HP4TYtQDLSbjNa2IDJJvwSgzI7m4dZ0LODIUgL256et9Nt"}],"group":"cf-nel","max_age":604800}NEL
2024-12-18 21:14:04 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	104.17.175.201	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	545	OUT	GET /analytics/1734556200000/48586112.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=eMlEWH_sY.aYPi9sWr0DpgErgOohtB8Y9ahptXJozoA-1734556442-1.0.1.1-FLAg5c4QXSFnNJ7nXqu.1yXaf8nTYu4sEKnyym0s6LCJPno3zRwjiTG3O.gK4F_QDnbORYY7KiE9X2fwHaJEnw
2024-12-18 21:14:04 UTC	1065	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:04 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: 57WhTGRHSuFx5XLt2jiz+xoFYWIPaomMbrL9SxhxCgQxvUWM2iZx21KbvJbNOmQ7kDU9drfArjORJHerZeYXVOyHNNzACmootXjv1NxmXr4= x-amz-request-id: C8WWNBAX4TM9FZ3C last-modified: Tue, 17 Dec 2024 15:28:18 GMT etag: W/"a583e36b465b64deadd18075d1bfc8e8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Wed, 18 Dec 2024 21:16:07 GMT x-envoy-upstream-service-time: 37 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: ee275b1b-ceaf-4316-9ab2-69e446a2109b x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-8586d94f84-vkszw x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: ee275b1b-ceaf-4316-9ab2-69e446a2109b CF-Cache-Status: HIT Age: 2 Server: cloudflare CF-RAY: 8f422911095f43af-EWR
2024-12-18 21:14:04 UTC	304	IN	Data Raw: 37 62 37 38 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 31 31 39 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 38 35 38 36 31 31 32 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c 65 67 61 63 79 27 2c 20 66 61 6c 73 65 5d 29 3b 0a 5f 68 73 71 2e Data Ascii: 7b78/** * HubSpot Analytics Tracking Code Build Number 1.1194 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 48586112]);_hsq.push(['trackPageView']);_hsq.push(['setLegacy', false]);_hsq.
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 33 33 35 34 36 38 38 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 30 36 32 39 32 38 37 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 35 31 36 35 32 38 38 39 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 33 39 34 33 37 36 36 30 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 65 6e 61 62 6c 65 41 75 74 6f 6d 61 74 69 63 4c 69 6e 6b 65 72 27 2c 20 74 72 75 65 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b Data Ascii: q.push(['addHashedCookieDomain', '233546881']);_hsq.push(['addHashedCookieDomain', '20629287']);_hsq.push(['addHashedCookieDomain', '251652889']);_hsq.push(['addHashedCookieDomain', '239437660']);_hsq.push(['enableAutomaticLinker', true]);_hsq.push([
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 5b 37 5d 29 7d 7d 3b 4d 61 74 68 2e 75 75 69 64 3d 4d 61 74 68 2e 75 75 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 73 74 63 2e 75 74 69 6c 73 2e 6c 6f 67 45 72 72 6f 72 28 6e 65 77 20 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 75 73 65 20 4d 61 74 68 2e 75 75 69 64 28 29 22 29 29 3b 72 65 74 75 72 6e 20 68 73 74 63 2e 4d 61 74 68 2e 75 75 69 64 28 29 7d 3b 28 68 73 74 63 3d 68 73 74 63 7c 7c 7b 7d 29 2e 64 65 62 75 67 3d 21 31 3b 68 73 74 63 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 68 73 74 63 2e 63 6f 6f 6b 69 65 73 2e 43 6f 6f 6b 69 65 2c 65 3d 22 68 73 5f 64 62 67 22 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 23 68 73 64 62 67 Data Ascii: [7])}};Math.uuid=Math.uuid\|\|function(){hstc.utils.logError(new Error("Attempt to use Math.uuid()"));return hstc.Math.uuid()};(hstc=hstc\|\|{}).debug=!1;hstc.log=function(){try{var t=new hstc.cookies.Cookie,e="hs_dbg",i=document.location.hash.indexOf("#hsdbg
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 79 70 65 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 22 3b 74 72 79 7b 74 3d 74 68 69 73 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 69 66 28 70 61 72 65 6e 74 29 74 72 79 7b 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 74 3d 22 22 7d 7d 22 22 3d 3d 3d 74 26 26 28 74 3d 74 68 69 73 2e 64 6f 63 2e 72 65 66 65 72 72 65 72 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e Data Ascii: ype.getParent=function(){return this.parent};hstc.global.Context.prototype.getReferrer=function(){var t="";try{t=this.top.document.referrer}catch(e){if(parent)try{t=this.parent.document.referrer}catch(e){t=""}}""===t&&(t=this.doc.referrer);return t};hstc.
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 63 61 74 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 6c 65 6e 67 74 68 3e 65 3f 74 2e 73 75 62 73 74 72 28 30 2c 65 29 3a 74 3a 22 22 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 65 61 72 63 68 32 64 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 73 3d 74 5b 72 5d 3b 69 66 28 73 26 26 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 73 29 26 26 2d 31 21 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 69 6e 41 72 72 61 79 28 73 5b 65 2d 31 5d 2c 69 29 29 7b 6e 28 73 2c 72 29 3b 74 2e 73 70 6c 69 63 65 28 72 2d 2d 2c 31 29 7d 7d 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 53 Data Ascii: cateString=function(t,e){return t?t.length>e?t.substr(0,e):t:""};hstc.utils.search2dArray=function(t,e,i,n){for(var r=0;r<t.length;r++){var s=t[r];if(s&&hstc.utils.isArray(s)&&-1!==hstc.utils.inArray(s[e-1],i)){n(s,r);t.splice(r--,1)}}};hstc.utils.removeS
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 3d 3d 65 2e 63 61 6c 6c 28 73 2c 6e 2c 73 29 3b 73 3d 74 5b 2b 2b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 69 2c 6e 29 3b 72 65 74 75 72 6e 21 30 7d 69 66 28 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 72 65 74 75 72 6e 20 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 69 29 3b 74 5b 22 6f 6e 22 2b 65 5d 3d 69 7d 3b 68 73 Data Ascii: ==e.call(s,n,s);s=t[++n]);return t};hstc.utils.isDefined=function(t){return void 0!==t};hstc.utils.addEventListener=function(t,e,i,n){if(t.addEventListener){t.addEventListener(e,i,n);return!0}if(t.attachEvent)return t.attachEvent("on"+e,i);t["on"+e]=i};hs
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 63 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 68 61 73 68 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 76 61 72 20 6e 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 65 3d 30 21 3d 3d 28 6e 3d 32 36 36 33 33 38 33 30 34 26 28 65 3d 28 65 3c 3c 36 26 32 36 38 34 33 35 34 35 35 29 2b 6e 2b 28 6e 3c 3c 31 34 29 29 29 3f 65 5e 6e 3e 3e 32 31 3a 65 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 78 74 72 61 63 74 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 Data Ascii: cnow=function(){return(new Date).getTime()};hstc.utils.hashString=function(t){for(var e=0,i=t.length-1;i>=0;i--){var n=t.charCodeAt(i);e=0!==(n=266338304&(e=(e<<6&268435455)+n+(n<<14)))?e^n>>21:e}return e};hstc.utils.extractDomain=function(t){var e=t.spli
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 29 3f 69 5b 63 5d 2e 70 75 73 68 28 73 29 3a 76 6f 69 64 20 30 21 3d 3d 69 5b 63 5d 3f 69 5b 63 5d 3d 5b 69 5b 63 5d 2c 73 5d 3a 69 5b 63 5d 3d 73 7d 7d 65 6c 73 65 20 63 26 26 28 69 5b 63 5d 3d 65 3f 76 6f 69 64 20 30 3a 22 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 5b 5d 3b 65 3d 65 7c 7c 22 26 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 29 2b 22 3d 22 2b 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 65 29 7d 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 Data Ascii: )?i[c].push(s):void 0!==i[c]?i[c]=[i[c],s]:i[c]=s}}else c&&(i[c]=e?void 0:"")}));return i};hstc.utils.param=function(t,e){var i=[];e=e\|\|"&";function n(t,e){i[i.length]=hstc.utils.encodeParam(t)+"="+hstc.utils.encodeParam(e)}for(var r in t)hstc.utils.isArr
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 5d 2a 29 28 5b 5c 64 5c 2e 2c 5d 2b 29 28 5b 5e 5c 64 5c 2e 2c 5d 2a 29 2f 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 2c 72 3d 69 5b 32 5d 2c 73 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2c 22 29 3b 6e 3d 73 2e 6c 65 6e 67 74 68 3e 32 7c 7c 32 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 73 5b 31 5d 2e 6c 65 6e 67 74 68 3e 32 26 26 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 7c 7c 73 5b 30 5d 2e 6c 65 6e 67 74 68 3c 6f 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 32 3d 3d 6f 2e 6c 65 6e 67 74 68 26 26 32 3d 3d 6f 5b 31 5d 2e 6c 65 6e 67 74 68 3f 6f 3a 73 3b 76 61 72 20 63 3d 64 65 63 69 6d 61 6c 50 61 72 74 3d 30 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 7b 64 65 63 69 6d 61 6c 50 61 72 74 3d 6e 2e 70 6f 70 28 29 3b 63 3d 6e 2e 6a 6f 69 6e 28 Data Ascii: ])([\d\.,]+)([^\d\.,])/);if(i){var n,r=i[2],s=r.split("."),o=r.split(",");n=s.length>2\|\|2==s.length&&s[1].length>2&&(0===o.length\|\|s[0].length<o[0].length)\|\|2==o.length&&2==o[1].length?o:s;var c=decimalPart=0;if(n.length>1){decimalPart=n.pop();c=n.join(
2024-12-18 21:14:04 UTC	1369	IN	Data Raw: 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 3d 65 2e 73 6f 75 72 63 65 26 26 74 2e 67 6c 6f 62 61 6c 3d 3d 65 2e 67 6c 6f 62 61 6c 26 26 74 2e 6d 75 6c 74 69 6c 69 6e 65 3d 3d 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 74 2e 69 67 6e 6f 72 65 43 61 73 65 3d 3d 65 2e 69 67 6e 6f 72 65 43 61 73 65 7d 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 66 28 69 5b 72 5d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 30 2c 6f 3d 21 30 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 Data Ascii: se"[object RegExp]":return t.source==e.source&&t.global==e.global&&t.multiline==e.multiline&&t.ignoreCase==e.ignoreCase}if("object"!=typeof t\|\|"object"!=typeof e)return!1;for(var r=i.length;r--;)if(i[r]==t)return!0;i.push(t);var s=0,o=!0;if("[object Array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49764	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:05 UTC	904	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 4 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: fea55f8b-8e67-474c-8abe-441af704e917 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-8gtsz x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: fea55f8b-8e67-474c-8abe-441af704e917 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f42291668621a0f-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49766	104.18.41.124	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	658	OUT	GET /hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png HTTP/1.1 Host: 48586112.fs1.hubspotusercontent-na1.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:05 UTC	1350	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:05 GMT Content-Type: image/webp Content-Length: 158242 Connection: close CF-Ray: 8f4229167af90f51-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 20842 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 Content-Disposition: inline; filename="Screenshot%202024-12-18%20at%2015.webp" ETag: "e5aed6d8dcf9b7e2fde0b8102c53c5dc" Last-Modified: Wed, 18 Dec 2024 15:26:44 GMT Vary: Accept Via: 1.1 078fe53d3a4b452fe5cde4b5d9596b0e.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-184045670205,P-48586112,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=239106 Edge-Cache-Tag: F-184045670205,P-48586112,FLS-ALL Timing-Allow-Origin: 48586112.fs1.hubspotusercontent-na1.net X-Amz-Cf-Id: DWKq-jIiXneAU_vvEzw7ytUxENmnIUp-SkotrqHPDZlFzJqgNgtniQ== X-Amz-Cf-Pop: JFK52-P1 x-amz-id-2: eiRRnQyv50sh5TBspjzDVWLJvhf1AuseEbZs5SEml9A6ZnDNWuNOEqoF9Hf4sn4JXblhSWyh3Tg= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-184045670205,P-48586112,FLS-ALL x-amz-meta-created-unix-time-millis: 1734535603306 x-amz-meta-index-tag: none x-amz-replication-status: PENDING x-amz-request-id: 8SEF197DZZTSDEH7 x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING
2024-12-18 21:14:05 UTC	555	IN	Data Raw: 78 2d 61 6d 7a 2d 76 65 72 73 69 6f 6e 2d 69 64 3a 20 42 38 31 63 51 50 6d 65 49 4b 70 4c 59 30 37 6f 50 31 68 4f 70 6c 7a 59 59 38 38 47 64 39 5a 42 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 69 73 73 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 58 2d 48 53 2d 41 6c 74 65 72 6e 61 74 65 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f Data Ascii: x-amz-version-id: B81cQPmeIKpLY07oP1hOplzYY88Gd9ZBX-Cache: Miss from cloudfrontX-HS-Alternate-Content-Type: text/plainX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneSet-Coo
2024-12-18 21:14:05 UTC	833	IN	Data Raw: 52 49 46 46 1a 6a 02 00 57 45 42 50 56 50 38 4c 0e 6a 02 00 2f 57 49 93 00 cd 40 8e 24 49 91 64 d1 3b 7b 14 a1 bf c2 0d c7 f4 8b e8 ff 04 f0 ae 2a a0 0a a8 82 8a 38 b3 55 fe b2 53 87 6a 39 a7 23 97 9f e3 cd 5f 61 16 91 f6 f0 00 dc a6 2a 55 2e 96 d7 75 5d bc 89 47 36 55 aa 98 e5 a0 32 2b 05 ca ec a6 a9 69 8d 74 94 ea 49 33 32 45 5b 96 a9 01 ce e5 6b 73 79 82 56 42 95 bb 9a 8e c7 88 e5 38 f4 0d f6 2e 73 fd 8a 32 e7 54 53 d3 de e3 5d 75 ca f5 66 ff d1 fe 33 37 70 1b 49 72 24 c5 13 03 de 82 f7 df ac 15 4f 6c 1c 06 8d c5 a0 d0 ca 91 67 d2 6b 10 55 6b 6f db 9c ee 0c 75 ef ad f7 7f a2 ee 1a 23 8c 11 c6 08 93 dd 81 24 45 92 24 49 12 0a ef cd 89 17 f4 ff 1f e6 c7 3e 76 cf d4 12 04 89 d1 ff 09 c0 ff 67 5a 43 99 a4 fb 38 23 57 85 e9 68 0d 93 c4 5d 93 88 24 45 8a b1 Data Ascii: RIFFjWEBPVP8Lj/WI@$Id;{8USj9#_aU.u]G6U2+itI32E[ksyVB8.s2TS]uf37pIr$OlgkUkou#$E$I>vgZC8#Wh]$E
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: f7 09 6c c7 14 6a 66 66 e6 ee bf bd c9 59 c3 ec 80 99 99 79 a6 b0 21 55 61 5b 96 f4 bd 6f 48 80 64 bb 6d 9b 95 e0 c0 4d f9 04 68 e9 1b 2c 2a 6e 33 1e b0 ff 57 26 b7 91 b7 ef 39 0f 15 73 35 33 8b 2d d9 92 2d c9 32 06 ec d0 32 33 33 0d 24 99 d9 dd 3f 0f 2c d3 c0 32 f3 ee f0 4c e2 38 26 c9 16 5a 16 33 75 ab b9 8b b9 ea a1 73 ae cb ee 3a d5 dd 6a 3b 9a e4 d5 f5 9e 1e d9 71 ec 91 27 be 65 db 56 6d 5b 92 a4 d6 fb 80 c9 0b 37 1f be e7 82 aa a9 aa 69 30 e7 ff e6 6b 3e 32 3a a3 99 9a ea d5 4b 87 cf e6 bd 78 4d 1a d4 bd 6d db a4 48 92 64 5b af 88 28 18 38 06 66 46 42 51 d7 54 e3 2c da 7b 1f fe 74 fe fd e6 bd 67 0d 34 14 57 42 a0 83 b9 1b a9 aa 48 40 80 24 29 6e 33 96 52 ce bf 1c c4 ba 9c 10 42 8a 70 aa f8 5f db b6 cc 6d a4 eb be 9f e7 c5 62 10 83 25 cb 1c 27 e9 a4 Data Ascii: ljffYy!Ua[oHdmMh,*n3W&9s53--2233$?,2L8&Z3us:j;q'eVm[7i0k>2:KxMmHd[(8fFBQT,{tg4WBH@$)n3RBp_mb%'
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: be f5 53 0b 9b 13 a3 1b 1f 7a ad 77 bd 73 f6 ae bf 71 e3 f2 ad 1b ee 0d d5 3e 59 fb 04 5c 1c 0e f7 de 6f 97 7f bd 1a 33 7f 7d ea ae ff 4c 73 4f 33 96 c0 90 bb 40 6a e5 38 75 d1 bd b4 71 6f fc d3 f6 9b 3b f9 7d 9f 16 0f 5f 0c 2c e0 de 90 77 83 30 9a 12 1d 7d bb 36 15 94 b1 8d 17 22 a0 3a 2c e0 64 83 4a 7b ed d8 66 7a cd ea 7b ca 0a 2d c0 38 33 c4 18 c0 c0 5c b0 71 b7 52 1d 89 c0 17 eb 1a a7 47 48 56 8a 87 df 90 9c 98 88 dd 13 32 6b c3 f3 a4 04 2d 7d c2 9b 0d ab e9 50 2a 7d cd 90 d2 8e 5c 84 ac f6 83 38 e9 7e cc c4 bf 19 1c d4 db 64 58 bc 97 4c 80 28 20 2f bb 20 5b 40 9b c7 32 d5 f4 3e 08 df fa 01 a6 3d c7 3d a7 83 a5 4b 25 cb e2 95 61 7b 6b 01 ea c6 48 fd c6 40 b0 fe 92 74 11 ba 00 81 15 21 22 a4 05 d5 13 7b 89 0d 2d aa 26 68 01 d1 3d 22 5f 84 c4 93 fb e9 Data Ascii: Szwsq>Y\o3}LsO3@j8uqo;}_,w0}6":,dJ{fz{-83\qRGHV2k-}P*}\8~dXL( / [@2>==K%a{kH@t!"{-&h="_
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: f2 d6 3f 0d 92 d3 c3 ed 72 79 ee 58 4d 6d f1 0f 3f 0e b5 01 4a 48 7a 8c 5e dc 6c 32 e9 e9 e6 21 72 e6 37 40 d4 b4 5f c2 29 e0 97 f1 dd 8f ad 6f fe d1 bf 5c 6c 8e c7 67 cb fb f8 72 6e 4a 08 60 bf b9 50 3d 1f 5c 9c 53 8f b7 ff e3 af 5f 8d 86 b8 ef fb ff 90 80 36 b2 97 59 35 ce 78 4c 0d 31 35 56 7f ef 38 5a 81 a9 27 25 90 26 1c f1 db 6e 77 33 91 e5 ed d3 df 5a c6 5c 20 00 01 28 8d fc f3 a5 3a dd 84 9b e9 17 ff 50 7a 3b b0 1b e8 63 45 9c 1e 83 1f 75 32 56 43 83 ec d9 2c cb bb fe e4 e2 4f 8f 1d 5d fe e1 f1 9f fe 9c af 6f fb cf 93 b3 90 be 18 9c 47 ab 80 73 ea 24 4d 4a 5a 48 a1 d0 87 b2 2f 8d 44 8e 10 00 08 d3 c8 7a 20 9f f8 f6 21 0c b5 b1 5b 97 f8 c9 b3 30 62 27 e5 32 83 03 56 98 4d 8b 2a df 8a 2e eb ac 1c b8 2e c1 f1 d9 05 01 50 13 e9 1e 9e 58 07 7c d5 e7 30 Data Ascii: ?ryXMm?JHz^l2!r7@_)o\lgrnJ`P=\S_6Y5xL15V8Z'%&nw3Z\ (:Pz;cEu2VC,O]oGs$MJZH/Dz ![0b'2VM*..PX\|0
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 22 b7 8b e9 62 36 5c 51 f3 19 e7 a6 5d 28 f4 a1 1e fd 37 90 5c 21 c0 42 ed 65 ef e6 dd 6e e7 3e 65 77 23 b6 67 8e c5 4e 49 bd 18 a6 2f d3 2b dd e5 2f 73 7c a5 93 f9 4d 87 eb fb 6a 3f 96 4e 16 e9 2c df cc f4 82 b1 5b a3 ce 1f a8 d8 c3 04 7f 9d 15 28 04 51 4f 8b 91 7d 78 fc 3a ed d0 3a 7a 11 9c 40 8a e6 d5 c5 72 c0 00 2e 8e c8 bd f7 73 f9 0f d7 f1 ee 7f cd 3f af 8c c2 5b 43 8f 75 cb 52 47 5b d5 da 54 89 f3 55 b9 e0 e5 d2 4e 52 1d 9b 3d 7d dd f3 37 3c 38 13 27 28 89 7d 41 86 76 78 68 17 b6 97 36 db c6 b6 aa 68 54 08 43 28 35 5d f5 d7 66 53 65 d7 68 9f 5f 45 05 c9 65 49 16 2f 8b f9 b1 32 52 5d 4a 0d a8 4a 20 de 08 dc 06 a7 ec 12 39 9e 15 aa fc ae 0e c3 b5 c7 d2 dd cf 24 8b d0 ae 85 67 eb 32 99 ca 66 6b 3a 97 d9 e5 64 17 3b bf 30 a2 12 d9 0c cc 82 71 01 08 24 Data Ascii: "b6\Q](7\!Ben>ew#gNI/+/s\|Mj?N,[(QO}x::z@r.s?[CuRG[TUNR=}7<8'(}Avxh6hTC(5]fSeh_EeI/2R]JJ 9$g2fk:d;0q$
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: dd f4 c7 a6 dd 2f 4c 5f fe ad 1e 7f a6 6b 5f 7a 88 f5 9b 09 7d 86 60 0d df b4 41 69 a2 d2 65 15 a6 0d e6 86 c3 ad e2 58 5f 46 cf a1 8d c5 d0 49 ae 8f 65 60 40 db 3c 19 b3 e4 e6 63 25 1f f4 7a 28 14 87 e0 58 bd b4 fc 8f f1 dd ed d6 fd dd b6 93 79 e2 87 7b 71 1c 0a e8 5d f5 c3 b9 65 7a 89 c3 0d 9f 32 c3 90 eb 62 7e dc 1a de 25 86 d9 d0 4c 34 9b 36 57 cd 54 8d ae ee 57 e1 81 fb bb 92 88 ab 38 5f ef 76 fa f4 78 f4 9c 36 2d b2 c2 cc ba 85 d3 dd 05 ca c7 87 e6 a6 d8 12 50 1c c4 6a bd 6f 28 f1 90 0c 0d 62 c5 b2 b9 62 4b 09 55 2d 2c 82 47 fb c6 6c 48 a6 ba 0b d5 9e 70 7a ca 3f 7a 4e 2b a1 36 80 36 94 34 aa e9 b1 68 76 e7 e6 4a e7 e9 fc ef 6f d2 8a cb 5d 4e 29 97 d1 de 3d b0 f1 08 2f 99 67 02 37 9b cb b9 69 d5 9c ab 73 b8 d5 6f 9e 1f 26 56 fe 6b 9f de 6c 5f 8c e3 Data Ascii: /L_k_z}`AieX_FIe`@<c%z(Xy{q]ez2b~%L46WTW8_vx6-Pjo(bbKU-,GlHpz?zN+664hvJo]N)=/g7iso&Vkl_
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 29 1f 3b a0 6b a7 49 5b 42 27 d8 af a9 90 cd 0b ec 07 f3 7d 16 64 8d 25 f1 71 33 fe cb ab 67 ea a1 de 72 a0 52 00 ab 9b 81 81 d3 2f d7 ea e1 9b 73 b9 76 67 b5 bf 26 d2 71 98 31 38 54 5d 8e 23 19 f9 eb f3 e3 69 ae 67 43 06 98 41 0c cc 9e eb 90 22 b7 16 36 7b 7e 59 9e 3a de ee 6a 9e ed 3e 68 65 ba 07 64 22 02 22 e4 98 b9 32 79 c4 9e 6e 1f ae 42 ce 8f 7f 8d fd 23 7a ea 10 2f db 30 71 40 b3 9f f4 79 6c 6c 43 35 73 2e da c7 b3 45 f8 d5 ea 5d ea cd eb c8 87 b0 ff 21 a5 1f 27 fe db 47 f2 e2 06 59 68 a2 91 e7 b9 67 0f 87 0b 9d 7e e8 cc 5f d0 fe f5 e6 c0 ea dd 9e ec 63 9f 3d f9 2c 34 63 30 78 4e fc 67 a8 72 18 0d 55 32 d5 6e 7a fe f3 39 84 50 fd 32 5d d1 af bd bc 78 72 9c 7f a7 fd 2b 46 c0 62 6d d7 d2 28 97 02 a9 e5 76 fd 99 2a 61 3c fa 77 d1 a4 4a 7e c6 67 ec 72 Data Ascii: );kI[B'}d%q3grR/svg&q18T]#igCA"6{~Y:j>hed""2ynB#z/0q@yllC5s.E]!'GYhg~_c=,4c0xNgrU2nz9P2]xr+Fbm(v*a<wJ~gr
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 20 d1 17 43 f1 3d 1b a4 94 9b e0 a4 94 8c 77 d3 2f ff fb 91 69 1e 6c 5e ec b3 0e eb 7f 3e f0 c8 b9 43 c0 3d 70 81 35 de a7 33 15 6a 64 7e 71 ea d5 cd 60 7d 41 2f af 1f 65 bf 7b 61 7b 5e 75 81 17 2d 88 00 c8 e9 ea 3c f8 76 11 78 1b dd c5 5c a1 b1 b2 4d 8d f5 cc a3 ad 5c 25 07 5c 36 48 f4 f6 97 5d ee f6 11 ac b6 65 6e cb d2 ba 66 3b cf 6c 5a 26 03 78 b8 b0 78 1e 7f 36 9e d8 07 6d f2 53 c9 ec a7 8e db f9 fd 6b 2b 86 66 00 03 86 9c 3e bf 59 c4 93 5d b0 77 ab 9e 87 d5 ae c3 cd be 6c fe a2 9e b5 f3 dc e4 7d a4 16 4f 77 dd fd cf 3d c3 d3 a9 b9 1f dc 57 66 33 37 2e 47 8e ee 8b d3 43 71 5c 55 ef de 46 c6 ed 04 7d d5 a7 52 3b 15 7f 3e 90 ea 0c 02 50 20 40 04 85 68 09 1e 20 00 e8 f5 e7 92 3a 2f 16 98 3f ed a6 d6 b7 b7 fa 2b a3 75 43 71 08 61 16 50 98 fa 99 a9 67 3b Data Ascii: C=w/il^>C=p53jd~q`}A/e{a{^u-<vx\M\%\6H]enf;lZ&xx6mSk+f>Y]wl}Ow=Wf37.GCq\UF}R;>P @h :/?+uCqaPg;
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 86 26 f9 6d 6b da 77 8d 57 0d fb 1b 2a 3e d3 fe 9f fe 3c df 24 67 af e2 54 33 a8 4b 39 dc c7 6d 8f 32 a6 c2 d8 52 fa b4 b6 f9 12 25 d3 aa d0 64 2a 60 e8 1a eb 9d c5 f3 78 f5 69 fa a7 b9 0c 5a 4a db 5c 58 b9 90 b5 a5 4a 36 cb cb 45 5c 36 70 dd 9e c2 01 f7 79 77 93 03 f9 dc 24 03 a8 0a d3 fd 53 c3 c3 41 17 83 06 a5 dc cf 90 cd 2b 67 92 13 01 14 80 5d b4 0c 6f 36 1d 7f ff c4 ee ec a9 8f d3 df 9c 16 0a 98 03 49 b4 58 26 04 b8 ed c2 a7 ce e9 ae 01 bd 79 ac 17 bd 4c 3b 2c c6 95 1b d1 0c 90 80 87 22 75 d7 c7 cb b9 f6 15 da ed 43 9f 0f 9f f6 0f db ea 10 2d c7 e6 75 73 c0 15 f0 b0 c9 b5 8f 9f 1d b7 9f 3c 5c ff 25 a6 7d 3e 1f 97 37 d3 8d cd 41 50 03 6e e9 fc 38 d7 8c f9 bb a2 fe e4 06 df ad b7 1d db 5d cb 79 b4 ec df 99 a5 94 12 68 86 9e fc 17 df db b3 7b 4d bc a8 Data Ascii: &mkwW><$gT3K9m2R%d`xiZJ\XJ6E\6pyw$SA+g]o6IX&yL;,"uC-us<\%}>7APn8]yh{M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49765	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:04 UTC	942	OUT	GET /embed/v3/form/48586112/211ad8aa-458a-4288-816f-380cb3350f61/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:05 UTC	1062	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:05 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 30 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 943a6d80-d53c-4614-9bda-a53203e22a42 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-cs9s5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 943a6d80-d53c-4614-9bda-a53203e22a42 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f4229167df2c411-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:05 UTC	307	IN	Data Raw: 32 33 64 37 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 38 36 31 31 32 2c 22 67 75 69 64 22 3a 22 32 31 31 61 64 38 61 61 2d 34 35 38 61 2d 34 32 38 38 2d 38 31 36 66 2d 33 38 30 63 62 33 33 35 30 66 36 31 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 2d 70 72 6f 66 69 6c 65 2e 63 6f 6d 2f 3f 68 6c 6e 6a 77 6f 76 64 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 69 65 77 20 2f 20 44 6f 77 6e 6c 6f 61 64 20 28 70 64 66 2e 20 31 33 31 2e 6b 62 29 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c Data Ascii: 23d7{"form":{"portalId":48586112,"guid":"211ad8aa-458a-4288-816f-380cb3350f61","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://re-profile.com/?hlnjwovd","submitText":"View / Download (pdf. 131.kb)","formFieldGroups":[{"fields":[],
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 74 65 6e 74 22 3a 22 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 34 38 35 38 36 31 31 32 2e 66 73 31 2e 68 75 62 73 70 6f 74 75 73 65 72 63 6f 6e 74 65 6e 74 2d 6e 61 31 2e 6e 65 74 2f 68 75 62 66 73 2f 34 38 35 38 36 31 31 32 2f 53 63 72 65 65 6e 73 68 6f 74 25 32 30 32 30 32 34 2d 31 32 2d 31 38 25 32 30 61 74 25 32 30 31 35 2e 31 33 2e 33 39 2e 70 6e 67 5c 22 20 73 74 79 6c 65 3d 5c 22 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 5c 22 20 64 61 74 61 2d 69 6d 67 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3d 5c 22 34 2e 30 35 34 32 33 37 32 38 38 31 33 35 35 39 33 5c 22 20 61 6c 74 3d 5c 22 64 6f 77 6e 6c 6f 61 64 20 28 33 35 29 5c 22 20 77 69 64 74 68 3d 5c 22 32 33 39 32 5c 22 20 64 61 74 Data Ascii: tent":"<img src=\"https://48586112.fs1.hubspotusercontent-na1.net/hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png\" style=\"max-width: 100%; max-height: 100%\" data-img-aspect-ratio=\"4.054237288135593\" alt=\"download (35)\" width=\"2392\" dat
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 36 33 38 33 44 45 5c 22 2c 5c 22 68 65 6c 70 54 65 78 74 53 69 7a 65 5c 22 3a 5c 22 31 31 70 78 5c 22 2c 5c 22 6c 65 67 61 6c 43 6f 6e 73 65 6e 74 54 65 78 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 33 33 34 37 35 42 5c 22 2c 5c 22 6c 65 67 61 6c 43 6f 6e 73 65 6e 74 54 65 78 74 53 69 7a 65 5c 22 3a 5c 22 31 34 70 78 5c 22 2c 5c 22 74 68 61 6e 6b 59 6f 75 54 65 78 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 33 33 34 37 35 42 5c 22 2c 5c 22 74 68 61 6e 6b 59 6f 75 54 65 78 74 53 69 7a 65 5c 22 3a 5c 22 31 36 70 78 5c 22 2c 5c 22 73 75 62 6d 69 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 46 46 37 41 35 39 5c 22 2c 5c 22 73 75 62 6d 69 74 41 6c 69 67 6e 6d 65 6e 74 5c 22 3a 5c 22 6c 65 66 74 5c 22 2c 5c 22 73 75 62 6d 69 74 46 6f 6e 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 46 46 46 46 Data Ascii: 6383DE\",\"helpTextSize\":\"11px\",\"legalConsentTextColor\":\"#33475B\",\"legalConsentTextSize\":\"14px\",\"thankYouTextColor\":\"#33475B\",\"thankYouTextSize\":\"16px\",\"submitColor\":\"#FF7A59\",\"submitAlignment\":\"left\",\"submitFontColor\":\"#FFFF
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 69 64 74 68 3a 61 75 74 6f 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 68 73 2d 62 61 63 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 32 30 25 3b 68 65 69 67 68 74 3a 33 38 70 78 3b 6d 61 72 67 Data Ascii: idth:auto;font-weight:500;line-height:20px;padding-top:0;margin-bottom:4px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif}.hs-video-form label{color:#fff !important}.hs-video-form .hs-back-button{background-color:#fff;width:20%;height:38px;marg
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 23 66 35 66 38 66 61 7d 2e 68 73 2d 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 68 73 2d 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 33 70 78 20 35 70 78 20 33 70 78 20 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 68 73 2d 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 70 61 64 64 69 6e 67 3a 69 6e 69 74 69 61 6c 3b 62 6f 72 64 65 72 3a 69 6e 69 74 69 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 69 74 69 61 6c 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 73 65 6c Data Ascii: -color:#f5f8fa}.hs-input[type=checkbox],.hs-input[type=radio]{cursor:pointer;width:auto;height:auto;padding:0;margin:3px 5px 3px 0px;line-height:normal;border:none}.hs-input[type=file]{padding:initial;border:initial;line-height:initial;box-shadow:none}sel
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 2b 6c 69 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 75 6c 2e 6e 6f 2d 6c 69 73 74 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 66 69 65 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 7d 2e 68 73 2d 66 69 65 6c 64 2d 64 65 73 63 7b 63 6f 6c 6f 72 3a 23 37 63 39 38 62 36 3b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 68 73 2d 66 6f 72 6d 2d 72 65 71 75 69 72 65 64 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 68 73 2d 72 69 63 68 74 65 78 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 66 6f Data Ascii: +li{padding-top:2px}ul.no-list{list-style:none}.field{margin-bottom:18px}.hs-field-desc{color:#7c98b6;margin:0px 0px 6px;font-size:11px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif}.hs-form-required{color:red}.hs-richtext{margin-bottom:3px;fo
2024-12-18 21:14:05 UTC	1369	IN	Data Raw: 66 6f 72 6d 2d 66 69 65 6c 64 2c 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 68 73 2d 69 6e Data Ascii: form-field,.email-correction form .form-columns-3 .hs-form-field,.email-validation form .form-columns-2 .hs-form-field,.email-validation form .form-columns-3 .hs-form-field{float:none;width:100%}.email-correction form .form-columns-2 .hs-form-field .hs-in
2024-12-18 21:14:05 UTC	662	IN	Data Raw: 2d 66 6f 6e 74 2d 65 6c 65 6d 65 6e 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 68 6f 6e 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e Data Ascii: -font-element{font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif;line-height:normal}.hs-form-field input[type=text],.hs-form-field input[type=email],.hs-form-field input[type=phone],.hs-form-field input[type=number],.hs-form-field input[type=tel],.
2024-12-18 21:14:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49750	104.18.80.204	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:05 UTC	1082	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:05 UTC	904	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a6479f48-4b8a-4021-8b5f-2aa104ee91ec x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-4rwh7 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: a6479f48-4b8a-4021-8b5f-2aa104ee91ec CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f422918aa6d4238-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	104.17.172.91	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:05 UTC	569	OUT	GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=oRvaznjbtNPKz.KDB0Pmb5107Sbr8KeLpf1omHb.vmc-1734556441-1.0.1.1-_HKfhk0c03LJfiTaqBAlUlebgeFZBJ.TG0CPp1mtv3.IR0YvKVRPDK6IzDyTv2y1gfNvXC2Jz9RLRHggbb9rzw
2024-12-18 21:14:06 UTC	1278	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:05 GMT Content-Type: image/png Content-Length: 706 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=1386 etag: "b29cd4fae32431fd350ffa1394aa4ee6" last-modified: Wed, 11 Dec 2024 17:37:25 GMT via: 1.1 2b2491fc3c8b84a7fd8dd41a09ba5510.cloudfront.net (CloudFront) x-amz-cf-id: Q8_Nq_wwmGwlCWrYeoREqRqX-JV7QuvJiwNMnTEhpL5cwvJjtElU4A== x-amz-cf-pop: BOS50-P4 x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: m5BtXInt1MshKT3PP_DHy5f_9fvyzpVU x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 616605 Expires: Thu, 18 Dec 2025 21:14:05 GMT Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wm2cd%2FhEd8SU5Gi7xr%2BfvdFswv70Sti7d9lzY5foOCIHDe6UK4rha60iuZOCNsTrekoR5ap6vG1LP9TCh%2BwrrB5GSeJ%2Fq%2BP5IdUx2jzoJNbxQOZicPlhEdso%2FOWPfqqTpbqALDs0C94%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Server: cloudflare CF-RAY: 8f42291aaa6743da-EWR
2024-12-18 21:14:06 UTC	91	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba Data Ascii: PNGIHDR szzgAMAa cHRMz&u0`:p
2024-12-18 21:14:06 UTC	615	IN	Data Raw: 51 3c 00 00 02 4d 49 44 41 54 78 da dd d7 3b 68 53 51 1c c7 f1 c4 34 6d 24 a9 35 4a a4 bd 10 a1 e2 63 09 82 50 c5 88 d0 29 83 a0 82 8f c1 d0 c1 0a 56 27 41 c8 64 71 10 07 29 8a 48 27 a7 56 0a a5 43 83 f8 a8 e2 0b 1d 34 22 0e 56 ef 94 74 a8 38 28 4a d5 52 8a 12 cd a3 7f bf c3 19 0e 97 26 37 57 0f b6 f4 c2 87 0c f7 ff cf f9 25 e7 e4 9f c4 b7 ec 2e e9 4f fb 11 80 7f 29 16 df 88 0b 18 c3 00 b6 fd e5 0b 08 21 e8 b5 31 8a 3b 10 cd 73 58 1e 9e a3 15 19 3c 41 16 29 f8 1b 6d 3e 8c 5f 10 4d 05 69 0f 01 ce a2 0c 51 a6 91 68 b4 f9 38 aa 10 87 4c 83 fd cd b8 0b d1 2c a0 b7 d1 00 9d b0 21 0e 53 38 84 80 4b ff 2a dc 80 68 8a 38 e8 e5 1c 74 e3 11 a6 f1 12 ef 21 98 45 3f 5a 5d fa 93 c8 6b db 37 82 36 af 87 31 82 38 d6 a0 0b cf b0 80 12 46 d1 e9 d2 7f 52 db ff 4d 26 3e 9a Data Ascii: Q<MIDATx;hSQ4m$5JcP)V'Adq)H'VC4"Vt8(JR&7W%.O)!1;sX<A)m>_MiQh8L,!S8K*h8t!E?Z]k7618FRM&>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:05 UTC	1076	OUT	GET /__ptq.gif?k=15&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442940&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:06 UTC	1122	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:06 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f42291d4fa44268-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-6vvxz x-evy-trace-virtual-host: all x-hubspot-correlation-id: 2af574c7-b709-488b-9430-ed3c112f7403 x-request-id: 2af574c7-b709-488b-9430-ed3c112f7403 x-robots-tag: none Set-Cookie: __cf_bm=D4NJw74L0JBnUML7CEDPXSPrapZO4zPzyTTcY4y7PTE-1734556446-1.0.1.1-Ekkh1oTNInCqFFd6kzgbEzq95nD2p5AukETWvWLcV4R1EzY3nlyIC61rTG6GfWDZZ7FYJy1mdTcaeIksnFgASg; path=/; expires=Wed, 18-Dec-24 21:44:06 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-12-18 21:14:06 UTC	517	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 53 51 43 47 73 41 42 35 71 52 59 39 33 6e 52 57 51 7a 52 25 32 42 25 32 46 55 74 75 78 53 62 43 58 32 43 6e 4a 32 4a 25 32 46 7a 72 25 32 46 61 7a 43 76 77 64 35 39 61 74 6d 78 25 32 46 5a 46 57 45 46 33 4a 39 73 6d 25 32 42 6e 38 38 30 59 4d 4e 51 77 73 4a 69 4e 30 4c 5a 69 58 56 56 50 4d 4b 4f 50 58 65 36 43 38 6a 4b 39 62 44 53 64 35 51 56 75 74 4d 31 42 4a 6b 6a 7a 53 50 78 4e 46 4d 25 32 46 34 6e 70 55 34 68 36 71 52 35 25 32 42 34 6b 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SQCGsAB5qRY93nRWQzR%2B%2FUtuxSbCX2CnJ2J%2Fzr%2FazCvwd59atmx%2FZFWEF3J9sm%2Bn880YMNQwsJiN0LZiXVVPMKOPXe6C8jK9bDSd5QVutM1BJkjzSPxNFM%2F4npU4h6qR5%2B4k"}],"group":"cf-nel","max_age
2024-12-18 21:14:06 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:06 UTC	1328	OUT	GET /__ptq.gif?k=17&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442990&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; _cfuvid=gNs2OxrEf.5cVI2e1E3zWYUcoTk_fAMWatvNdXGu9TU-1734556444371-0.0.1.1-604800000
2024-12-18 21:14:06 UTC	1200	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:06 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f42291cacd3c46b-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-nc9kd x-evy-trace-virtual-host: all x-hubspot-correlation-id: f87322e2-5487-4e80-bea7-a39f32234eec x-request-id: f87322e2-5487-4e80-bea7-a39f32234eec x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LvYY9xQPPgNYZGsh69wCJpp96qDc60MAF7GMGbLOGqMic47AtA%2Fn9GR0tlvK3ttceNPugUWVquXWp9zm8phaAkEty%2FXyPth4kizfB2kdWIksv6aELUqFwTxj%2BUFKowZdAVyW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-18 21:14:06 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:06 UTC	1081	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:06 UTC	904	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 4 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 63b86119-9d2c-4482-82c7-d8eae2ff4204 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-rl5ch x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 63b86119-9d2c-4482-82c7-d8eae2ff4204 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f42291d4b644378-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49773	104.16.110.254	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:06 UTC	570	OUT	GET /collected-forms/v1/config/json?portalId=48586112&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=KbnNKd0P_o2JYEHB5SSGcABYmOmq2FNfBeDk9odQKTI-1734556444-1.0.1.1-j.n8vgtMHXKDftuzeOfSSBIG5kTvCxSRYLlJzFroTuG2Z6ermemKr.1oEYBbz1csk3wpDMnCJP8.WUQlYc0uOw
2024-12-18 21:14:06 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:06 GMT Content-Type: application/json;charset=utf-8 Content-Length: 136 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: b88b6857-a036-40fb-a0e4-82c2e103916b x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-n6bxn x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: b88b6857-a036-40fb-a0e4-82c2e103916b CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f42291e0e3c42b8-EWR
2024-12-18 21:14:06 UTC	136	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 38 36 31 31 32 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 2d 31 33 36 31 31 32 37 37 31 30 7d Data Ascii: {"portalId":48586112,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":-1361127710}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	142.250.181.132	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:06 UTC	720	OUT	GET /recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378&render=explicit&hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:07 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 18 Dec 2024 21:14:07 GMT Date: Wed, 18 Dec 2024 21:14:07 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:07 UTC	641	IN	Data Raw: 36 35 37 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 657/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-18 21:14:07 UTC	989	IN	Data Raw: 70 6f 2e 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b Data Ascii: po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6Ik
2024-12-18 21:14:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:06 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:07 UTC	904	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 5 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 107f4265-5c39-40d2-ba34-589ef075ca14 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b6qgf x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 107f4265-5c39-40d2-ba34-589ef075ca14 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f422921ef55ef9f-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49776	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:06 UTC	846	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:07 UTC	904	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 6 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: b9723e3c-0bf9-4156-a179-aa3b96062e14 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-96dtb x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: b9723e3c-0bf9-4156-a179-aa3b96062e14 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f4229233f324376-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49778	104.18.41.124	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:07 UTC	588	OUT	GET /hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png HTTP/1.1 Host: 48586112.fs1.hubspotusercontent-na1.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Rk2eCSIacOp6J_AKR.z9SjPcIhMmeWEgnk1uq83w0pg-1734556445-1.0.1.1-RemPK6zawNwZLA0n9hOt_Qln3BgmMbYftMUor8cEddxQJ27ld7ngzXFzoTQR6YpPLVLdv4vu7AshPXR6uqDLPw
2024-12-18 21:14:07 UTC	1339	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:07 GMT Content-Type: image/png Content-Length: 197604 Connection: close CF-Ray: 8f4229260c968ccc-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 20844 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 ETag: "e5aed6d8dcf9b7e2fde0b8102c53c5dc" Last-Modified: Wed, 18 Dec 2024 15:26:44 GMT Vary: Accept Via: 1.1 078fe53d3a4b452fe5cde4b5d9596b0e.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-184045670205,P-48586112,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=239106 Edge-Cache-Tag: F-184045670205,P-48586112,FLS-ALL Timing-Allow-Origin: 48586112.fs1.hubspotusercontent-na1.net X-Amz-Cf-Id: DWKq-jIiXneAU_vvEzw7ytUxENmnIUp-SkotrqHPDZlFzJqgNgtniQ== X-Amz-Cf-Pop: JFK52-P1 x-amz-id-2: eiRRnQyv50sh5TBspjzDVWLJvhf1AuseEbZs5SEml9A6ZnDNWuNOEqoF9Hf4sn4JXblhSWyh3Tg= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-184045670205,P-48586112,FLS-ALL x-amz-meta-created-unix-time-millis: 1734535603306 x-amz-meta-index-tag: none x-amz-replication-status: PENDING x-amz-request-id: 8SEF197DZZTSDEH7 x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: B81cQPmeIKpLY07oP1hOplzYY88Gd9ZB X-Cache: Miss from cloudfront
2024-12-18 21:14:07 UTC	187	IN	Data Raw: 58 2d 48 53 2d 41 6c 74 65 72 6e 61 74 65 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: X-HS-Alternate-Content-Type: text/plainX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneServer: cloudflare
2024-12-18 21:14:07 UTC	1212	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 58 00 00 02 4e 08 02 00 00 00 c7 aa 69 49 00 00 0c 33 69 43 43 50 69 63 63 00 00 78 da ad 97 77 5c 53 57 1b c7 9f 3b 92 90 90 b0 41 40 46 d8 4b 10 91 8d 8c 10 36 c8 1e 82 a8 84 24 40 18 31 26 04 15 37 5a 5a c1 ba 45 04 47 45 ab 20 16 ad 56 40 8a 0b b5 6a a5 28 6e eb 68 1c 28 54 6a b1 16 b7 f2 1e 08 60 5f 7d df 3f de cf e7 7d f2 39 f7 7e f3 3b cf f9 9d e7 9c 7b f3 b9 b9 00 ea 0a 9e 44 92 8f 6b 00 14 88 0b a5 f1 a1 81 ec 29 a9 69 6c 5a 37 30 d1 87 00 4d d0 e2 f1 65 12 4e 6c 6c 14 a0 18 3a 7f 16 2f ae 01 06 28 2e 3b 0e 7a c1 ff 16 9a 02 a1 8c 0f 80 c5 22 ce 14 c8 f8 05 88 7f 00 20 5b f9 12 69 21 00 55 82 74 8b d9 85 92 41 5e 8f 58 47 8a 0a 44 5c 3b c8 d9 4a 6e 1d e4 4c 25 5f 1c ca 49 8c e7 22 7e 08 a0 Data Ascii: PNGIHDRXNiI3iCCPiccxw\SW;A@FK6$@1&7ZZEGE V@j(nh(Tj`_}?}9~;{Dk)ilZ70MeNll:/(.;z" [i!UtA^XGD\;JnL%_I"~
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: 22 86 48 23 b2 08 29 b1 90 28 23 2a 88 1a a2 81 68 41 d7 f9 32 a1 20 7a 89 d7 24 95 d4 26 d9 a4 23 ba 83 c3 c8 24 92 4f ce 22 17 92 2b c8 2a b2 96 6c 24 4f 91 97 c9 7b 64 1f f9 81 c2 a2 18 51 1c 28 de 94 70 ca 14 4a 36 65 36 a5 94 52 41 d9 45 39 44 39 8d 7e 4b 5d 94 17 54 2a 55 8f 6a 43 f5 40 bf c5 54 6a 2e 75 1e 75 05 75 0b 75 1f f5 38 b5 93 fa 80 da 4f a3 d1 0c 68 0e 34 5f 5a 0c 8d 47 2b a4 95 d2 36 d1 f6 d2 8e d1 2e d1 ba 68 af 54 54 55 4c 55 5c 54 42 54 d2 54 c4 2a 25 2a 15 2a 7b 54 8e aa 5c 52 79 ac f2 96 ae 41 b7 a2 7b d3 63 e8 02 fa 5c fa 2a fa 4e 7a 0b fd 02 bd 8b fe 96 a1 c9 b0 61 f8 32 12 19 b9 8c 25 8c 4a 46 03 e3 34 e3 36 e3 b9 aa aa aa b9 aa 97 6a 9c aa 48 75 b1 6a a5 ea 7e d5 b3 aa f7 54 5f 33 b5 98 f6 4c 2e 33 9d 29 67 ae 64 ee 66 1e 67 de Data Ascii: "H#)(#hA2 z$&#$O"+l$O{dQ(pJ6e6RAE9D9~K]TUjC@Tj.uuuu8Oh4_ZG+6.hTTULU\TBTT%*{T\RyA{c\Nza2%JF46jHuj~T_3L.3)gdfg
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: af 7d b0 6e f2 ba c6 f5 ec f5 65 eb ff de 30 63 c3 b9 0a d7 8a 6d 1b 19 1b e5 1b 15 95 51 95 cd 9b 2c 37 ad de f4 ae 2a a7 ea 6a 75 60 f5 be cd 46 9b 97 6f 7e b9 45 b0 e5 d2 d6 80 ad 0d db 8c b7 95 6f 7b f3 8d e8 9b 1b db 43 b7 37 d6 58 d7 54 ec a0 ee 28 da f1 68 67 f2 ce 33 df 7a 7e 5b b7 cb 70 57 f9 ae f7 bb c5 bb 15 b5 f1 b5 a7 ea 3c ea ea f6 18 ed 59 55 8f d7 cb eb 7b f6 a6 ef bd f8 5d d0 77 cd 0d 8e 0d db f7 e9 ed 2b df 0f fb e5 fb 7f ff 3e e3 fb 6b 07 22 0f b4 1d f4 3c d8 f0 83 d5 0f 9b 0f 69 1f 2a 6b c4 1a e7 36 f6 35 e5 34 29 9a 53 9b 3b 0f 47 1c 6e 6b f1 69 39 f4 a3 d3 8f bb 5b cd 5a ab 8f e8 1e 59 75 94 71 74 d9 d1 81 63 c5 c7 fa 8f 4b 8e f7 9e c8 3e f1 a0 6d 46 db ad 93 53 4e 5e 39 15 77 aa e3 74 e4 e9 b3 3f 85 fc 74 f2 0c e7 cc b1 b3 be 67 5b Data Ascii: }ne0cmQ,7ju`Fo~Eo{C7XT(hg3z~[pW<YU{]w+>k"<ik654)S;Gnki9[ZYuqtcK>mFSN^9wt?tg[
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: 02 01 00 00 00 00 00 60 48 04 02 00 00 00 00 00 c0 90 08 04 00 00 00 00 00 80 21 11 08 00 00 00 00 00 00 43 22 10 00 00 00 00 00 00 86 44 20 00 00 00 00 00 00 0c 89 40 00 00 00 00 00 00 18 12 81 00 00 00 00 00 00 30 24 02 01 00 00 00 00 00 60 48 04 02 00 00 00 00 00 c0 90 08 04 00 00 00 00 00 80 21 11 08 00 00 00 00 00 00 43 22 10 00 00 00 00 00 00 86 44 20 00 00 00 00 00 00 0c 89 40 00 00 00 00 00 00 18 12 81 00 00 00 00 00 00 30 24 02 01 00 00 00 00 00 60 48 04 02 00 00 00 00 00 c0 90 08 04 00 00 00 00 00 80 21 11 08 00 00 00 00 00 00 43 22 10 00 00 00 00 00 00 86 44 20 00 00 00 00 00 00 0c 89 40 00 00 00 00 00 00 18 12 81 00 00 00 00 00 00 30 24 02 01 00 00 00 88 3d 3b 90 01 00 00 00 18 e4 6f 7d 8f af 34 02 00 60 48 04 02 00 00 00 00 00 c0 90 08 04 00 Data Ascii: `H!C"D @0$`H!C"D @0$`H!C"D @0$=;o}4`H
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: 71 02 e0 64 4b ef bd be fd da 8d 3f be f2 ea ef fe b6 27 0b 57 1f ff c6 8f 9e 58 39 b3 3e 6f 03 e5 0d 4c 84 20 10 00 00 00 00 80 63 15 df 7f 67 6b e3 85 bf dc b8 79 7d 23 dd 7d c7 55 c1 79 67 ac 19 93 49 69 12 8d c9 3d 12 cb 27 9f fc 4f 75 f9 5b 17 96 07 52 08 1a 2b 8a ec 6c 6f de be f5 9b eb bf 7f e9 de 1d 59 5b fd 7e 9c 7f f6 ca ec e2 f4 b4 10 04 e2 a1 a6 71 27 bd bb f1 e6 9f 5f b8 fe 8b 5b af c9 a5 c7 bf 7b 3e 77 06 4f ad b6 26 08 02 77 de 7d 6b e3 e5 5f 3f ff e2 ad ad d7 cb 8b 57 b6 65 f1 b9 ab fd f9 de b4 21 08 04 4e bc bc 7b 6f f7 8d 97 36 6e dc fc f9 6f 37 ed f9 f7 9f 9b b9 d6 e9 4f 5f 9c 15 82 40 60 22 04 81 00 00 00 00 00 1c 3f 55 51 95 a4 c6 05 df 9b 9b ea b4 fb 5d 57 7a ab 63 32 89 2c 9a b3 e9 d7 7e 7e 71 a1 d7 0e 8e 3f cb 6a 3c 15 55 15 cd 63 Data Ascii: qdK?'WX9>oL cgky}#}UygIi='Ou[R+loY[~q'_[{>wO&w}k_?We!N{o6no7O_@`"?UQ]Wzc2,~~q?j<Uc
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: b7 33 9d 5a da 9d ee 6c 67 f2 1b c2 4c de 30 39 e7 3c e7 bc f9 87 79 26 1c 1c 1c 1c 1c bf 11 53 1e af f9 70 73 ec dd 52 6d 4b 35 5a 34 eb ca 4f 07 9f 2e 8d 66 ed ab ca a9 3f 4c 19 2d 86 55 8d 42 24 11 c2 10 9f 0f 41 30 2c 10 23 62 e5 ea b6 cd 1c 28 c5 6b a3 d1 f7 1d 2a 5f 5f 1f 8f ef 33 e5 13 82 34 6d 6d 2a a5 72 44 80 2c f1 61 08 e2 83 0f 9f 0f 2f 0b 85 22 85 5c bd b3 65 0c 53 b1 db 9b 11 33 5b c8 49 c6 d6 d2 02 b5 6c ab 37 f8 52 91 78 6f db f6 a1 d0 7a 1a 2e e0 9c 61 a6 9d 69 33 5c 8e ec 6c a8 c4 90 54 ab da 3f 75 9e 3e b6 07 b3 57 75 6b 34 6a 11 6a 43 c9 ea b6 7f ea ca 8d fa 1f c3 30 f7 fd da 49 dc 6d b4 6c 2a 55 62 a1 e0 8f 25 50 d7 b2 48 29 5e b1 ee 12 a9 42 77 d2 07 3f f9 f6 3d 9b b5 a8 47 a7 fe 13 e4 2f b1 e8 d1 64 f1 e1 95 fc c1 f2 b4 57 cf a6 6c Data Ascii: 3ZlgL09<y&SpsRmK5Z4O.f?L-UB$A0,#b(k__34mmrD,a/"\eS3[Il7Rxoz.ai3\lT?u>Wuk4jjC0Iml*Ub%PH)^Bw?=G/dWl
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: 8a 24 6b fd fa 90 99 30 bf c8 d0 c3 f0 e8 e9 b4 7f f7 58 ce e5 d3 c7 b1 90 cf 47 e1 38 ee b0 63 0e 0c 9f cb 00 d4 20 70 02 2c d8 31 14 c3 08 b7 ef 30 92 8c 67 2e 8a d5 87 c1 70 3a a5 79 cc a2 be 17 86 35 63 8e 86 dd 9b 52 25 97 48 1d 07 02 5e d2 09 7a ed 70 80 03 44 20 48 00 41 80 53 d4 8e da 71 3b ee a3 7c d1 58 2a 97 2d 75 ee ba a3 c9 94 61 be 1f 09 cc c3 63 a7 9e 4f 38 31 b7 15 27 fd a7 a1 64 b5 5c 6d f4 aa f9 bf d9 3b b7 df b6 cd 33 8c 8b 3a 5a b6 13 3b 3e c5 49 9a 38 68 33 64 f1 92 78 4d dc 74 c5 d2 6e 49 b6 01 bb e9 3f b9 cb 61 9d 2d 4b a2 2d cb 96 25 7b 96 65 c9 72 2d 8b 3a 9f 4f a4 a8 8f 14 0f 22 29 8a 22 b9 8f 76 87 ed ce 1a d0 b4 28 a0 1f 28 de be e4 f3 be cf 23 80 1f f1 31 73 79 1a 0b 1f 04 fc bb b0 86 cf b7 6d 9c 61 25 b7 6b 63 73 c3 e5 46 b7 Data Ascii: $k0XG8c p,10g.p:y5cR%H^zpD HASq;\|X*-uacO81'd\m;3:Z;>I8h3dxMtnI?a-K-%{er-:O")"v((#1syma%kcsF
2024-12-18 21:14:07 UTC	1369	IN	Data Raw: 21 aa c4 b3 0c d1 06 3c 91 19 aa 03 99 6f 35 2a 6b eb 2f 96 de be d4 07 2c 38 39 cc 56 ab 4d 96 25 db 80 22 00 ab 98 ec 93 33 cb 4b 0b 76 bb 59 93 38 1a 90 0d 91 29 91 aa 1a 15 48 50 28 bd f9 fd da 9f be 7d fd 68 66 ca 39 d2 ca 3e 82 40 07 20 bd 3e df a8 a5 a2 52 3d c6 65 d2 0c 41 02 86 a3 28 8a 06 24 37 40 24 eb bc fd f6 fc c3 29 c4 aa f5 07 02 cd 72 52 87 25 ab b9 53 49 06 ed fa 2b 6c f5 eb 2f 5f 7e fa 97 df dc 72 3a 0c 35 f4 8f e5 60 e4 7f 96 cc cc 23 bc 1e c1 76 6a e9 b8 3f 98 4e 67 8b 24 51 21 18 9c 12 54 cb e4 ad b9 a5 c9 29 a7 d3 66 4c 91 22 74 39 5e 20 69 5c 90 fa 3d 8e c2 b3 4f 2e 3e 79 f6 c5 9b 5f 7f 78 f7 ab e5 09 c7 cd 17 84 98 4d b0 b7 03 5e ed 24 9a 89 ce ae 79 ca a1 4b e5 32 01 3a 6d ae 0b 28 b6 4f f3 66 8b 63 66 e1 de 34 1c 25 93 c2 75 bb Data Ascii: !<o5*k/,89VM%"3KvY8)HP(}hf9>@ >R=eA($7@$)rR%SI+l/_~r:5`#vj?Ng$Q!T)fL"t9^ i\=O.>y_xM^$yK2:m(Ofcf4%u
2024-12-18 21:14:08 UTC	1369	IN	Data Raw: 7c bd 72 7c 7c 5c ab 73 2d 71 a7 b4 29 1c 1d 4a f5 52 98 32 61 b9 5e fa d5 2f 57 4e 4a 6d 87 a1 11 9c f0 90 a1 58 38 d1 97 cd 85 02 3e 06 33 e4 56 b5 78 e4 e3 6a b5 a6 58 e1 8f 9a 4f b6 0a 92 a1 45 e7 07 71 2f 9d 86 00 7e c5 a2 41 20 94 c0 49 94 66 cf fa 8f e3 97 cf 8e 95 d6 f1 ea cb 66 53 54 10 1a c0 08 81 79 c8 40 34 18 c9 c5 a2 a1 4c 18 25 41 37 05 ae 56 ad 1e 97 ab 8d 7a b3 b5 f7 84 ab f2 7b 1c 6b 02 7c b6 3f 97 21 3c 00 00 e8 75 f4 7f af f6 04 92 44 48 0f 8e 63 48 0f 4d b4 ec 68 27 a5 dd 6f 9e 7c f6 e9 f2 4e a9 08 fb 2c 82 f1 45 62 91 58 3c 9d ea 0b fa bd 14 61 77 03 57 db 5c 37 b7 e3 72 83 e7 79 ad f0 6c e7 e4 68 7d bd d6 32 ac cc 64 92 ec 27 d8 ab fa 46 08 c5 51 82 f2 20 3c 25 1f 34 0f 4e 1f f3 ba a2 6a c7 65 45 37 00 e9 c1 70 8f 9f 89 45 93 b1 e8 Data Ascii: \|r\|\|\s-q)JR2a^/WNJmX8>3VxjXOEq/~A IffSTy@4L%A7Vz{k\|?!<uDHcHMh'o\|N,EbX<awW\7rylh}2d'FQ <%4NjeE7pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49779	104.19.175.188	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:07 UTC	845	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
2024-12-18 21:14:08 UTC	904	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:08 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: c12cc8c2-ee1a-4559-9006-c4baceeb8232 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-cs9s5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: c12cc8c2-ee1a-4559-9006-c4baceeb8232 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f422927d8e18ce2-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 21:14:08 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:07 UTC	1004	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442221&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; _cfuvid=gNs2OxrEf.5cVI2e1E3zWYUcoTk_fAMWatvNdXGu9TU-1734556444371-0.0.1.1-604800000
2024-12-18 21:14:08 UTC	1200	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:08 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f422927fba715c3-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-7l5j6 x-evy-trace-virtual-host: all x-hubspot-correlation-id: 0182cf92-f9c6-497e-be65-c13f36760a0e x-request-id: 0182cf92-f9c6-497e-be65-c13f36760a0e x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1suo1%2FtPU0fb13Koi1DcKkyWrVP6hyQu0fHIcKbExcelqPexgq5EeJgFEeDS1QVbWgDq3fibmVy%2FVoCt%2FfAzs067HHYegAz7qec4HrUeIWhcC5Tfhb59j7MH03RjKrT94xkK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-18 21:14:08 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49781	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:07 UTC	1091	OUT	GET /__ptq.gif?k=17&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442990&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; _cfuvid=gNs2OxrEf.5cVI2e1E3zWYUcoTk_fAMWatvNdXGu9TU-1734556444371-0.0.1.1-604800000
2024-12-18 21:14:08 UTC	1204	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:08 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f4229280fae41a1-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-wf92v x-evy-trace-virtual-host: all x-hubspot-correlation-id: 8237ce23-8143-4e7b-bdc5-fb6e26a430d5 x-request-id: 8237ce23-8143-4e7b-bdc5-fb6e26a430d5 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AgImtwrv5DB6ze%2FZ5huwQktfYsJ0Z65jBeS3cxaQebu5PEtI6PsT9LuFyk%2FQE3CZPF30kF6DVKBnLW3vhdndAQ40CN6sSea%2FXoSsN4Wf1%2B00mn390PU4fcy3yYrAeyOo1%2Fak"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-18 21:14:08 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49782	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:09 UTC	543	OUT	GET /recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378&render=explicit&hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:09 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 18 Dec 2024 21:14:09 GMT Date: Wed, 18 Dec 2024 21:14:09 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:09 UTC	641	IN	Data Raw: 36 35 37 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 657/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-12-18 21:14:09 UTC	989	IN	Data Raw: 70 6f 2e 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b Data Ascii: po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6Ik
2024-12-18 21:14:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49787	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:12 UTC	971	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tv HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:13 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 18 Dec 2024 21:14:13 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-nWY5L6Xrv9bPCT0TRYcxGg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:13 UTC	229	IN	Data Raw: 35 37 63 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 57ce<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6e 57 59 35 4c 36 58 72 76 39 62 50 43 54 30 54 52 59 63 78 47 67 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 36 78 61 75 52 50 59 33 71 6f 4e 62 64 68 73 46 43 6f 33 61 66 61 41 43 4b 6f 64 47 55 65 46 50 61 Data Ascii: Iriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js" nonce="nWY5L6Xrv9bPCT0TRYcxGg"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA6xauRPY3qoNbdhsFCo3afaACKodGUeFPa
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 74 33 65 76 6d 4f 4a 70 50 64 4e 64 42 64 69 44 51 66 6c 36 44 77 65 6f 49 35 54 68 31 7a 45 58 4a 4a 48 63 6d 4c 4f 4f 6f 79 52 53 6c 6f 6c 37 4a 42 5f 36 67 79 52 38 64 57 43 4d 6e 4e 55 31 65 39 32 68 36 61 69 30 48 45 45 68 4b 32 41 5f 66 77 6b 46 50 68 6c 45 4a 33 47 65 54 51 77 71 6c 54 5f 52 43 46 50 30 54 75 70 64 4a 66 42 59 47 41 4b 42 79 62 6f 55 78 7a 73 52 32 6a 6d 58 71 7a 52 59 75 67 4f 78 6f 56 59 34 66 64 57 59 4f 65 38 7a 4c 54 53 73 4a 46 44 6f 4c 4e 57 50 55 47 43 32 5a 69 50 32 6e 78 34 2d 6d 77 44 70 74 46 61 46 5a 38 67 41 30 43 49 31 37 45 7a 33 37 34 64 78 53 59 42 4c 79 61 47 39 61 30 5a 39 74 34 71 4f 72 56 65 6d 30 6b 52 39 44 42 51 70 72 49 4f 63 48 76 45 49 33 71 59 48 31 78 4e 32 6a 75 43 30 64 4c 56 56 32 41 76 6b 4d 63 43 Data Ascii: t3evmOJpPdNdBdiDQfl6DweoI5Th1zEXJJHcmLOOoyRSlol7JB_6gyR8dWCMnNU1e92h6ai0HEEhK2A_fwkFPhlEJ3GeTQwqlT_RCFP0TupdJfBYGAKByboUxzsR2jmXqzRYugOxoVY4fdWYOe8zLTSsJFDoLNWPUGC2ZiP2nx4-mwDptFaFZ8gA0CI17Ez374dxSYBLyaG9a0Z9t4qOrVem0kR9DBQprIOcHvEI3qYH1xN2juC0dLVV2AvkMcC
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 70 79 4f 55 74 6a 59 30 6f 31 52 33 42 48 4f 56 4a 68 63 6e 4e 35 62 31 56 59 55 56 64 6e 57 6b 38 30 51 31 68 6d 56 58 5a 56 62 31 45 34 53 47 6c 45 59 6d 70 75 62 6e 42 34 62 47 46 76 4e 47 64 6e 54 30 31 75 4e 47 4a 47 4d 6d 70 45 55 45 74 43 59 6e 5a 48 63 6a 55 33 52 58 41 35 54 30 64 59 64 47 46 35 4e 6e 64 34 62 6a 64 6d 61 54 4d 7a 4d 6b 4e 6e 56 6e 68 31 4e 6c 68 46 62 57 74 50 4d 6b 5a 71 61 32 39 32 64 31 46 56 64 32 46 52 59 6a 68 72 4e 58 46 43 4e 47 52 51 5a 46 42 4c 61 6d 52 70 53 47 4a 6a 55 6d 4e 71 56 58 5a 75 62 33 5a 69 64 46 5a 6d 65 57 55 77 65 6b 6c 56 63 55 4d 33 53 30 78 50 4d 47 78 70 61 58 4a 32 56 6d 31 68 4e 45 31 6f 56 45 4d 31 54 47 77 76 54 47 67 77 65 48 64 35 62 6d 70 5a 62 30 56 6e 52 6d 35 68 4b 32 77 76 62 45 56 56 5a Data Ascii: pyOUtjY0o1R3BHOVJhcnN5b1VYUVdnWk80Q1hmVXZVb1E4SGlEYmpubnB4bGFvNGdnT01uNGJGMmpEUEtCYnZHcjU3RXA5T0dYdGF5Nnd4bjdmaTMzMkNnVnh1NlhFbWtPMkZqa292d1FVd2FRYjhrNXFCNGRQZFBLamRpSGJjUmNqVXZub3ZidFZmeWUweklVcUM3S0xPMGxpaXJ2Vm1hNE1oVEM1TGwvTGgweHd5bmpZb0VnRm5hK2wvbEVVZ
2024-12-18 21:14:13 UTC	1390	IN	Data Raw: 52 45 49 78 5a 56 68 7a 64 48 68 57 54 58 68 78 53 56 70 52 62 33 56 79 52 6e 5a 43 4c 33 4e 4a 62 56 6c 58 4f 55 6b 30 52 6e 70 6e 65 57 74 42 59 6d 4e 6a 4f 54 52 4b 4e 45 56 4d 62 6c 4e 55 61 30 67 35 57 58 5a 52 56 32 70 59 4e 58 64 4f 56 47 45 72 62 54 46 55 54 57 64 35 4d 31 4a 42 4f 46 52 36 54 44 56 78 63 45 39 4b 64 48 56 79 55 44 4a 32 55 55 64 6a 53 33 42 73 65 56 64 71 4e 31 6c 70 4e 6c 4e 53 4e 45 68 48 63 6a 42 70 61 57 52 4b 55 58 70 32 64 6c 6c 48 55 32 68 34 61 44 55 34 61 54 42 6e 64 55 64 50 4e 46 70 77 4d 47 68 71 59 69 74 68 64 6e 70 72 65 57 56 72 4f 46 63 30 61 45 70 57 52 32 52 46 59 31 70 59 55 46 59 7a 56 7a 64 6d 61 79 39 30 54 44 42 49 61 7a 4a 61 64 30 35 57 4d 7a 4d 35 55 30 46 6a 51 56 49 33 52 47 46 46 62 55 70 53 57 69 38 Data Ascii: REIxZVhzdHhWTXhxSVpRb3VyRnZCL3NJbVlXOUk0RnpneWtBYmNjOTRKNEVMblNUa0g5WXZRV2pYNXdOVGErbTFUTWd5M1JBOFR6TDVxcE9KdHVyUDJ2UUdjS3BseVdqN1lpNlNSNEhHcjBpaWRKUXp2dllHU2h4aDU4aTBndUdPNFpwMGhqYithdnpreWVrOFc0aEpWR2RFY1pYUFYzVzdmay90TDBIazJad05WMzM5U0FjQVI3RGFFbUpSWi8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49793	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:19 UTC	876	OUT	GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tv Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:20 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 18 Dec 2024 21:14:19 GMT Date: Wed, 18 Dec 2024 21:14:19 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:20 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2024-12-18 21:14:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49795	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:19 UTC	858	OUT	GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tv Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:20 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18908 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 13 Dec 2024 09:14:19 GMT Expires: Sat, 13 Dec 2025 09:14:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 475200 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-18 21:14:20 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 69 66 28 21 28 70 3d 28 62 3d 6e 75 6c 6c 2c 42 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 70 29 7c 7c 21 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScr
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 66 6f 72 28 62 3d 5b 5d 3b 70 2d 2d 3b 29 62 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 62 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 62 2e 4a 2e 73 70 6c 69 63 65 28 30 2c 30 2c 70 29 7d 2c 65 5f 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 72 65 74 75 72 6e 20 42 3d 28 70 3d 24 71 28 70 2c 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 26 26 28 62 26 26 62 62 28 62 29 2c 59 3d 76 2c 72 28 29 2c 72 3d 76 6f 69 64 20 30 29 7d 2c 28 59 3d 76 6f 69 64 Data Ascii: DX-License-Identifier: Apache-2.0','/','var H=function(p,b){for(b=[];p--;)b.push(Math.random()255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 33 29 2c 62 2c 55 2c 42 2c 59 2c 72 2c 76 29 3a 6f 65 28 62 2c 70 29 7d 2c 66 69 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 62 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 70 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 70 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 72 6a 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 64 28 70 29 2c 62 29 26 31 32 38 26 26 28 62 3d 62 26 31 32 37 7c 64 28 70 29 3c 3c 37 29 2c 62 7d 2c 76 41 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 70 5b 62 5d 3c 3c 32 34 7c 70 5b 28 62 7c 30 29 2b 31 5d 3c 3c 31 36 7c 70 5b 28 62 7c 30 29 2b 32 5d 3c 3c 38 7c 70 Data Ascii: substring(3),b,U,B,Y,r,v):oe(b,p)},fi=function(p,b){return b=0,function(){return b<p.length?{done:false,value:p[b++]}:{done:true}}},rj=function(p,b){return(b=d(p),b)&128&&(b=b&127\|d(p)<<7),b},vA=function(p,b){return p[b]<<24\|p[(b\|0)+1]<<16\|p[(b\|0)+2]<<8\|p
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 29 29 2c 70 29 2e 42 2b 3d 70 2e 6a 28 29 2d 62 7d 65 6c 73 65 20 69 66 28 42 3d 3d 79 64 29 62 5b 33 5d 26 26 28 70 2e 6f 3d 74 72 75 65 29 2c 62 5b 34 5d 26 26 28 70 2e 44 3d 74 72 75 65 29 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 74 34 29 70 2e 6f 3d 74 72 75 65 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 78 71 29 7b 74 72 79 7b 66 6f 72 28 55 3d 30 3b 55 3c 70 2e 54 2e 6c 65 6e 67 74 68 3b 55 2b 2b 29 74 72 79 7b 59 3d 70 2e 54 5b 55 5d 2c 59 5b 30 5d 5b 59 5b 31 5d 5d 28 59 5b 32 5d 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 63 61 74 63 68 28 72 29 7b 7d 28 28 30 2c 62 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 72 2c 76 29 7b 70 2e 6a 32 28 72 2c 74 72 75 65 2c 76 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 28 43 28 28 72 3d Data Ascii: )),p).B+=p.j()-b}else if(B==yd)b[3]&&(p.o=true),b[4]&&(p.D=true),p.V(b);else if(B==t4)p.o=true,p.V(b);else if(B==xq){try{for(U=0;U<p.T.length;U++)try{Y=p.T[U],Y[0][Y[1]](Y[2])}catch(r){}}catch(r){}((0,b[1])(function(r,v){p.j2(r,true,v)},function(r){(C((r=
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 72 73 65 28 62 29 7d 63 61 74 63 68 28 65 29 7b 70 2e 67 3d 7b 7d 7d 46 28 28 28 50 28 28 50 28 28 4c 28 70 2c 33 31 30 2c 28 4c 28 70 2c 28 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 2c 54 2c 79 2c 68 2c 52 2c 61 2c 77 2c 49 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 4e 28 6e 2c 75 29 7b 66 6f 72 28 3b 52 3c 6e 3b 29 61 7c 3d 64 28 65 29 3c 3c 52 2c 52 2b 3d 38 3b 72 65 74 75 72 6e 20 75 3d 28 52 2d 3d 6e 2c 61 29 26 28 31 3c 3c 6e 29 2d 31 2c 61 3e 3e 3d 6e 2c 75 7d 66 6f 72 28 49 3d 28 79 3d 28 66 3d 28 47 3d 4a 28 65 29 2c 52 3d 61 3d 30 2c 4e 28 33 29 7c 30 29 2b 31 2c 6d 3d 4e 28 35 29 2c 30 29 2c 77 3d 5b 5d 2c 30 29 3b 79 3c 6d 3b 79 2b 2b 29 54 3d 4e 28 31 29 2c 77 2e 70 75 73 68 28 54 29 2c 49 2b 3d 54 3f 30 3a 31 3b 66 6f 72 28 79 Data Ascii: rse(b)}catch(e){p.g={}}F(((P((P((L(p,310,(L(p,(((P(function(e,G,X,f,T,y,h,R,a,w,I,m){function N(n,u){for(;R<n;)a\|=d(e)<<R,R+=8;return u=(R-=n,a)&(1<<n)-1,a>>=n,u}for(I=(y=(f=(G=J(e),R=a=0,N(3)\|0)+1,m=N(5),0),w=[],0);y<m;y++)T=N(1),w.push(T),I+=T?0:1;for(y
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 3d 28 47 5b 47 5b 33 35 33 5d 3d 65 2e 4f 5b 33 35 33 5d 2c 33 32 36 5d 3d 65 2e 4f 5b 33 32 36 5d 2c 47 29 7d 65 6c 73 65 20 4c 28 65 2c 32 31 32 2c 65 2e 4b 29 7d 2c 28 4c 28 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 58 3d 28 47 3d 28 66 3d 4a 28 65 29 2c 4a 29 28 65 29 2c 4a 28 65 29 29 2c 47 3d 74 28 47 2c 65 29 2c 66 3d 74 28 66 2c 65 29 2c 58 29 2c 66 20 69 6e 20 47 7c 30 29 7d 2c 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 66 3d 74 28 28 58 3d 28 47 3d 28 66 3d 28 58 3d 4a 28 65 29 2c 4a 28 65 29 29 2c 4a 28 65 29 29 2c 74 28 58 2c 65 29 29 2c 66 29 2c 65 29 2c 47 29 2c 58 5b 66 5d 29 7d 2c 28 4c 28 70 2c 28 50 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =(G[G[353]=e.O[353],326]=e.O[326],G)}else L(e,212,e.K)},(L((L(p,(P(function(e,G,X,f){L(e,(X=(G=(f=J(e),J)(e),J(e)),G=t(G,e),f=t(f,e),X),f in G\|0)},(L(p,(P(function(e,G,X,f){L(e,(f=t((X=(G=(f=(X=J(e),J(e)),J(e)),t(X,e)),f),e),G),X[f])},(L(p,(P((P(function(
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 2c 79 2c 68 29 7b 66 6f 72 28 79 3d 28 58 3d 74 28 31 33 32 2c 28 68 3d 28 54 3d 4a 28 65 29 2c 72 6a 28 65 29 29 2c 47 3d 22 22 2c 65 29 29 2c 58 2e 6c 65 6e 67 74 68 29 2c 66 3d 30 3b 68 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 72 6a 28 65 29 7c 30 29 29 25 79 2c 47 2b 3d 57 5b 58 5b 66 5d 5d 3b 4c 28 65 2c 54 2c 47 29 7d 29 2c 70 2c 32 35 30 29 2c 34 33 36 29 2c 30 29 2c 70 29 2c 31 30 32 29 2c 33 32 36 29 2c 5b 32 30 34 38 5d 29 2c 70 29 2c 31 31 33 29 2c 32 34 35 29 2c 51 29 2c 70 29 2c 31 37 31 2c 5b 30 2c 30 2c 30 5d 29 2c 70 29 2c 31 33 37 29 2c 33 35 33 29 2c 5b 5d 29 2c 4c 28 70 2c 37 33 2c 30 29 2c 70 29 2c 36 31 29 2c 70 29 2c 33 37 33 29 2c 70 2e 69 39 3d 30 2c 34 32 31 29 2c 5b 5d 29 2c 70 29 2c 36 35 29 2c 31 31 31 29 29 2c 32 34 30 29 29 Data Ascii: ,y,h){for(y=(X=t(132,(h=(T=J(e),rj(e)),G="",e)),X.length),f=0;h--;)f=((f\|0)+(rj(e)\|0))%y,G+=W[X[f]];L(e,T,G)}),p,250),436),0),p),102),326),[2048]),p),113),245),Q),p),171,[0,0,0]),p),137),353),[]),L(p,73,0),p),61),p),373),p.i9=0,421),[]),p),65),111)),240))
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 31 36 7c 7c 62 3d 3d 32 30 34 7c 7c 62 3d 3d 33 35 33 7c 7c 62 3d 3d 34 32 31 7c 7c 62 3d 3d 37 36 7c 7c 62 3d 3d 31 37 31 7c 7c 62 3d 3d 32 36 38 7c 7c 62 3d 3d 33 32 36 3f 70 2e 4f 5b 62 5d 7c 7c 28 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 34 32 29 29 3a 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 31 33 29 7d 62 3d 3d 32 33 32 26 26 28 70 2e 4e 3d 44 28 66 61 6c 73 65 2c 33 32 2c 70 29 2c 70 2e 46 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 70 2e 59 3d 28 28 70 2e 59 3f 70 2e 59 2b 22 7e 22 3a 22 45 3a 22 29 2b 62 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 62 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 71 28 28 28 Data Ascii: 16\|\|b==204\|\|b==353\|\|b==421\|\|b==76\|\|b==171\|\|b==268\|\|b==326?p.O[b]\|\|(p.O[b]=Yq(p,U,b,142)):p.O[b]=Yq(p,U,b,113)}b==232&&(p.N=D(false,32,p),p.F=void 0)},V=function(p,b){p.Y=((p.Y?p.Y+"~":"E:")+b.message+":"+b.stack).slice(0,2048)},Ie=function(p,b,U,B,Y){q(((
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 31 32 38 29 3a 62 5b 59 2b 2b 5d 3d 42 3e 3e 31 32 7c 32 32 34 2c 62 5b 59 2b 2b 5d 3d 42 3e 3e 36 26 36 33 7c 31 32 38 29 2c 62 5b 59 2b 2b 5d 3d 42 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 62 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 2c 72 29 7b 69 66 28 21 62 2e 59 29 7b 62 2e 49 2b 2b 3b 74 72 79 7b 66 6f 72 28 72 3d 28 42 3d 28 59 3d 62 2e 4b 2c 76 6f 69 64 20 30 29 2c 30 29 3b 2d 2d 70 3b 29 74 72 79 7b 69 66 28 28 55 3d 76 6f 69 64 20 30 2c 62 29 2e 73 29 42 3d 7a 4e 28 62 2c 62 2e 73 29 3b 65 6c 73 65 7b 69 66 28 72 3d 74 28 32 31 32 2c 62 29 2c 72 3e 3d 59 29 62 72 65 61 6b 3b 42 3d 28 55 3d 4a 28 28 4c 28 62 2c 31 32 35 2c 72 29 2c 62 29 29 2c 74 28 55 2c 62 29 29 7d 42 26 26 42 5b 68 34 5d 26 32 30 34 38 3f 42 Data Ascii: 128):b[Y++]=B>>12\|224,b[Y++]=B>>6&63\|128),b[Y++]=B&63\|128);return b},ae=function(p,b,U,B,Y,r){if(!b.Y){b.I++;try{for(r=(B=(Y=b.K,void 0),0);--p;)try{if((U=void 0,b).s)B=zN(b,b.s);else{if(r=t(212,b),r>=Y)break;B=(U=J((L(b,125,r),b)),t(U,b))}B&&B[h4]&2048?B
2024-12-18 21:14:20 UTC	1390	IN	Data Raw: 62 2e 57 2c 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 46 28 74 72 75 65 2c 62 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 55 7d 2c 4f 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 28 62 2e 70 75 73 68 28 70 5b 30 5d 3c 3c 32 34 7c 70 5b 31 5d 3c 3c 31 36 7c 70 5b 32 5d 3c 3c 38 7c 70 5b 33 5d 29 2c 62 2e 70 75 73 68 28 70 5b 34 5d 3c 3c 32 34 7c 70 5b 35 5d 3c 3c 31 36 7c 70 5b 36 5d 3c 3c 38 7c 70 5b 37 5d 29 2c 62 29 2e 70 75 73 68 28 70 5b 38 5d 3c 3c 32 34 7c 70 5b 39 5d 3c 3c 31 36 7c 70 5b 31 30 5d 3c 3c 38 7c 70 5b 31 31 5d 29 7d 2c 5a 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 7a 4e 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 63 72 65 61 74 65 28 Data Ascii: b.W,p(function(){F(true,b,true)});break}}return U},OG=function(p,b){(b.push(p[0]<<24\|p[1]<<16\|p[2]<<8\|p[3]),b.push(p[4]<<24\|p[5]<<16\|p[6]<<8\|p[7]),b).push(p[8]<<24\|p[9]<<16\|p[10]<<8\|p[11])},Z={passive:true,capture:true},zN=function(p,b){return(b=b.create(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49799	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:21 UTC	501	OUT	GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:22 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 18 Dec 2024 21:14:22 GMT Date: Wed, 18 Dec 2024 21:14:22 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:22 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2024-12-18 21:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49800	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:22 UTC	487	OUT	GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:22 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18908 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 13 Dec 2024 09:14:19 GMT Expires: Sat, 13 Dec 2025 09:14:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 475203 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-18 21:14:22 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 69 66 28 21 28 70 3d 28 62 3d 6e 75 6c 6c 2c 42 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 70 29 7c 7c 21 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScr
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 66 6f 72 28 62 3d 5b 5d 3b 70 2d 2d 3b 29 62 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 62 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 62 2e 4a 2e 73 70 6c 69 63 65 28 30 2c 30 2c 70 29 7d 2c 65 5f 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 72 65 74 75 72 6e 20 42 3d 28 70 3d 24 71 28 70 2c 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 26 26 28 62 26 26 62 62 28 62 29 2c 59 3d 76 2c 72 28 29 2c 72 3d 76 6f 69 64 20 30 29 7d 2c 28 59 3d 76 6f 69 64 Data Ascii: DX-License-Identifier: Apache-2.0','/','var H=function(p,b){for(b=[];p--;)b.push(Math.random()255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 33 29 2c 62 2c 55 2c 42 2c 59 2c 72 2c 76 29 3a 6f 65 28 62 2c 70 29 7d 2c 66 69 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 62 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 70 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 70 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 72 6a 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 64 28 70 29 2c 62 29 26 31 32 38 26 26 28 62 3d 62 26 31 32 37 7c 64 28 70 29 3c 3c 37 29 2c 62 7d 2c 76 41 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 70 5b 62 5d 3c 3c 32 34 7c 70 5b 28 62 7c 30 29 2b 31 5d 3c 3c 31 36 7c 70 5b 28 62 7c 30 29 2b 32 5d 3c 3c 38 7c 70 Data Ascii: substring(3),b,U,B,Y,r,v):oe(b,p)},fi=function(p,b){return b=0,function(){return b<p.length?{done:false,value:p[b++]}:{done:true}}},rj=function(p,b){return(b=d(p),b)&128&&(b=b&127\|d(p)<<7),b},vA=function(p,b){return p[b]<<24\|p[(b\|0)+1]<<16\|p[(b\|0)+2]<<8\|p
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 29 29 2c 70 29 2e 42 2b 3d 70 2e 6a 28 29 2d 62 7d 65 6c 73 65 20 69 66 28 42 3d 3d 79 64 29 62 5b 33 5d 26 26 28 70 2e 6f 3d 74 72 75 65 29 2c 62 5b 34 5d 26 26 28 70 2e 44 3d 74 72 75 65 29 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 74 34 29 70 2e 6f 3d 74 72 75 65 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 78 71 29 7b 74 72 79 7b 66 6f 72 28 55 3d 30 3b 55 3c 70 2e 54 2e 6c 65 6e 67 74 68 3b 55 2b 2b 29 74 72 79 7b 59 3d 70 2e 54 5b 55 5d 2c 59 5b 30 5d 5b 59 5b 31 5d 5d 28 59 5b 32 5d 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 63 61 74 63 68 28 72 29 7b 7d 28 28 30 2c 62 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 72 2c 76 29 7b 70 2e 6a 32 28 72 2c 74 72 75 65 2c 76 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 28 43 28 28 72 3d Data Ascii: )),p).B+=p.j()-b}else if(B==yd)b[3]&&(p.o=true),b[4]&&(p.D=true),p.V(b);else if(B==t4)p.o=true,p.V(b);else if(B==xq){try{for(U=0;U<p.T.length;U++)try{Y=p.T[U],Y[0][Y[1]](Y[2])}catch(r){}}catch(r){}((0,b[1])(function(r,v){p.j2(r,true,v)},function(r){(C((r=
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 72 73 65 28 62 29 7d 63 61 74 63 68 28 65 29 7b 70 2e 67 3d 7b 7d 7d 46 28 28 28 50 28 28 50 28 28 4c 28 70 2c 33 31 30 2c 28 4c 28 70 2c 28 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 2c 54 2c 79 2c 68 2c 52 2c 61 2c 77 2c 49 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 4e 28 6e 2c 75 29 7b 66 6f 72 28 3b 52 3c 6e 3b 29 61 7c 3d 64 28 65 29 3c 3c 52 2c 52 2b 3d 38 3b 72 65 74 75 72 6e 20 75 3d 28 52 2d 3d 6e 2c 61 29 26 28 31 3c 3c 6e 29 2d 31 2c 61 3e 3e 3d 6e 2c 75 7d 66 6f 72 28 49 3d 28 79 3d 28 66 3d 28 47 3d 4a 28 65 29 2c 52 3d 61 3d 30 2c 4e 28 33 29 7c 30 29 2b 31 2c 6d 3d 4e 28 35 29 2c 30 29 2c 77 3d 5b 5d 2c 30 29 3b 79 3c 6d 3b 79 2b 2b 29 54 3d 4e 28 31 29 2c 77 2e 70 75 73 68 28 54 29 2c 49 2b 3d 54 3f 30 3a 31 3b 66 6f 72 28 79 Data Ascii: rse(b)}catch(e){p.g={}}F(((P((P((L(p,310,(L(p,(((P(function(e,G,X,f,T,y,h,R,a,w,I,m){function N(n,u){for(;R<n;)a\|=d(e)<<R,R+=8;return u=(R-=n,a)&(1<<n)-1,a>>=n,u}for(I=(y=(f=(G=J(e),R=a=0,N(3)\|0)+1,m=N(5),0),w=[],0);y<m;y++)T=N(1),w.push(T),I+=T?0:1;for(y
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 3d 28 47 5b 47 5b 33 35 33 5d 3d 65 2e 4f 5b 33 35 33 5d 2c 33 32 36 5d 3d 65 2e 4f 5b 33 32 36 5d 2c 47 29 7d 65 6c 73 65 20 4c 28 65 2c 32 31 32 2c 65 2e 4b 29 7d 2c 28 4c 28 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 58 3d 28 47 3d 28 66 3d 4a 28 65 29 2c 4a 29 28 65 29 2c 4a 28 65 29 29 2c 47 3d 74 28 47 2c 65 29 2c 66 3d 74 28 66 2c 65 29 2c 58 29 2c 66 20 69 6e 20 47 7c 30 29 7d 2c 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 66 3d 74 28 28 58 3d 28 47 3d 28 66 3d 28 58 3d 4a 28 65 29 2c 4a 28 65 29 29 2c 4a 28 65 29 29 2c 74 28 58 2c 65 29 29 2c 66 29 2c 65 29 2c 47 29 2c 58 5b 66 5d 29 7d 2c 28 4c 28 70 2c 28 50 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =(G[G[353]=e.O[353],326]=e.O[326],G)}else L(e,212,e.K)},(L((L(p,(P(function(e,G,X,f){L(e,(X=(G=(f=J(e),J)(e),J(e)),G=t(G,e),f=t(f,e),X),f in G\|0)},(L(p,(P(function(e,G,X,f){L(e,(f=t((X=(G=(f=(X=J(e),J(e)),J(e)),t(X,e)),f),e),G),X[f])},(L(p,(P((P(function(
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 2c 79 2c 68 29 7b 66 6f 72 28 79 3d 28 58 3d 74 28 31 33 32 2c 28 68 3d 28 54 3d 4a 28 65 29 2c 72 6a 28 65 29 29 2c 47 3d 22 22 2c 65 29 29 2c 58 2e 6c 65 6e 67 74 68 29 2c 66 3d 30 3b 68 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 72 6a 28 65 29 7c 30 29 29 25 79 2c 47 2b 3d 57 5b 58 5b 66 5d 5d 3b 4c 28 65 2c 54 2c 47 29 7d 29 2c 70 2c 32 35 30 29 2c 34 33 36 29 2c 30 29 2c 70 29 2c 31 30 32 29 2c 33 32 36 29 2c 5b 32 30 34 38 5d 29 2c 70 29 2c 31 31 33 29 2c 32 34 35 29 2c 51 29 2c 70 29 2c 31 37 31 2c 5b 30 2c 30 2c 30 5d 29 2c 70 29 2c 31 33 37 29 2c 33 35 33 29 2c 5b 5d 29 2c 4c 28 70 2c 37 33 2c 30 29 2c 70 29 2c 36 31 29 2c 70 29 2c 33 37 33 29 2c 70 2e 69 39 3d 30 2c 34 32 31 29 2c 5b 5d 29 2c 70 29 2c 36 35 29 2c 31 31 31 29 29 2c 32 34 30 29 29 Data Ascii: ,y,h){for(y=(X=t(132,(h=(T=J(e),rj(e)),G="",e)),X.length),f=0;h--;)f=((f\|0)+(rj(e)\|0))%y,G+=W[X[f]];L(e,T,G)}),p,250),436),0),p),102),326),[2048]),p),113),245),Q),p),171,[0,0,0]),p),137),353),[]),L(p,73,0),p),61),p),373),p.i9=0,421),[]),p),65),111)),240))
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 31 36 7c 7c 62 3d 3d 32 30 34 7c 7c 62 3d 3d 33 35 33 7c 7c 62 3d 3d 34 32 31 7c 7c 62 3d 3d 37 36 7c 7c 62 3d 3d 31 37 31 7c 7c 62 3d 3d 32 36 38 7c 7c 62 3d 3d 33 32 36 3f 70 2e 4f 5b 62 5d 7c 7c 28 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 34 32 29 29 3a 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 31 33 29 7d 62 3d 3d 32 33 32 26 26 28 70 2e 4e 3d 44 28 66 61 6c 73 65 2c 33 32 2c 70 29 2c 70 2e 46 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 70 2e 59 3d 28 28 70 2e 59 3f 70 2e 59 2b 22 7e 22 3a 22 45 3a 22 29 2b 62 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 62 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 71 28 28 28 Data Ascii: 16\|\|b==204\|\|b==353\|\|b==421\|\|b==76\|\|b==171\|\|b==268\|\|b==326?p.O[b]\|\|(p.O[b]=Yq(p,U,b,142)):p.O[b]=Yq(p,U,b,113)}b==232&&(p.N=D(false,32,p),p.F=void 0)},V=function(p,b){p.Y=((p.Y?p.Y+"~":"E:")+b.message+":"+b.stack).slice(0,2048)},Ie=function(p,b,U,B,Y){q(((
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 31 32 38 29 3a 62 5b 59 2b 2b 5d 3d 42 3e 3e 31 32 7c 32 32 34 2c 62 5b 59 2b 2b 5d 3d 42 3e 3e 36 26 36 33 7c 31 32 38 29 2c 62 5b 59 2b 2b 5d 3d 42 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 62 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 2c 72 29 7b 69 66 28 21 62 2e 59 29 7b 62 2e 49 2b 2b 3b 74 72 79 7b 66 6f 72 28 72 3d 28 42 3d 28 59 3d 62 2e 4b 2c 76 6f 69 64 20 30 29 2c 30 29 3b 2d 2d 70 3b 29 74 72 79 7b 69 66 28 28 55 3d 76 6f 69 64 20 30 2c 62 29 2e 73 29 42 3d 7a 4e 28 62 2c 62 2e 73 29 3b 65 6c 73 65 7b 69 66 28 72 3d 74 28 32 31 32 2c 62 29 2c 72 3e 3d 59 29 62 72 65 61 6b 3b 42 3d 28 55 3d 4a 28 28 4c 28 62 2c 31 32 35 2c 72 29 2c 62 29 29 2c 74 28 55 2c 62 29 29 7d 42 26 26 42 5b 68 34 5d 26 32 30 34 38 3f 42 Data Ascii: 128):b[Y++]=B>>12\|224,b[Y++]=B>>6&63\|128),b[Y++]=B&63\|128);return b},ae=function(p,b,U,B,Y,r){if(!b.Y){b.I++;try{for(r=(B=(Y=b.K,void 0),0);--p;)try{if((U=void 0,b).s)B=zN(b,b.s);else{if(r=t(212,b),r>=Y)break;B=(U=J((L(b,125,r),b)),t(U,b))}B&&B[h4]&2048?B
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 62 2e 57 2c 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 46 28 74 72 75 65 2c 62 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 55 7d 2c 4f 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 28 62 2e 70 75 73 68 28 70 5b 30 5d 3c 3c 32 34 7c 70 5b 31 5d 3c 3c 31 36 7c 70 5b 32 5d 3c 3c 38 7c 70 5b 33 5d 29 2c 62 2e 70 75 73 68 28 70 5b 34 5d 3c 3c 32 34 7c 70 5b 35 5d 3c 3c 31 36 7c 70 5b 36 5d 3c 3c 38 7c 70 5b 37 5d 29 2c 62 29 2e 70 75 73 68 28 70 5b 38 5d 3c 3c 32 34 7c 70 5b 39 5d 3c 3c 31 36 7c 70 5b 31 30 5d 3c 3c 38 7c 70 5b 31 31 5d 29 7d 2c 5a 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 7a 4e 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 63 72 65 61 74 65 28 Data Ascii: b.W,p(function(){F(true,b,true)});break}}return U},OG=function(p,b){(b.push(p[0]<<24\|p[1]<<16\|p[2]<<8\|p[3]),b.push(p[4]<<24\|p[5]<<16\|p[6]<<8\|p[7]),b).push(p[8]<<24\|p[9]<<16\|p[10]<<8\|p[11])},Z={passive:true,capture:true},zN=function(p,b){return(b=b.create(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49801	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:22 UTC	878	OUT	GET /recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:22 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 18 Dec 2024 21:14:22 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-OCmvmOVtMW96kJVRU7j9KA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:22 UTC	229	IN	Data Raw: 31 65 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 Data Ascii: 1e1a<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* c
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 Data Ascii: yrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A6
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+0
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family:
2024-12-18 21:14:22 UTC	1390	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2024-12-18 21:14:22 UTC	535	IN	Data Raw: 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 4f 43 6d 76 6d 4f 56 74 4d 57 39 36 6b 4a 56 52 55 37 6a 39 4b 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4f 43 6d 76 6d 4f 56 74 4d 57 39 36 6b 4a 56 52 55 37 6a 39 4b 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 66 72 61 6d 65 2e 4d 61 69 6e 2e 69 6e 69 74 Data Ascii: zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js" nonce="OCmvmOVtMW96kJVRU7j9KA"> </script></head><body><input type="hidden" id="recaptcha-token"><script type="text/javascript" nonce="OCmvmOVtMW96kJVRU7j9KA"> recaptcha.frame.Main.init
2024-12-18 21:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49802	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:24 UTC	875	OUT	POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8035 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:24 UTC	8035	OUT	Data Raw: 0a 18 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 12 ce 0f 30 33 41 46 63 57 65 41 36 78 61 75 52 50 59 33 71 6f 4e 62 64 68 73 46 43 6f 33 61 66 61 41 43 4b 6f 64 47 55 65 46 50 61 4b 6d 43 41 65 6d 75 44 41 6a 65 74 4d 5a 4e 79 53 46 65 47 6d 46 62 62 44 6c 68 7a 69 75 61 4d 73 5f 74 36 79 48 69 6c 70 66 56 42 57 75 70 79 2d 31 52 56 54 63 7a 43 33 6c 53 35 4e 69 64 52 57 45 45 6c 46 73 58 4c 70 6f 4f 74 57 54 77 32 64 55 2d 2d 6f 31 30 62 65 73 6c 66 39 7a 48 5f 77 36 7a 6e 48 70 73 35 57 46 6c 33 48 49 69 75 62 53 49 32 6f 33 68 39 6b 42 4a 6a 70 4a 47 6b 6c 73 7a 65 31 68 68 47 6b 57 58 4a 4a 72 6b 46 53 56 45 7a 46 48 2d 48 58 49 71 7a 51 6b 76 67 67 71 69 42 77 49 56 58 44 49 62 69 34 47 7a 5f 5f 5f 73 68 70 2d 37 5a 4e Data Ascii: zIriijn3uj5Vpknvt_LnfNbF03AFcWeA6xauRPY3qoNbdhsFCo3afaACKodGUeFPaKmCAemuDAjetMZNySFeGmFbbDlhziuaMs_t6yHilpfVBWupy-1RVTczC3lS5NidRWEElFsXLpoOtWTw2dU--o10beslf9zH_w6znHps5WFl3HIiubSI2o3h9kBJjpJGklsze1hhGkWXJJrkFSVEzFH-HXIqzQkvggqiBwIVXDIbi4Gz___shp-7ZN
2024-12-18 21:14:25 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Wed, 18 Dec 2024 21:14:25 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38; Expires=Mon, 16-Jun-2025 21:14:25 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Wed, 18 Dec 2024 21:14:25 GMT Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:25 UTC	390	IN	Data Raw: 34 30 38 65 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 79 5f 48 70 31 79 48 62 4c 7a 58 69 31 4e 6d 75 57 78 59 51 37 4b 48 63 5a 71 35 37 64 39 70 64 59 62 4c 36 39 35 6e 56 68 37 47 62 64 5f 7a 73 35 39 69 48 51 49 51 70 4f 51 74 70 50 47 4b 36 43 73 32 52 44 75 72 6b 59 72 35 59 4f 47 73 34 62 46 79 54 7a 31 56 70 41 44 45 46 6a 71 56 79 33 5f 61 68 50 74 35 4d 56 43 66 75 2d 63 45 38 75 6f 56 58 52 4d 6e 58 55 6c 6d 6e 2d 70 32 32 72 70 4f 70 58 64 67 32 5f 38 6d 69 4a 30 50 35 55 33 63 54 5a 54 6d 52 61 4b 38 76 4a 63 57 35 51 57 45 33 59 51 78 4c 5f 77 71 43 70 77 6e 56 6f 53 70 53 73 56 64 74 33 34 64 4e 72 76 5f 72 35 5f 76 34 76 52 65 36 47 6e 70 48 75 58 36 44 63 6c 4b 2d 63 4c 74 47 49 6e 51 7a 74 58 62 4f 53 Data Ascii: 408e)]}'["rresp","03AFcWeA5y_Hp1yHbLzXi1NmuWxYQ7KHcZq57d9pdYbL695nVh7Gbd_zs59iHQIQpOQtpPGK6Cs2RDurkYr5YOGs4bFyTz1VpADEFjqVy3_ahPt5MVCfu-cE8uoVXRMnXUlmn-p22rpOpXdg2_8miJ0P5U3cTZTmRaK8vJcW5QWE3YQxL_wqCpwnVoSpSsVdt34dNrv_r5_v4vRe6GnpHuX6DclK-cLtGInQztXbOS
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 6c 33 2d 75 56 77 52 44 5a 31 56 4d 51 61 79 41 38 6a 5f 6b 5f 4d 5f 57 6d 73 51 72 66 70 2d 6f 4e 70 4b 6a 6c 2d 75 5f 63 4c 78 45 35 64 55 61 4c 4e 54 48 59 79 73 74 63 74 46 79 6b 55 6d 5f 48 6a 66 61 4c 4a 63 79 46 36 52 31 74 38 63 62 77 64 38 66 72 42 65 5f 56 43 75 6b 37 56 59 49 56 6c 70 39 49 6b 46 50 36 48 30 67 77 6e 72 5a 51 48 43 42 77 61 4d 63 51 63 49 35 33 63 41 42 45 42 6e 2d 4d 66 57 46 6a 39 4a 75 6b 49 6c 45 36 5a 69 71 56 4c 54 55 39 71 4b 36 2d 56 4c 57 72 30 79 49 54 67 4f 5a 71 44 38 6a 66 45 35 77 6a 47 78 6c 57 47 6d 70 47 59 38 4f 38 67 38 72 59 71 48 59 72 53 72 77 55 6f 70 46 52 55 59 74 41 54 6a 52 5f 4e 75 62 73 32 42 32 59 37 73 42 63 5a 36 30 43 76 37 50 50 48 69 6d 6b 61 71 31 4f 46 78 48 70 2d 54 65 42 37 32 59 62 34 4a Data Ascii: l3-uVwRDZ1VMQayA8j_k_M_WmsQrfp-oNpKjl-u_cLxE5dUaLNTHYystctFykUm_HjfaLJcyF6R1t8cbwd8frBe_VCuk7VYIVlp9IkFP6H0gwnrZQHCBwaMcQcI53cABEBn-MfWFj9JukIlE6ZiqVLTU9qK6-VLWr0yITgOZqD8jfE5wjGxlWGmpGY8O8g8rYqHYrSrwUopFRUYtATjR_Nubs2B2Y7sBcZ60Cv7PPHimkaq1OFxHp-TeB72Yb4J
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 74 65 6f 4f 6f 67 54 71 6b 57 62 6a 65 5f 5f 6c 49 78 6d 6b 4e 5f 4d 73 30 77 54 64 49 69 65 48 48 43 32 42 58 58 4e 72 30 75 4f 59 78 65 66 44 56 44 4a 50 76 47 72 51 58 41 55 32 75 6e 69 4d 44 72 6b 5f 42 30 68 4a 47 79 61 36 72 52 4a 41 32 67 6b 77 73 70 53 55 52 33 65 79 6c 69 38 57 36 34 5a 63 32 49 56 31 34 33 46 69 34 37 63 47 47 62 58 34 6c 77 37 71 69 41 35 53 58 6e 59 78 42 47 52 31 38 66 76 32 6d 52 4c 4c 76 31 62 66 79 32 32 69 51 43 34 6c 31 73 62 53 4d 59 63 33 46 4d 6e 62 64 46 72 4d 61 6d 76 41 7a 37 6a 5f 68 55 55 44 62 56 56 5a 4e 58 6a 64 71 49 46 62 34 45 76 4b 51 74 76 32 56 39 71 52 59 49 76 47 76 62 77 37 76 42 51 77 73 4d 45 61 6a 58 6a 4d 7a 6f 73 36 78 44 56 34 47 63 32 5f 34 73 51 6a 58 48 61 6f 79 70 2d 6c 50 30 6f 6f 30 4d 2d Data Ascii: teoOogTqkWbje__lIxmkN_Ms0wTdIieHHC2BXXNr0uOYxefDVDJPvGrQXAU2uniMDrk_B0hJGya6rRJA2gkwspSUR3eyli8W64Zc2IV143Fi47cGGbX4lw7qiA5SXnYxBGR18fv2mRLLv1bfy22iQC4l1sbSMYc3FMnbdFrMamvAz7j_hUUDbVVZNXjdqIFb4EvKQtv2V9qRYIvGvbw7vBQwsMEajXjMzos6xDV4Gc2_4sQjXHaoyp-lP0oo0M-
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 66 67 30 7a 52 36 44 37 4c 39 52 53 33 5f 74 42 36 47 63 35 56 30 64 58 5a 5a 75 46 79 70 43 41 42 65 57 62 52 61 58 75 4e 5a 58 75 62 46 57 33 4f 59 61 35 41 53 46 41 6f 59 4c 47 41 4b 66 56 33 65 63 50 4f 2d 37 68 6e 48 5a 34 34 78 47 2d 58 7a 37 31 6f 64 76 6f 31 72 54 4c 78 47 45 55 4b 73 37 69 5f 52 7a 30 46 61 36 5a 71 6c 63 6f 33 62 4c 56 4a 50 74 31 73 74 59 6c 53 59 41 67 56 56 4c 50 6b 55 73 77 4b 57 32 53 74 52 56 52 68 56 7a 71 6e 4d 50 75 63 6a 6b 38 4f 6f 41 72 76 62 39 75 32 58 32 34 76 43 30 59 51 4c 58 4b 47 4c 32 43 77 44 6a 4a 52 38 4b 42 75 54 49 57 59 4e 31 4f 47 4d 6a 53 61 7a 71 4d 79 2d 44 38 50 76 61 49 39 39 71 39 61 66 79 5f 46 6e 59 39 31 4d 71 67 43 43 34 37 4e 65 6d 48 30 59 4b 65 62 33 57 50 2d 45 4c 78 51 6d 4c 61 58 7a 4d Data Ascii: fg0zR6D7L9RS3_tB6Gc5V0dXZZuFypCABeWbRaXuNZXubFW3OYa5ASFAoYLGAKfV3ecPO-7hnHZ44xG-Xz71odvo1rTLxGEUKs7i_Rz0Fa6Zqlco3bLVJPt1stYlSYAgVVLPkUswKW2StRVRhVzqnMPucjk8OoArvb9u2X24vC0YQLXKGL2CwDjJR8KBuTIWYN1OGMjSazqMy-D8PvaI99q9afy_FnY91MqgCC47NemH0YKeb3WP-ELxQmLaXzM
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 66 6d 4e 58 66 7a 46 67 4f 53 4a 6a 5a 31 71 45 42 38 6d 37 69 31 73 33 42 53 30 30 48 79 44 63 5f 42 46 71 47 70 6f 6f 75 45 46 61 30 70 46 75 67 55 34 6a 7a 46 50 4e 79 47 41 71 56 64 79 35 50 7a 31 46 48 4c 49 5a 4f 4b 30 4a 43 30 76 4d 45 31 73 64 5a 4e 39 58 7a 66 67 61 46 46 4c 53 73 58 57 65 62 31 68 64 6c 33 38 57 2d 6d 7a 59 4b 30 42 48 55 36 75 53 67 31 63 2d 71 51 56 75 78 72 2d 6b 74 67 4f 4e 38 37 53 7a 47 67 5f 7a 69 53 36 39 7a 69 4a 42 6a 58 56 56 52 5a 52 73 66 31 71 77 75 4a 39 36 67 31 65 58 51 75 37 65 6c 66 4a 2d 54 62 31 71 4d 31 59 56 67 4c 76 4c 2d 35 31 50 42 38 58 7a 6d 62 50 72 6e 39 4d 74 6a 6d 56 66 70 70 4e 33 6d 37 4b 70 36 46 78 6e 4f 6b 36 70 5a 64 38 55 39 61 61 79 6b 66 4b 33 69 31 69 78 49 64 65 72 35 6e 7a 52 41 4f 31 Data Ascii: fmNXfzFgOSJjZ1qEB8m7i1s3BS00HyDc_BFqGpoouEFa0pFugU4jzFPNyGAqVdy5Pz1FHLIZOK0JC0vME1sdZN9XzfgaFFLSsXWeb1hdl38W-mzYK0BHU6uSg1c-qQVuxr-ktgON87SzGg_ziS69ziJBjXVVRZRsf1qwuJ96g1eXQu7elfJ-Tb1qM1YVgLvL-51PB8XzmbPrn9MtjmVfppN3m7Kp6FxnOk6pZd8U9aaykfK3i1ixIder5nzRAO1
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 58 65 6a 56 57 55 7a 52 78 52 48 4e 56 4d 56 4e 72 62 33 4a 54 59 54 68 4f 61 56 4a 31 52 54 56 4e 51 6b 70 35 61 30 4a 35 63 47 64 69 52 54 41 30 56 48 41 34 54 46 4e 4e 59 57 6c 4c 61 6e 6f 79 56 32 49 30 65 58 64 7a 53 48 4e 49 64 6e 64 6c 65 57 4a 35 4e 54 42 70 5a 56 6b 30 56 6e 42 46 4b 33 52 45 56 46 46 59 4c 30 4e 43 51 6e 4e 49 53 32 46 6c 61 48 4a 4d 5a 53 39 74 53 32 39 51 4d 6d 38 35 5a 32 35 45 51 55 78 49 5a 45 70 61 51 6d 68 51 61 6a 55 34 52 6b 56 70 52 6b 49 31 63 6d 52 50 63 44 63 76 63 48 6c 50 61 44 4e 61 52 58 49 30 4e 30 77 77 55 55 77 33 64 6d 68 5a 5a 45 74 55 4e 57 64 6d 65 45 78 4f 64 32 6c 6e 4d 47 52 52 4e 6a 56 44 51 32 56 34 65 6c 56 50 53 6a 4e 4c 53 58 64 42 57 45 4a 48 51 54 42 70 62 58 52 48 56 6b 64 43 56 45 68 71 57 47 Data Ascii: XejVWUzRxRHNVMVNrb3JTYThOaVJ1RTVNQkp5a0J5cGdiRTA0VHA4TFNNYWlLanoyV2I0eXdzSHNIdndleWJ5NTBpZVk0VnBFK3REVFFYL0NCQnNIS2FlaHJMZS9tS29QMm85Z25EQUxIZEpaQmhQajU4RkVpRkI1cmRPcDcvcHlPaDNaRXI0N0wwUUw3dmhZZEtUNWdmeExOd2lnMGRRNjVDQ2V4elVPSjNLSXdBWEJHQTBpbXRHVkdCVEhqWG
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 55 6c 54 63 6e 55 33 62 55 56 73 64 31 70 31 52 32 68 6b 55 6e 5a 4e 4b 7a 56 72 53 47 4a 52 61 47 70 78 51 54 6c 4c 53 30 59 79 55 56 52 35 64 6a 64 44 61 48 70 61 5a 6b 6b 30 63 6c 56 75 64 6d 78 78 62 6a 56 6a 54 45 6c 6e 5a 58 63 34 53 6b 68 51 4d 6b 4e 6f 4b 33 4a 55 54 56 64 50 64 6e 56 6a 4f 45 46 6a 4b 32 35 5a 51 33 5a 6e 4d 56 4a 4a 59 6a 4e 42 53 55 52 6b 54 33 64 4c 62 6e 6c 51 54 6d 78 74 57 69 74 6c 63 30 64 35 62 33 6f 30 51 6e 4a 75 53 45 74 55 65 48 6c 48 65 47 68 6e 4f 48 6b 33 52 6b 68 6d 53 44 6c 4a 59 6b 56 49 64 44 68 73 62 54 55 76 4e 6b 4a 77 54 6d 5a 35 56 6d 5a 31 4b 7a 46 6b 54 31 6b 72 62 44 52 33 52 44 68 78 64 33 52 75 65 55 77 76 5a 44 4e 4e 57 45 6b 33 54 58 56 4f 52 33 41 35 56 31 63 76 53 47 46 71 61 47 74 54 4d 7a 59 34 Data Ascii: UlTcnU3bUVsd1p1R2hkUnZNKzVrSGJRaGpxQTlLS0YyUVR5djdDaHpaZkk0clVudmxxbjVjTElnZXc4SkhQMkNoK3JUTVdPdnVjOEFjK25ZQ3ZnMVJJYjNBSURkT3dLbnlQTmxtWitlc0d5b3o0QnJuSEtUeHlHeGhnOHk3RkhmSDlJYkVIdDhsbTUvNkJwTmZ5VmZ1KzFkT1krbDR3RDhxd3RueUwvZDNNWEk3TXVOR3A5V1cvSGFqaGtTMzY4
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 51 51 6b 6c 35 53 45 68 71 59 6e 56 54 63 48 6c 49 59 58 68 6f 56 7a 68 79 5a 58 45 76 65 6a 56 4e 4c 31 70 44 55 44 6b 77 56 6c 4a 4d 61 6b 51 78 57 44 51 33 53 54 4e 56 64 47 56 4e 61 7a 42 5a 61 45 6f 72 56 7a 51 7a 62 46 56 53 4d 30 74 69 4e 57 5a 6f 4f 58 68 4f 4d 47 5a 7a 54 6d 34 79 4f 47 56 54 55 55 6c 4e 51 6a 56 4f 53 6d 78 55 54 7a 46 48 52 56 56 52 4d 58 70 46 53 55 55 79 4e 6d 59 35 5a 6d 38 31 52 47 56 6a 4f 46 56 43 62 7a 4a 69 64 44 52 54 5a 6d 64 77 64 6e 68 75 4b 7a 6b 72 4e 6c 56 42 4d 57 70 74 63 6b 74 46 4e 32 31 5a 4c 31 42 44 53 7a 5a 42 64 46 5a 52 52 33 64 4f 52 6c 64 35 59 6d 4e 70 63 57 6c 6f 4e 46 64 57 65 6d 70 61 61 56 4a 6b 63 44 59 77 52 54 67 72 4e 32 45 76 4c 31 67 7a 5a 6a 56 34 52 7a 46 36 64 7a 4d 78 63 48 6c 47 55 6b Data Ascii: QQkl5SEhqYnVTcHlIYXhoVzhyZXEvejVNL1pDUDkwVlJMakQxWDQ3STNVdGVNazBZaEorVzQzbFVSM0tiNWZoOXhOMGZzTm4yOGVTUUlNQjVOSmxUTzFHRVVRMXpFSUUyNmY5Zm81RGVjOFVCbzJidDRTZmdwdnhuKzkrNlVBMWptcktFN21ZL1BDSzZBdFZRR3dORld5YmNpcWloNFdWempaaVJkcDYwRTgrN2EvL1gzZjV4RzF6dzMxcHlGUk
2024-12-18 21:14:25 UTC	1390	IN	Data Raw: 48 64 69 4d 55 56 61 63 47 4a 55 64 32 5a 4c 64 6c 56 76 4f 47 52 42 63 33 70 4b 64 47 4a 44 57 58 5a 68 65 6a 52 56 52 48 56 78 4f 57 5a 58 51 32 52 75 64 33 42 4c 52 6d 46 6b 59 6b 67 72 63 53 39 59 56 46 56 71 52 45 67 7a 63 47 74 47 57 6a 4e 72 4c 30 52 34 65 57 5a 71 61 31 63 30 61 58 6c 73 61 6a 4a 55 59 30 34 35 62 32 74 42 61 30 70 49 54 30 64 44 56 44 68 68 4d 46 70 46 5a 55 46 4a 56 48 6b 76 65 6c 42 45 65 44 52 69 4f 56 6c 4d 56 79 74 61 51 6b 52 45 55 6b 6c 70 4e 6e 52 57 65 47 63 33 4d 6b 74 4a 52 48 4e 4a 4e 53 73 76 62 46 6c 6a 62 45 46 6c 54 6e 56 73 53 30 59 79 57 56 52 4a 64 6d 56 32 56 31 64 45 61 58 70 4a 5a 6a 4a 54 5a 57 77 76 52 55 6c 4b 5a 47 35 4e 64 32 64 45 4d 47 59 79 63 55 46 79 64 57 56 73 4e 30 5a 36 52 7a 42 4d 57 55 31 57 Data Ascii: HdiMUVacGJUd2ZLdlVvOGRBc3pKdGJDWXZhejRVRHVxOWZXQ2Rud3BLRmFkYkgrcS9YVFVqREgzcGtGWjNrL0R4eWZqa1c0aXlsajJUY045b2tBa0pIT0dDVDhhMFpFZUFJVHkvelBEeDRiOVlMVytaQkREUklpNnRWeGc3MktJRHNJNSsvbFljbEFlTnVsS0YyWVRJdmV2V1dEaXpJZjJTZWwvRUlKZG5Nd2dEMGYycUFydWVsN0Z6RzBMWU1W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49803	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:25 UTC	1328	OUT	GET /__ptq.gif?k=18&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556463915&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=D4NJw74L0JBnUML7CEDPXSPrapZO4zPzyTTcY4y7PTE-1734556446-1.0.1.1-Ekkh1oTNInCqFFd6kzgbEzq95nD2p5AukETWvWLcV4R1EzY3nlyIC61rTG6GfWDZZ7FYJy1mdTcaeIksnFgASg; _cfuvid=p_BXxO5wxL_kyzYG9_RmjXh60LhFOhCh.4pxQ_Apt4k-1734556446344-0.0.1.1-604800000
2024-12-18 21:14:26 UTC	1202	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:25 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f4229973d5218b8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-7l5j6 x-evy-trace-virtual-host: all x-hubspot-correlation-id: d752cf5c-fea0-4f47-870a-5a4bd85423ad x-request-id: d752cf5c-fea0-4f47-870a-5a4bd85423ad x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BXpvzAH7qckuWV7pZuE2Y1w4djwInw3PiK6nGGIh9PYna0iWD5ib%2FgLiaXlvJ933m%2FI7zQnDqjjBZk2N%2BetMkA%2Ben3f9RfoKIxA0RbDk0v9oSoOqcqliEg0xtsZ56Vh4pZiO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-18 21:14:26 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49809	104.16.118.116	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:27 UTC	1091	OUT	GET /__ptq.gif?k=15&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442940&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=D4NJw74L0JBnUML7CEDPXSPrapZO4zPzyTTcY4y7PTE-1734556446-1.0.1.1-Ekkh1oTNInCqFFd6kzgbEzq95nD2p5AukETWvWLcV4R1EzY3nlyIC61rTG6GfWDZZ7FYJy1mdTcaeIksnFgASg; _cfuvid=p_BXxO5wxL_kyzYG9_RmjXh60LhFOhCh.4pxQ_Apt4k-1734556446344-0.0.1.1-604800000
2024-12-18 21:14:27 UTC	1212	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 21:14:27 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f4229a27a8b0f6d-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 4 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-wf92v x-evy-trace-virtual-host: all x-hubspot-correlation-id: 44603e83-361c-4919-b147-b2c9b60681a3 x-request-id: 44603e83-361c-4919-b147-b2c9b60681a3 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qFYhMTWTFA8GsQh%2B3SZbVJ8NUBT4J7aTsOhAohQImS%2FzjGHUMPQ1g%2BzdExbrQa%2FYStGl8i45l%2FQsOm1b%2BX0CDlkS%2BexwlJPCE8EYV3gOgF9%2BxFCfdUZtAdISDqfl19%2F0Ty7H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-18 21:14:27 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49807	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:27 UTC	1164	OUT	GET /recaptcha/enterprise/payload?p=06AFcWeA6Qi13dSowk5ut8_juFpgs7BpbOsTln9vEaPDJqsUrnazeyGybbaF9GwZRGmy14JuVizx2NDRb2X8Sw4xCMdZ2CXzErPBStH7NAxSM_fc8hC2wcji8qnZ_72FHj8PNypRJE41DfuvoCsl5DCuvh08YFNSYP7NT-zij_TiBSzUt3h5K7t0AhErCTDL3ywP0MCcqdj-M9&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:28 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 18 Dec 2024 21:14:28 GMT Date: Wed, 18 Dec 2024 21:14:28 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-18 21:14:28 UTC	709	IN	Data Raw: 38 35 32 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 8527JFIFC!"$"$C"}!1AQa"q
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: da e9 d2 b8 17 36 70 cd 9e ce 01 cd 38 c9 c6 42 28 c7 b0 34 35 c9 19 fd e2 8f cb 8a 2c 05 36 f0 c7 85 a4 72 ef e1 cb 02 5b ae 61 18 3f 5c 75 ad 21 0d 9c 56 eb 0c 16 c9 04 68 00 44 8d 08 51 f4 15 51 ee d0 7f cb c0 3f 46 cd 35 6f a3 6f e3 91 bf 03 4b 95 02 d0 83 51 b4 33 c3 24 2c 27 65 27 3f 76 b8 9d 6b c3 3e 20 b9 76 8c 59 d9 dd da 13 ca 3b 60 b0 f7 cf 43 ee 0d 77 be 76 ef bb 1b fe 3d 69 af 71 2a b0 c4 38 1e ac d4 d6 9b 0c f2 8d 3b e1 bd d3 44 3c ed 3a 78 c9 73 95 17 0a 30 3d 73 ce 6b 6a d7 e1 ac 31 95 91 44 b1 c8 87 2a 1a e0 30 07 f0 15 dd b5 c4 eb cb 9b 75 07 fd bc 9a 86 4b b2 4e 05 ca 67 d1 53 35 4e 4d f5 15 8c 51 e1 8d 53 0a 87 55 01 71 86 c0 3d 3d a8 8f c1 ca 8a c3 fb 41 dc 93 90 c5 06 57 e9 5b 3e 7c 8c 84 ac 77 0f cf 50 80 1a 92 04 be 73 88 ed a5 c7 Data Ascii: 6p8B(45,6r[a?\u!VhDQQ?F5ooKQ3$,'e'?vk> vY;`Cwv=iq8;D<:xs0=skj1D0uKNgS5NMQSUq==AW[>\|wPs
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: f4 43 fd 69 51 9b 6f ee 34 a7 1f ef 00 2b 73 ed 68 07 ca 91 2f d1 05 23 6a 04 0c 6e 23 e9 c5 3e 56 2e 64 65 28 d5 08 c4 5a 62 7d 49 e2 9f f6 4d 66 4c 1d d0 43 9e b8 5c 91 f9 d5 d6 d4 33 fc 47 f3 a8 da fd 70 78 e6 9f 23 0e 62 28 f4 9b e6 e1 f5 36 41 ec 47 f8 55 98 f4 a8 86 05 c5 e4 92 fb 65 aa 03 a8 13 c2 83 f8 53 5a ee 76 e8 8d f8 f1 47 20 b9 8d 28 ec 34 a4 c1 c6 48 f5 5a 98 1b 28 f8 8d 61 ff 00 81 1a c1 7b 89 3f 89 d1 7e ad 51 b5 ca 67 e6 9d 4f fb aa 4d 3e 44 2e 63 a0 6b 95 1c 23 40 bf 4c 53 5a e9 fa 79 b9 f6 df 5c eb dc c2 3b ca df 40 05 42 d7 89 93 88 b3 fe f3 93 54 a0 27 23 a2 92 e5 be bf 8d 40 d7 92 64 e1 18 fd 06 6b 0b ed ae 3a 08 d7 e8 a2 90 df 5c 11 8f 35 ff 00 03 8a 7c 82 e6 36 5e f2 73 d1 18 7d 46 2a 19 6e 5c fd f9 14 7f c0 ab 19 a7 73 92 49 3f Data Ascii: CiQo4+sh/#jn#>V.de(Zb}IMfLC\3Gpx#b(6AGUeSZvG (4HZ(a{?~QgOM>D.ck#@LSZy\;@BT'#@dk:\5\|6^s}F*n\sI?
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: 85 df 04 2b 1c fa 0a 5b 6e 31 bb f8 ce 49 a4 25 cf 41 56 92 d1 95 bf 7a ea 8b df b9 ab 08 34 f8 c0 dc b2 c8 7e b5 2e 49 0d 26 cc e5 8d df 8e 6a d2 58 ca 57 71 5d a3 d5 b8 ab 8d a8 15 40 96 f6 a5 14 74 35 04 b7 17 32 0f 9d b3 ec 5a a5 d4 29 40 69 b5 89 3e fc a0 9f 45 14 f8 ca 46 3f 77 0a 67 d5 b9 a8 47 9a 08 ce cf 6e 68 dd 27 23 2a 2a 5c 9b 1a 8a 45 97 9a 67 1c b9 03 d1 78 14 cd ab 9e 49 f7 aa cc f2 01 8d e3 e9 8a 0b 4d 9c 79 80 ff 00 c0 6a 4b 45 a5 c2 83 fa 53 59 f8 ea 31 ed 54 c9 b8 2c 54 79 6d e9 c9 cf f2 a7 46 b7 a4 ed 8d 03 b1 38 00 21 26 90 13 97 c0 c7 51 f5 a1 b9 19 23 14 ff 00 b0 ea a1 49 7b 2c 0c 77 07 fa 1a ab 77 25 c5 aa e6 75 44 23 d4 11 c5 09 5f 60 b9 76 de ca 79 c8 11 21 c1 fe 26 e0 7e 75 a1 1e 82 5b 0a d7 91 ab 77 f9 09 1f 9d 72 93 f8 be e6 Data Ascii: +[n1I%AVz4~.I&jXWq]@t52Z)@i>EF?wgGnh'#**\EgxIMyjKESY1T,TymF8!&Q#I{,ww%uD#_`vy!&~u[wr
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: d6 2e 66 05 63 65 85 3d 10 73 f9 d6 43 99 09 eb 9c d6 8a 9f 72 5c 8d 3d 4f c4 53 dc e5 63 de 91 9f e1 40 7f 9d 64 bd dc cc 38 85 ff 00 2c 53 b6 9f ee e6 9a 47 4c f5 fa 56 a9 25 b1 9d d9 18 96 63 ff 00 2c bf f1 e1 4d 67 9b b2 a9 3f ef 54 8f cd 20 5e 38 06 a8 44 5e 65 c7 a4 5f 99 a2 a6 c2 ff 00 90 68 a2 e0 62 99 1b ba 9f ce 93 cf 23 fe 59 d3 0b 03 d3 75 20 cf 5f eb 5a 98 5c 79 b8 ff 00 60 d3 5a eb 1c 6d 27 f0 a7 81 91 c9 a0 aa f1 c7 eb 40 6a 45 f6 91 d4 82 28 17 29 e8 4d 4a 11 7d e8 90 c7 1a ee 63 d2 98 11 09 c6 78 a6 cb 74 88 0e e3 f9 55 79 af 1a 66 d9 6f 1e 7d e9 f0 58 92 77 ce 49 3e 94 ed dc 57 7d 08 1e 59 ee 4e 10 15 5f 52 6a 7b 68 23 8b 96 01 9b d7 35 6d 20 41 c0 18 a7 88 87 a5 27 20 51 64 7b c0 1d bf 3a 3c c0 07 41 4f f2 81 3c 31 1f 5a 76 c4 03 04 93 Data Ascii: .fce=sCr\=OSc@d8,SGLV%c,Mg?T ^8D^e_hb#Yu _Z\y`Zm'@jE()MJ}cxtUyfo}XwI>W}YN_Rj{h#5m A' Qd{:<AO<1Zv
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: 2a 6e 55 89 0e 09 24 f5 3d f3 4d de a3 3b 48 34 dd aa 09 0a 37 7d 78 a4 2c a4 91 b4 83 de 90 58 78 7c f2 48 1e c2 90 be 32 71 f9 d3 30 4f 01 db ad 37 0e a7 92 4f be 29 80 e6 62 dd ba d3 5f 3d 7b 74 cd 0c 40 f7 3e e3 8a 43 97 4c a8 02 81 83 6d 23 2b c9 f7 a4 dd 8c e4 37 d2 9f 00 de ff 00 3a 92 4f 40 0e 73 5a 96 5a 25 f4 f2 97 31 f9 31 9e ad 21 c7 e5 9a 9b 81 90 4e 7a af 03 ad 3c 04 54 df d4 f6 18 ce 6b b6 b0 f0 7a 4d 16 f7 26 57 1c fc e7 0a 3e 82 ae 36 8d 69 61 1f 9d 34 70 a0 5e b8 00 52 e6 1a 38 28 ad a6 99 46 23 08 c7 bb 9e 3f 2a 9d b4 f0 b1 7f a5 5c b0 39 e1 50 60 7e 9d 6b 7f 5e d4 fc 3f 04 7b 18 f9 f2 f4 c4 07 6e 3f 1a e0 2e af 64 33 c9 12 4a cf 19 04 c5 bc fc cb e8 09 ef 55 12 5a 3a 0f b5 69 b6 71 79 60 07 6e a4 8e 09 fc 85 46 75 e8 5e da 55 57 b9 50 Data Ascii: nU$=M;H47}x,Xx\|H2q0O7O)b_={t@>CLm#+7:O@sZZ%11!Nz<TkzM&W>6ia4p^R8(F#?\9P`~k^?{n?.d3JUZ:iqy`nFu^UWP
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: 67 0b c9 ce 7a 7e 94 06 e4 51 5b ef 93 0c 72 af 80 a1 46 0b 73 fa 0c 56 c3 c7 6f 6f 0b 19 3f 75 12 0e 4a b6 33 c7 b7 5a 82 c2 ce fa f3 f7 91 da 8b 54 c0 21 a6 38 38 f6 15 a9 0e 8f 6e a4 3d c6 6e df b0 63 f2 83 f4 a9 6d 02 47 3d 2c 6d 76 ee 6d a0 96 56 c8 0b 85 c0 35 76 cb c3 f7 45 8a de 5c 2c 71 91 82 91 9c 9f c6 ba 9b 6b 69 1f 08 ab f4 51 c5 6a 58 69 12 96 de df bb 1e ac 2a 79 8a b2 39 cd 3f 46 b3 b5 20 c1 6c ac fd dd c6 4d 6e da e9 d7 33 91 95 38 f5 3c 0a d8 8e da d6 c0 19 25 91 38 e8 58 7f 21 55 2f 35 e0 b9 5b 58 c1 3f df 71 fd 28 49 b0 6e c4 f0 e9 d6 d6 d1 ef 9d 87 1d c9 c0 a8 6e 75 9b 68 41 4b 54 12 11 d0 f4 51 58 57 97 d2 cc 77 4f 23 31 f7 3f d2 a9 c9 38 6f bb 5a 28 22 5c 8b d7 da 8d cd c7 32 cb 91 d9 47 00 7e 15 9d 2c c4 f4 fc e9 bf 7b e9 41 ed de Data Ascii: gz~Q[rFsVoo?uJ3ZT!88n=ncmG=,mvmV5vE\,qkiQjXi*y9?F lMn38<%8X!U/5[X?q(InnuhAKTQXWwO#1?8oZ("\2G~,{A
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: 9b d4 9a a9 2c e3 3c 1c fb d4 04 ee e7 f9 d0 3a 72 78 ab b1 37 1e 49 63 d6 8c 28 ef 9a 88 f9 a5 80 01 76 fa e7 fa 53 f6 80 7f ad 3b 0a e3 c1 a0 ba 80 7d 7d ea 12 c3 9c 66 98 f2 11 9c 29 34 ec 2b 93 93 9e 77 50 bc 9e b5 5d 7c e7 39 7c 28 f4 15 62 33 83 d3 f5 a1 81 2a 2f d2 bc 8b e3 14 8f 07 89 8c cc 84 c6 96 f1 2a e3 af 3b bf c2 bd 71 65 19 c0 5c 57 9b 7c 67 b4 f3 59 66 c1 f9 a2 1c fd 09 ff 00 1a aa 52 b4 90 a7 1b c4 e1 f4 3f 10 79 73 81 11 65 f5 e7 1f ca bb db 1f 13 dc ac 2b 89 24 ff 00 be 8d 79 3e 93 08 5b a0 0f 5c d7 7f a5 c4 86 21 d0 f1 5d b2 91 cd 1a 7a 12 ea 77 ad 71 b8 91 82 6b 96 d4 e5 f2 d4 f6 ad bd 4d 8c 6e 42 f4 ae 73 52 56 90 9c 9a 3d a5 8a f6 0e d7 32 64 9d 5b 73 e0 90 3a e0 57 a9 fc 0e b5 6f b2 df de 82 50 39 58 81 1f c5 8c 93 fc c5 79 a7 d9 Data Ascii: ,<:rx7Ic(vS;}}f)4+wP]\|9\|(b3/;qe\W\|gYfR?yse+$y>[\!]zwqkMnBsRV=2d[s:WoP9Xy
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: 6a e7 2c 6e a7 b5 d4 56 79 a7 92 40 ac 72 09 c6 41 e0 f1 5d d1 c2 c5 2b df 53 09 56 3a 08 d4 a5 df 1d cd 76 5a 23 bf 94 06 7b 57 17 05 cc 73 48 1d 58 1e f5 d3 e9 f7 26 28 b3 9a ce a2 68 d2 83 57 b3 2f ea 31 12 49 27 f0 ae 73 50 2a a7 9a d8 9e f3 cc 52 33 cd 73 ba c9 97 04 e0 f3 d0 d6 50 bb 67 4d 66 94 74 2f 78 7a e6 c0 ea f6 bf 6f 91 63 b7 89 84 b2 36 32 02 8e 7a 7f 9e b5 ef 96 da 8e 9f 78 54 5a 5f 5b 4e 4a 06 0b 1c a1 8e df 5c 0e 45 7c af 6e 93 3c b2 07 63 b7 1f 36 3b 8c e7 1f a5 6e 69 13 dc 43 71 13 d9 bb ad c6 e2 14 a3 61 b3 e9 c7 4a e9 96 19 4b 5b 9c 11 ab 66 7d 1e c4 13 80 7a 7b d3 09 00 1a f3 6f 0d 7c 40 9c 05 b6 d5 e2 33 01 c7 9c 9f 7b f1 ec 6b d0 34 eb bb 4d 42 d9 6e ac e6 59 62 6e e3 a8 f6 23 b5 72 54 a3 2a 7b 9d 11 9a 91 2e 49 eb d2 98 cd 83 8c Data Ascii: j,nVy@rA]+SV:vZ#{WsHX&(hW/1I'sPR3sPgMft/xzoc62zxTZ_[NJ\E\|n<c6;niCqaJK[f}z{o\|@3{k4MBnYbn#rT{.I
2024-12-18 21:14:28 UTC	1390	IN	Data Raw: 60 82 4f a5 7a 17 c2 2f 16 dc 4b 79 07 87 d4 db 1b 7b 83 f2 ac ca 73 1b 93 cf 20 f4 ac 6a c1 c9 68 67 4d f2 bb 92 e9 1a 55 cd cd fa 5b 04 66 67 6c 28 f5 a4 f8 89 6d 06 87 74 96 4c 03 48 a8 19 c7 a6 7b 57 a9 41 aa f8 27 c1 96 1a b6 ad 75 aa 41 75 aa 41 2b 46 96 ea a4 60 8f e1 5c f6 cf 53 d8 57 87 ea 77 77 1a fe a5 3e a7 79 22 4b 24 ee 5d b6 9c a8 cf 61 5c f4 28 c9 cb 9a 47 6d 7a a9 ab 23 3b 72 f9 6f 70 17 6a 1e 40 c5 67 ff 00 67 0b 89 cb ac b2 43 2b 64 b3 23 62 b5 f5 28 f6 24 11 85 3b 77 6e 20 0c f4 e9 fc ea 9c d3 ec 99 0c 7b 41 23 82 c3 a5 77 a3 86 4a c5 9d 1a ea ea ca 6f b3 df 1f 36 16 38 49 f1 ca 9f 46 f6 f7 ae bf c2 7e 25 6d 27 57 8c 2b 16 b5 95 82 cb 93 c1 19 ea 07 b7 ad 72 31 5d 02 bb 44 62 56 27 01 7b 31 ff 00 0a d7 b1 b5 65 8c 49 39 0d 29 ea 40 e0 Data Ascii: `Oz/Ky{s jhgMU[fgl(mtLH{WA'uAuA+F`\SWww>y"K$]a\(Gmz#;ropj@ggC+d#b($;wn {A#wJo68IF~%m'W+r1]DbV'{1eI9)@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49808	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:27 UTC	616	OUT	GET /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:28 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 18 Dec 2024 21:14:28 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:28 UTC	647	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-12-18 21:14:28 UTC	1024	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background
2024-12-18 21:14:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49814	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:30 UTC	826	OUT	GET /recaptcha/enterprise/payload?p=06AFcWeA6Qi13dSowk5ut8_juFpgs7BpbOsTln9vEaPDJqsUrnazeyGybbaF9GwZRGmy14JuVizx2NDRb2X8Sw4xCMdZ2CXzErPBStH7NAxSM_fc8hC2wcji8qnZ_72FHj8PNypRJE41DfuvoCsl5DCuvh08YFNSYP7NT-zij_TiBSzUt3h5K7t0AhErCTDL3ywP0MCcqdj-M9&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:31 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 18 Dec 2024 21:14:31 GMT Date: Wed, 18 Dec 2024 21:14:31 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-18 21:14:31 UTC	709	IN	Data Raw: 38 35 32 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 8527JFIFC!"$"$C"}!1AQa"q
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: da e9 d2 b8 17 36 70 cd 9e ce 01 cd 38 c9 c6 42 28 c7 b0 34 35 c9 19 fd e2 8f cb 8a 2c 05 36 f0 c7 85 a4 72 ef e1 cb 02 5b ae 61 18 3f 5c 75 ad 21 0d 9c 56 eb 0c 16 c9 04 68 00 44 8d 08 51 f4 15 51 ee d0 7f cb c0 3f 46 cd 35 6f a3 6f e3 91 bf 03 4b 95 02 d0 83 51 b4 33 c3 24 2c 27 65 27 3f 76 b8 9d 6b c3 3e 20 b9 76 8c 59 d9 dd da 13 ca 3b 60 b0 f7 cf 43 ee 0d 77 be 76 ef bb 1b fe 3d 69 af 71 2a b0 c4 38 1e ac d4 d6 9b 0c f2 8d 3b e1 bd d3 44 3c ed 3a 78 c9 73 95 17 0a 30 3d 73 ce 6b 6a d7 e1 ac 31 95 91 44 b1 c8 87 2a 1a e0 30 07 f0 15 dd b5 c4 eb cb 9b 75 07 fd bc 9a 86 4b b2 4e 05 ca 67 d1 53 35 4e 4d f5 15 8c 51 e1 8d 53 0a 87 55 01 71 86 c0 3d 3d a8 8f c1 ca 8a c3 fb 41 dc 93 90 c5 06 57 e9 5b 3e 7c 8c 84 ac 77 0f cf 50 80 1a 92 04 be 73 88 ed a5 c7 Data Ascii: 6p8B(45,6r[a?\u!VhDQQ?F5ooKQ3$,'e'?vk> vY;`Cwv=iq8;D<:xs0=skj1D0uKNgS5NMQSUq==AW[>\|wPs
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: f4 43 fd 69 51 9b 6f ee 34 a7 1f ef 00 2b 73 ed 68 07 ca 91 2f d1 05 23 6a 04 0c 6e 23 e9 c5 3e 56 2e 64 65 28 d5 08 c4 5a 62 7d 49 e2 9f f6 4d 66 4c 1d d0 43 9e b8 5c 91 f9 d5 d6 d4 33 fc 47 f3 a8 da fd 70 78 e6 9f 23 0e 62 28 f4 9b e6 e1 f5 36 41 ec 47 f8 55 98 f4 a8 86 05 c5 e4 92 fb 65 aa 03 a8 13 c2 83 f8 53 5a ee 76 e8 8d f8 f1 47 20 b9 8d 28 ec 34 a4 c1 c6 48 f5 5a 98 1b 28 f8 8d 61 ff 00 81 1a c1 7b 89 3f 89 d1 7e ad 51 b5 ca 67 e6 9d 4f fb aa 4d 3e 44 2e 63 a0 6b 95 1c 23 40 bf 4c 53 5a e9 fa 79 b9 f6 df 5c eb dc c2 3b ca df 40 05 42 d7 89 93 88 b3 fe f3 93 54 a0 27 23 a2 92 e5 be bf 8d 40 d7 92 64 e1 18 fd 06 6b 0b ed ae 3a 08 d7 e8 a2 90 df 5c 11 8f 35 ff 00 03 8a 7c 82 e6 36 5e f2 73 d1 18 7d 46 2a 19 6e 5c fd f9 14 7f c0 ab 19 a7 73 92 49 3f Data Ascii: CiQo4+sh/#jn#>V.de(Zb}IMfLC\3Gpx#b(6AGUeSZvG (4HZ(a{?~QgOM>D.ck#@LSZy\;@BT'#@dk:\5\|6^s}F*n\sI?
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: 85 df 04 2b 1c fa 0a 5b 6e 31 bb f8 ce 49 a4 25 cf 41 56 92 d1 95 bf 7a ea 8b df b9 ab 08 34 f8 c0 dc b2 c8 7e b5 2e 49 0d 26 cc e5 8d df 8e 6a d2 58 ca 57 71 5d a3 d5 b8 ab 8d a8 15 40 96 f6 a5 14 74 35 04 b7 17 32 0f 9d b3 ec 5a a5 d4 29 40 69 b5 89 3e fc a0 9f 45 14 f8 ca 46 3f 77 0a 67 d5 b9 a8 47 9a 08 ce cf 6e 68 dd 27 23 2a 2a 5c 9b 1a 8a 45 97 9a 67 1c b9 03 d1 78 14 cd ab 9e 49 f7 aa cc f2 01 8d e3 e9 8a 0b 4d 9c 79 80 ff 00 c0 6a 4b 45 a5 c2 83 fa 53 59 f8 ea 31 ed 54 c9 b8 2c 54 79 6d e9 c9 cf f2 a7 46 b7 a4 ed 8d 03 b1 38 00 21 26 90 13 97 c0 c7 51 f5 a1 b9 19 23 14 ff 00 b0 ea a1 49 7b 2c 0c 77 07 fa 1a ab 77 25 c5 aa e6 75 44 23 d4 11 c5 09 5f 60 b9 76 de ca 79 c8 11 21 c1 fe 26 e0 7e 75 a1 1e 82 5b 0a d7 91 ab 77 f9 09 1f 9d 72 93 f8 be e6 Data Ascii: +[n1I%AVz4~.I&jXWq]@t52Z)@i>EF?wgGnh'#**\EgxIMyjKESY1T,TymF8!&Q#I{,ww%uD#_`vy!&~u[wr
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: d6 2e 66 05 63 65 85 3d 10 73 f9 d6 43 99 09 eb 9c d6 8a 9f 72 5c 8d 3d 4f c4 53 dc e5 63 de 91 9f e1 40 7f 9d 64 bd dc cc 38 85 ff 00 2c 53 b6 9f ee e6 9a 47 4c f5 fa 56 a9 25 b1 9d d9 18 96 63 ff 00 2c bf f1 e1 4d 67 9b b2 a9 3f ef 54 8f cd 20 5e 38 06 a8 44 5e 65 c7 a4 5f 99 a2 a6 c2 ff 00 90 68 a2 e0 62 99 1b ba 9f ce 93 cf 23 fe 59 d3 0b 03 d3 75 20 cf 5f eb 5a 98 5c 79 b8 ff 00 60 d3 5a eb 1c 6d 27 f0 a7 81 91 c9 a0 aa f1 c7 eb 40 6a 45 f6 91 d4 82 28 17 29 e8 4d 4a 11 7d e8 90 c7 1a ee 63 d2 98 11 09 c6 78 a6 cb 74 88 0e e3 f9 55 79 af 1a 66 d9 6f 1e 7d e9 f0 58 92 77 ce 49 3e 94 ed dc 57 7d 08 1e 59 ee 4e 10 15 5f 52 6a 7b 68 23 8b 96 01 9b d7 35 6d 20 41 c0 18 a7 88 87 a5 27 20 51 64 7b c0 1d bf 3a 3c c0 07 41 4f f2 81 3c 31 1f 5a 76 c4 03 04 93 Data Ascii: .fce=sCr\=OSc@d8,SGLV%c,Mg?T ^8D^e_hb#Yu _Z\y`Zm'@jE()MJ}cxtUyfo}XwI>W}YN_Rj{h#5m A' Qd{:<AO<1Zv
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: 2a 6e 55 89 0e 09 24 f5 3d f3 4d de a3 3b 48 34 dd aa 09 0a 37 7d 78 a4 2c a4 91 b4 83 de 90 58 78 7c f2 48 1e c2 90 be 32 71 f9 d3 30 4f 01 db ad 37 0e a7 92 4f be 29 80 e6 62 dd ba d3 5f 3d 7b 74 cd 0c 40 f7 3e e3 8a 43 97 4c a8 02 81 83 6d 23 2b c9 f7 a4 dd 8c e4 37 d2 9f 00 de ff 00 3a 92 4f 40 0e 73 5a 96 5a 25 f4 f2 97 31 f9 31 9e ad 21 c7 e5 9a 9b 81 90 4e 7a af 03 ad 3c 04 54 df d4 f6 18 ce 6b b6 b0 f0 7a 4d 16 f7 26 57 1c fc e7 0a 3e 82 ae 36 8d 69 61 1f 9d 34 70 a0 5e b8 00 52 e6 1a 38 28 ad a6 99 46 23 08 c7 bb 9e 3f 2a 9d b4 f0 b1 7f a5 5c b0 39 e1 50 60 7e 9d 6b 7f 5e d4 fc 3f 04 7b 18 f9 f2 f4 c4 07 6e 3f 1a e0 2e af 64 33 c9 12 4a cf 19 04 c5 bc fc cb e8 09 ef 55 12 5a 3a 0f b5 69 b6 71 79 60 07 6e a4 8e 09 fc 85 46 75 e8 5e da 55 57 b9 50 Data Ascii: nU$=M;H47}x,Xx\|H2q0O7O)b_={t@>CLm#+7:O@sZZ%11!Nz<TkzM&W>6ia4p^R8(F#?\9P`~k^?{n?.d3JUZ:iqy`nFu^UWP
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: 67 0b c9 ce 7a 7e 94 06 e4 51 5b ef 93 0c 72 af 80 a1 46 0b 73 fa 0c 56 c3 c7 6f 6f 0b 19 3f 75 12 0e 4a b6 33 c7 b7 5a 82 c2 ce fa f3 f7 91 da 8b 54 c0 21 a6 38 38 f6 15 a9 0e 8f 6e a4 3d c6 6e df b0 63 f2 83 f4 a9 6d 02 47 3d 2c 6d 76 ee 6d a0 96 56 c8 0b 85 c0 35 76 cb c3 f7 45 8a de 5c 2c 71 91 82 91 9c 9f c6 ba 9b 6b 69 1f 08 ab f4 51 c5 6a 58 69 12 96 de df bb 1e ac 2a 79 8a b2 39 cd 3f 46 b3 b5 20 c1 6c ac fd dd c6 4d 6e da e9 d7 33 91 95 38 f5 3c 0a d8 8e da d6 c0 19 25 91 38 e8 58 7f 21 55 2f 35 e0 b9 5b 58 c1 3f df 71 fd 28 49 b0 6e c4 f0 e9 d6 d6 d1 ef 9d 87 1d c9 c0 a8 6e 75 9b 68 41 4b 54 12 11 d0 f4 51 58 57 97 d2 cc 77 4f 23 31 f7 3f d2 a9 c9 38 6f bb 5a 28 22 5c 8b d7 da 8d cd c7 32 cb 91 d9 47 00 7e 15 9d 2c c4 f4 fc e9 bf 7b e9 41 ed de Data Ascii: gz~Q[rFsVoo?uJ3ZT!88n=ncmG=,mvmV5vE\,qkiQjXi*y9?F lMn38<%8X!U/5[X?q(InnuhAKTQXWwO#1?8oZ("\2G~,{A
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: 9b d4 9a a9 2c e3 3c 1c fb d4 04 ee e7 f9 d0 3a 72 78 ab b1 37 1e 49 63 d6 8c 28 ef 9a 88 f9 a5 80 01 76 fa e7 fa 53 f6 80 7f ad 3b 0a e3 c1 a0 ba 80 7d 7d ea 12 c3 9c 66 98 f2 11 9c 29 34 ec 2b 93 93 9e 77 50 bc 9e b5 5d 7c e7 39 7c 28 f4 15 62 33 83 d3 f5 a1 81 2a 2f d2 bc 8b e3 14 8f 07 89 8c cc 84 c6 96 f1 2a e3 af 3b bf c2 bd 71 65 19 c0 5c 57 9b 7c 67 b4 f3 59 66 c1 f9 a2 1c fd 09 ff 00 1a aa 52 b4 90 a7 1b c4 e1 f4 3f 10 79 73 81 11 65 f5 e7 1f ca bb db 1f 13 dc ac 2b 89 24 ff 00 be 8d 79 3e 93 08 5b a0 0f 5c d7 7f a5 c4 86 21 d0 f1 5d b2 91 cd 1a 7a 12 ea 77 ad 71 b8 91 82 6b 96 d4 e5 f2 d4 f6 ad bd 4d 8c 6e 42 f4 ae 73 52 56 90 9c 9a 3d a5 8a f6 0e d7 32 64 9d 5b 73 e0 90 3a e0 57 a9 fc 0e b5 6f b2 df de 82 50 39 58 81 1f c5 8c 93 fc c5 79 a7 d9 Data Ascii: ,<:rx7Ic(vS;}}f)4+wP]\|9\|(b3/;qe\W\|gYfR?yse+$y>[\!]zwqkMnBsRV=2d[s:WoP9Xy
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: 6a e7 2c 6e a7 b5 d4 56 79 a7 92 40 ac 72 09 c6 41 e0 f1 5d d1 c2 c5 2b df 53 09 56 3a 08 d4 a5 df 1d cd 76 5a 23 bf 94 06 7b 57 17 05 cc 73 48 1d 58 1e f5 d3 e9 f7 26 28 b3 9a ce a2 68 d2 83 57 b3 2f ea 31 12 49 27 f0 ae 73 50 2a a7 9a d8 9e f3 cc 52 33 cd 73 ba c9 97 04 e0 f3 d0 d6 50 bb 67 4d 66 94 74 2f 78 7a e6 c0 ea f6 bf 6f 91 63 b7 89 84 b2 36 32 02 8e 7a 7f 9e b5 ef 96 da 8e 9f 78 54 5a 5f 5b 4e 4a 06 0b 1c a1 8e df 5c 0e 45 7c af 6e 93 3c b2 07 63 b7 1f 36 3b 8c e7 1f a5 6e 69 13 dc 43 71 13 d9 bb ad c6 e2 14 a3 61 b3 e9 c7 4a e9 96 19 4b 5b 9c 11 ab 66 7d 1e c4 13 80 7a 7b d3 09 00 1a f3 6f 0d 7c 40 9c 05 b6 d5 e2 33 01 c7 9c 9f 7b f1 ec 6b d0 34 eb bb 4d 42 d9 6e ac e6 59 62 6e e3 a8 f6 23 b5 72 54 a3 2a 7b 9d 11 9a 91 2e 49 eb d2 98 cd 83 8c Data Ascii: j,nVy@rA]+SV:vZ#{WsHX&(hW/1I'sPR3sPgMft/xzoc62zxTZ_[NJ\E\|n<c6;niCqaJK[f}z{o\|@3{k4MBnYbn#rT{.I
2024-12-18 21:14:31 UTC	1390	IN	Data Raw: 60 82 4f a5 7a 17 c2 2f 16 dc 4b 79 07 87 d4 db 1b 7b 83 f2 ac ca 73 1b 93 cf 20 f4 ac 6a c1 c9 68 67 4d f2 bb 92 e9 1a 55 cd cd fa 5b 04 66 67 6c 28 f5 a4 f8 89 6d 06 87 74 96 4c 03 48 a8 19 c7 a6 7b 57 a9 41 aa f8 27 c1 96 1a b6 ad 75 aa 41 75 aa 41 2b 46 96 ea a4 60 8f e1 5c f6 cf 53 d8 57 87 ea 77 77 1a fe a5 3e a7 79 22 4b 24 ee 5d b6 9c a8 cf 61 5c f4 28 c9 cb 9a 47 6d 7a a9 ab 23 3b 72 f9 6f 70 17 6a 1e 40 c5 67 ff 00 67 0b 89 cb ac b2 43 2b 64 b3 23 62 b5 f5 28 f6 24 11 85 3b 77 6e 20 0c f4 e9 fc ea 9c d3 ec 99 0c 7b 41 23 82 c3 a5 77 a3 86 4a c5 9d 1a ea ea ca 6f b3 df 1f 36 16 38 49 f1 ca 9f 46 f6 f7 ae bf c2 7e 25 6d 27 57 8c 2b 16 b5 95 82 cb 93 c1 19 ea 07 b7 ad 72 31 5d 02 bb 44 62 56 27 01 7b 31 ff 00 0a d7 b1 b5 65 8c 49 39 0d 29 ea 40 e0 Data Ascii: `Oz/Ky{s jhgMU[fgl(mtLH{WA'uAuA+F`\SWww>y"K$]a\(Gmz#;ropj@ggC+d#b($;wn {A#wJo68IF~%m'W+r1]DbV'{1eI9)@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49815	35.190.80.1	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:36 UTC	548	OUT	OPTIONS /report/v4?s=qFYhMTWTFA8GsQh%2B3SZbVJ8NUBT4J7aTsOhAohQImS%2FzjGHUMPQ1g%2BzdExbrQa%2FYStGl8i45l%2FQsOm1b%2BX0CDlkS%2BexwlJPCE8EYV3gOgF9%2BxFCfdUZtAdISDqfl19%2F0Ty7H HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://track.hubspot.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:36 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 18 Dec 2024 21:14:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49817	35.190.80.1	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:37 UTC	488	OUT	POST /report/v4?s=qFYhMTWTFA8GsQh%2B3SZbVJ8NUBT4J7aTsOhAohQImS%2FzjGHUMPQ1g%2BzdExbrQa%2FYStGl8i45l%2FQsOm1b%2BX0CDlkS%2BexwlJPCE8EYV3gOgF9%2BxFCfdUZtAdISDqfl19%2F0Ty7H HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 873 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 21:14:37 UTC	873	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 38 32 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 74 63 70 2e 74 69 6d 65 64 5f 6f 75 74 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 2f 5f 5f 70 74 71 2e 67 69 66 3f Data Ascii: [{"age":0,"body":{"elapsed_time":8825,"method":"GET","phase":"connection","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"","status_code":0,"type":"tcp.timed_out"},"type":"network-error","url":"https://track.hubspot.com/__ptq.gif?
2024-12-18 21:14:38 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 18 Dec 2024 21:14:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49816	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:38 UTC	986	OUT	POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7090 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:38 UTC	7090	OUT	Data Raw: 0a 18 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 12 ce 28 30 33 41 46 63 57 65 41 35 79 5f 48 70 31 79 48 62 4c 7a 58 69 31 4e 6d 75 57 78 59 51 37 4b 48 63 5a 71 35 37 64 39 70 64 59 62 4c 36 39 35 6e 56 68 37 47 62 64 5f 7a 73 35 39 69 48 51 49 51 70 4f 51 74 70 50 47 4b 36 43 73 32 52 44 75 72 6b 59 72 35 59 4f 47 73 34 62 46 79 54 7a 31 56 70 41 44 45 46 6a 71 56 79 33 5f 61 68 50 74 35 4d 56 43 66 75 2d 63 45 38 75 6f 56 58 52 4d 6e 58 55 6c 6d 6e 2d 70 32 32 72 70 4f 70 58 64 67 32 5f 38 6d 69 4a 30 50 35 55 33 63 54 5a 54 6d 52 61 4b 38 76 4a 63 57 35 51 57 45 33 59 51 78 4c 5f 77 71 43 70 77 6e 56 6f 53 70 53 73 56 64 74 33 34 64 4e 72 76 5f 72 35 5f 76 34 76 52 65 36 47 6e 70 48 75 58 36 44 63 6c 4b 2d 63 4c 74 47 49 Data Ascii: zIriijn3uj5Vpknvt_LnfNbF(03AFcWeA5y_Hp1yHbLzXi1NmuWxYQ7KHcZq57d9pdYbL695nVh7Gbd_zs59iHQIQpOQtpPGK6Cs2RDurkYr5YOGs4bFyTz1VpADEFjqVy3_ahPt5MVCfu-cE8uoVXRMnXUlmn-p22rpOpXdg2_8miJ0P5U3cTZTmRaK8vJcW5QWE3YQxL_wqCpwnVoSpSsVdt34dNrv_r5_v4vRe6GnpHuX6DclK-cLtGI
2024-12-18 21:14:38 UTC	741	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Wed, 18 Dec 2024 21:14:38 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:38 UTC	649	IN	Data Raw: 34 30 37 39 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 43 70 59 45 36 35 58 30 31 70 6f 4c 49 43 73 73 51 61 38 48 66 37 34 32 6a 79 55 78 54 71 65 65 49 65 66 51 4e 50 32 42 47 53 55 6a 6e 38 45 32 69 79 66 51 7a 56 43 47 4b 37 45 70 4f 55 58 59 51 48 74 38 50 46 61 52 49 4c 54 37 6c 55 76 39 33 4f 43 70 48 71 34 6b 44 35 67 61 4d 59 72 73 51 78 4f 52 54 49 70 49 53 51 57 64 4c 4e 48 63 46 4c 39 6b 52 42 41 4f 4c 41 44 5f 69 4a 61 41 69 50 39 48 64 54 6f 69 4f 74 48 50 35 68 50 35 39 65 50 42 67 69 53 73 77 49 50 68 36 6f 72 34 66 46 41 6b 64 5f 58 62 6e 4d 73 65 49 6c 44 70 6c 5f 65 58 5a 53 45 74 66 37 56 78 2d 66 39 5a 6b 43 6a 2d 56 50 36 61 6d 65 54 37 71 6c 37 2d 50 79 51 62 61 6d 63 78 39 51 4b 57 52 6a 77 77 79 Data Ascii: 4079)]}'["rresp","03AFcWeA7CpYE65X01poLICssQa8Hf742jyUxTqeeIefQNP2BGSUjn8E2iyfQzVCGK7EpOUXYQHt8PFaRILT7lUv93OCpHq4kD5gaMYrsQxORTIpISQWdLNHcFL9kRBAOLAD_iJaAiP9HdToiOtHP5hP59ePBgiSswIPh6or4fFAkd_XbnMseIlDpl_eXZSEtf7Vx-f9ZkCj-VP6ameT7ql7-PyQbamcx9QKWRjwwy
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 48 66 74 37 41 6b 74 55 68 65 71 70 67 69 7a 71 4d 70 46 71 6c 56 6c 71 67 30 35 68 57 69 2d 4f 49 68 58 5f 7a 66 35 78 32 64 39 43 33 6d 32 48 39 78 39 58 69 30 39 59 4e 38 50 7a 6c 4d 36 53 38 58 65 39 4a 64 50 58 58 38 65 79 54 2d 35 31 52 61 5f 56 6e 48 54 59 45 4a 6f 71 6e 66 41 74 4a 33 52 62 53 57 41 32 64 2d 67 2d 63 5a 74 58 32 30 36 43 4e 6d 73 32 64 41 44 45 51 42 4a 38 66 68 64 38 52 6c 78 55 4a 4f 34 6c 6b 44 2d 59 54 55 30 56 70 77 37 54 72 5f 67 64 53 34 32 5a 4c 4a 48 71 47 70 4b 36 70 30 4b 47 34 5a 57 46 56 6f 50 54 53 31 39 52 68 68 67 6e 6d 2d 6a 67 59 75 4c 52 50 79 68 43 55 71 67 6a 6c 70 66 49 38 42 32 61 52 5f 6e 45 62 4e 72 5f 4f 44 4f 4a 79 6b 4a 57 64 41 51 37 51 76 6b 62 41 76 6d 42 4a 52 6a 44 71 64 78 4a 6e 31 43 66 4a 54 55 Data Ascii: Hft7AktUheqpgizqMpFqlVlqg05hWi-OIhX_zf5x2d9C3m2H9x9Xi09YN8PzlM6S8Xe9JdPXX8eyT-51Ra_VnHTYEJoqnfAtJ3RbSWA2d-g-cZtX206CNms2dADEQBJ8fhd8RlxUJO4lkD-YTU0Vpw7Tr_gdS42ZLJHqGpK6p0KG4ZWFVoPTS19Rhhgnm-jgYuLRPyhCUqgjlpfI8B2aR_nEbNr_ODOJykJWdAQ7QvkbAvmBJRjDqdxJn1CfJTU
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 4a 50 5f 69 55 32 47 71 50 42 6f 73 67 37 4d 67 53 67 4f 6a 44 57 58 43 4f 4a 78 5a 77 43 45 34 6a 52 5f 64 62 73 39 68 57 6d 76 4f 39 4f 43 6f 30 51 55 46 6e 67 4c 44 5f 59 6a 36 75 38 78 4e 76 39 33 6f 67 44 44 52 47 34 67 42 4a 4f 45 71 45 50 32 61 5f 4b 45 4b 69 71 76 73 57 4c 58 6d 4b 4d 54 57 41 6a 69 54 68 4b 4b 34 46 59 30 37 44 31 34 42 50 66 7a 50 37 66 5a 69 4f 69 44 6e 5a 68 69 5a 55 76 5a 39 49 36 41 66 49 39 52 51 36 2d 71 69 6a 30 35 32 39 5f 5a 50 5f 4b 54 74 45 69 32 6e 72 65 75 38 37 53 42 32 31 6c 66 77 5a 2d 6e 72 33 54 4d 58 35 5a 78 5f 41 67 57 79 70 74 37 56 32 58 4e 4c 5a 45 50 58 52 6e 62 70 68 5f 51 49 74 6d 72 31 57 34 41 35 30 32 62 2d 49 36 69 55 69 4b 69 72 62 59 78 71 77 65 6d 57 45 41 52 55 6d 76 39 50 67 6d 47 46 4c 45 52 Data Ascii: JP_iU2GqPBosg7MgSgOjDWXCOJxZwCE4jR_dbs9hWmvO9OCo0QUFngLD_Yj6u8xNv93ogDDRG4gBJOEqEP2a_KEKiqvsWLXmKMTWAjiThKK4FY07D14BPfzP7fZiOiDnZhiZUvZ9I6AfI9RQ6-qij0529_ZP_KTtEi2nreu87SB21lfwZ-nr3TMX5Zx_AgWypt7V2XNLZEPXRnbph_QItmr1W4A502b-I6iUiKirbYxqwemWEARUmv9PgmGFLER
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 5a 53 4b 6d 48 6d 56 64 47 54 44 59 76 77 77 39 30 48 52 67 43 6a 6f 6a 4d 4d 72 74 6f 56 55 59 55 76 34 7a 43 47 42 79 62 61 42 51 4f 59 5f 43 38 65 6d 41 73 58 6a 48 45 6e 2d 47 46 66 50 6b 56 47 61 69 5f 75 61 2d 76 4b 4b 6a 36 4c 4d 4a 77 30 35 50 68 42 55 5a 62 56 53 58 4b 59 39 63 41 62 56 66 76 71 4a 52 67 77 38 58 51 79 79 72 33 6c 39 44 34 70 38 75 33 62 6c 67 30 72 63 78 49 51 38 6f 78 57 77 47 79 74 6d 58 63 2d 53 64 6f 35 30 4b 2d 54 61 54 5f 70 62 6b 38 37 75 76 42 32 32 36 52 50 73 69 71 2d 57 41 4a 54 75 67 71 38 70 49 4f 6e 79 42 44 4a 6d 71 63 33 4b 31 57 57 2d 58 4e 72 6a 33 53 4f 50 6c 38 71 61 4d 37 65 53 69 38 52 48 45 48 6e 4d 2d 66 34 56 46 43 79 62 4b 35 43 34 4d 67 6e 4c 41 38 35 77 41 65 4b 6a 73 75 50 34 52 55 54 2d 57 68 31 5f Data Ascii: ZSKmHmVdGTDYvww90HRgCjojMMrtoVUYUv4zCGBybaBQOY_C8emAsXjHEn-GFfPkVGai_ua-vKKj6LMJw05PhBUZbVSXKY9cAbVfvqJRgw8XQyyr3l9D4p8u3blg0rcxIQ8oxWwGytmXc-Sdo50K-TaT_pbk87uvB226RPsiq-WAJTugq8pIOnyBDJmqc3K1WW-XNrj3SOPl8qaM7eSi8RHEHnM-f4VFCybK5C4MgnLA85wAeKjsuP4RUT-Wh1_
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 69 47 48 4f 41 33 77 5f 6b 51 36 79 77 53 71 66 63 53 68 41 55 6a 4a 46 32 65 41 77 33 44 61 64 6a 6e 36 73 54 33 45 38 78 73 57 4e 67 4c 54 41 6e 48 35 2d 4f 48 59 76 41 78 76 4b 64 52 67 6f 6f 44 6f 37 32 4b 38 48 34 63 79 4e 46 69 4e 48 65 31 6f 48 4b 54 70 6a 30 34 32 70 48 62 2d 36 38 33 6e 7a 75 6e 42 31 6b 5f 37 66 54 64 75 73 53 57 5f 4b 75 36 32 44 35 4e 33 6d 45 52 69 4a 4c 6b 73 48 45 58 79 6f 73 6e 38 68 35 38 31 79 4e 6c 53 35 42 59 55 53 52 49 75 38 68 32 71 75 75 4e 58 51 57 74 76 52 6e 49 47 43 4a 55 75 6a 71 6f 45 45 71 6b 38 64 33 74 4f 4b 71 58 34 32 7a 72 2d 75 6a 70 79 6e 6c 66 70 33 5a 73 44 62 53 32 79 76 66 70 32 62 76 36 5f 64 37 49 5f 38 6e 63 2d 79 4d 2d 68 46 4a 61 33 66 69 59 71 4b 32 58 53 4d 74 58 56 32 55 72 67 22 2c 6e 75 Data Ascii: iGHOA3w_kQ6ywSqfcShAUjJF2eAw3Dadjn6sT3E8xsWNgLTAnH5-OHYvAxvKdRgooDo72K8H4cyNFiNHe1oHKTpj042pHb-683nzunB1k_7fTdusSW_Ku62D5N3mERiJLksHEXyosn8h581yNlS5BYUSRIu8h2quuNXQWtvRnIGCJUujqoEEqk8d3tOKqX42zr-ujpynlfp3ZsDbS2yvfp2bv6_d7I_8nc-yM-hFJa3fiYqK2XSMtXV2Urg",nu
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 62 6e 46 4d 4c 31 6b 33 4c 31 4e 44 52 33 4e 46 65 43 39 32 57 6b 30 30 4c 33 5a 4f 4f 56 64 36 61 54 6b 77 64 58 5a 46 62 7a 51 30 4f 55 52 6d 56 30 31 44 61 7a 46 30 59 6a 68 59 63 6b 4d 79 51 7a 4a 48 4e 58 6f 78 65 58 56 34 54 46 5a 59 51 7a 56 45 62 6b 68 55 61 6b 4a 51 4f 45 45 77 51 56 56 7a 57 56 63 35 57 6d 5a 76 59 7a 4a 50 56 31 46 69 54 44 6b 31 55 6b 52 44 56 32 64 48 52 7a 42 5a 64 6b 4a 44 57 57 74 42 52 33 70 44 52 44 4e 6a 65 6a 68 44 64 54 5a 57 52 58 4d 32 54 30 39 5a 55 33 4e 6e 53 55 6c 70 64 54 4e 4d 55 69 39 4a 4f 45 52 46 4f 54 6c 59 54 45 6c 52 65 6a 64 75 63 33 6c 34 64 6e 42 77 53 55 39 34 5a 55 70 4f 64 32 68 6a 4c 32 6c 76 56 56 4a 43 5a 32 39 78 65 45 64 54 52 32 52 58 62 45 31 58 4e 45 74 6e 59 6e 64 76 62 55 5a 4e 54 6b 46 Data Ascii: bnFML1k3L1NDR3NFeC92Wk00L3ZOOVd6aTkwdXZFbzQ0OURmV01DazF0YjhYckMyQzJHNXoxeXV4TFZYQzVEbkhUakJQOEEwQVVzWVc5WmZvYzJPV1FiTDk1UkRDV2dHRzBZdkJDWWtBR3pDRDNjejhDdTZWRXM2T09ZU3NnSUlpdTNMUi9JOERFOTlYTElRejduc3l4dnBwSU94ZUpOd2hjL2lvVVJCZ29xeEdTR2RXbE1XNEtnYndvbUZNTkF
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 63 72 62 45 46 31 65 45 74 4f 61 55 64 47 61 6d 64 43 53 6b 46 4f 4d 6b 52 46 65 45 39 7a 63 33 56 4e 64 6e 42 5a 52 6e 42 61 63 32 4e 7a 61 33 64 59 61 56 41 76 61 31 59 72 62 56 70 30 65 48 52 56 5a 32 4a 42 61 6e 6f 78 56 55 5a 52 54 57 68 49 62 6e 52 7a 63 45 70 6f 59 30 70 6e 52 55 4a 7a 62 58 5a 74 57 54 52 79 52 31 5a 71 54 55 31 6c 64 30 46 75 63 54 4e 34 4c 31 42 6d 5a 30 67 72 51 32 4e 30 62 31 49 7a 62 6b 68 4a 4d 54 52 59 55 44 6c 6a 54 43 73 30 57 6a 46 33 55 6c 5a 32 64 6e 6c 61 59 6a 6b 30 4c 33 6f 35 62 6b 52 72 4e 7a 4e 56 65 6d 35 4b 61 46 6f 72 57 6b 6f 7a 56 6d 45 32 4e 44 6c 73 56 32 64 43 52 7a 4e 69 62 55 31 51 53 33 64 43 64 7a 4a 45 4e 46 52 73 57 57 52 6c 61 47 6c 4d 51 7a 67 31 64 6e 68 45 4e 54 5a 32 65 6c 68 79 55 45 35 31 65 Data Ascii: crbEF1eEtOaUdGamdCSkFOMkRFeE9zc3VNdnBZRnBac2Nza3dYaVAva1YrbVp0eHRVZ2JBanoxVUZRTWhIbnRzcEpoY0pnRUJzbXZtWTRyR1ZqTU1ld0FucTN4L1BmZ0grQ2N0b1IzbkhJMTRYUDljTCs0WjF3UlZ2dnlaYjk0L3o5bkRrNzNVem5KaForWkozVmE2NDlsV2dCRzNibU1QS3dCdzJENFRsWWRlaGlMQzg1dnhENTZ2elhyUE51e
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 64 31 67 30 52 55 78 48 64 58 5a 4c 55 6c 70 36 61 57 64 55 63 47 64 50 51 33 63 33 4c 30 6c 6c 4d 54 68 32 55 55 4d 79 64 6b 6c 58 57 6c 46 56 65 47 68 55 62 32 6c 36 61 6e 4e 42 4e 45 70 68 54 45 4a 57 4d 47 78 4b 4d 30 52 45 4d 54 6c 52 62 30 52 45 61 6e 42 4b 4e 6c 68 6b 61 6d 70 54 4c 30 35 55 63 30 39 75 52 56 5a 77 4e 30 70 42 4d 6e 56 6c 4b 30 68 47 5a 45 64 4b 59 32 31 56 4e 44 56 50 55 47 4a 48 4d 6e 6c 6c 53 45 56 76 61 31 42 52 52 6a 56 47 4d 6c 70 59 64 54 5a 43 64 6a 51 76 4e 54 59 76 65 57 6c 52 55 6c 70 77 54 57 4e 36 64 6b 46 33 65 6e 6c 36 4e 57 63 72 51 7a 64 4f 64 46 52 58 59 7a 68 43 52 7a 5a 32 51 6c 64 4b 5a 57 4a 43 5a 45 70 56 4c 32 64 4e 53 6b 78 69 62 33 42 34 61 48 55 33 54 6b 56 44 4e 46 4a 79 63 6a 59 34 5a 53 74 35 56 54 4e Data Ascii: d1g0RUxHdXZLUlp6aWdUcGdPQ3c3L0llMTh2UUMydklXWlFVeGhUb2l6anNBNEphTEJWMGxKM0REMTlRb0REanBKNlhkampTL05Uc09uRVZwN0pBMnVlK0hGZEdKY21VNDVPUGJHMnllSEVva1BRRjVGMlpYdTZCdjQvNTYveWlRUlpwTWN6dkF3enl6NWcrQzdOdFRXYzhCRzZ2QldKZWJCZEpVL2dNSkxib3B4aHU3TkVDNFJycjY4ZSt5VTN
2024-12-18 21:14:38 UTC	1390	IN	Data Raw: 51 31 59 32 35 55 52 58 56 68 4e 31 56 49 5a 45 39 43 4e 6d 39 42 64 6a 64 6e 59 6b 39 70 4d 6a 5a 54 62 6d 38 33 65 44 49 76 52 30 70 71 52 6a 5a 6f 51 56 52 77 59 6b 52 68 61 6c 6c 44 55 54 68 45 5a 6b 68 52 51 55 34 33 57 48 41 76 51 57 39 7a 51 33 64 48 65 69 74 46 56 33 42 75 64 32 56 43 63 48 68 7a 51 32 4d 7a 61 32 74 75 61 43 74 4a 54 6e 4a 51 63 58 67 34 4f 58 4e 57 4e 6a 49 35 62 6d 4e 51 5a 48 52 72 62 57 70 73 54 6b 74 46 63 69 39 78 4d 44 56 57 55 7a 56 4e 51 6e 6c 32 62 6a 52 69 53 55 35 42 62 6e 42 70 4f 54 56 49 52 58 46 45 4f 48 64 49 54 54 6c 53 54 79 39 75 62 31 4a 55 54 6a 4e 61 62 33 4e 77 57 46 4e 71 4e 6e 41 7a 63 6d 31 56 4b 33 46 53 57 58 46 42 51 31 68 35 62 32 70 48 55 47 4e 55 62 6d 6f 72 55 54 42 4b 4b 32 70 6b 4e 7a 42 32 56 Data Ascii: Q1Y25URXVhN1VIZE9CNm9BdjdnYk9pMjZTbm83eDIvR0pqRjZoQVRwYkRhallDUThEZkhRQU43WHAvQW9zQ3dHeitFV3Bud2VCcHhzQ2Mza2tuaCtJTnJQcXg4OXNWNjI5bmNQZHRrbWpsTktFci9xMDVWUzVNQnl2bjRiSU5BbnBpOTVIRXFEOHdITTlSTy9ub1JUTjNab3NwWFNqNnAzcm1VK3FSWXFBQ1h5b2pHUGNUbmorUTBKK2pkNzB2V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49819	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:40 UTC	616	OUT	GET /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:41 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 18 Dec 2024 21:14:41 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-18 21:14:41 UTC	647	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-12-18 21:14:41 UTC	1024	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background
2024-12-18 21:14:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49821	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:40 UTC	1164	OUT	GET /recaptcha/enterprise/payload?p=06AFcWeA6Kl7jAjMfZK52TrA9tzYwLQQWsdpXfC_w-aJyMaaaK2H1e0bGhSDkFYjktRS6vkH4tPST1iSb2gZ8D6eXaGx7uX1NLnW6xRzaUvLx7q64MhYh8UzdHpoId0ExJeLvgoZ87O8_vi8B-P7hhFRkjYTo5vk1AJV3Zz1i8xvT30c1jidmxHsSzEB1Rurpo5j3JOzp6IDq7&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:41 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 18 Dec 2024 21:14:41 GMT Date: Wed, 18 Dec 2024 21:14:41 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-18 21:14:41 UTC	709	IN	Data Raw: 37 32 38 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 7288JFIFC!"$"$C,,"}!1AQa"q
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: f7 59 18 fb 1e 46 2b 1e 64 f7 2a c7 ba 78 4b c5 90 ea fb 6d 2f 8a c1 a8 74 56 23 6a 5c fd 3d 1b fc fd 35 ae 74 e5 92 19 e3 90 99 3c c7 62 51 c7 dd f6 fe b5 f3 a5 86 ad 71 a3 cc b6 fa ab b5 c5 99 6c 47 76 07 cc be 81 fb e7 df f9 f6 f6 7f 06 78 be 2b 88 e1 b4 d5 ae 11 b7 00 2d ef 77 02 18 76 57 ff 00 e2 ab 45 2b ab 48 97 1b 6a 8c dd 46 d2 6d 1e fe 39 d5 37 a2 3e 50 9c 80 c3 3f 74 fd 6b 4e 1b f1 31 5b db 32 f1 cb b8 6e 53 d5 5b 3d eb a9 d5 f4 f8 6f 21 78 e4 8c 1e 39 1d 73 f4 ae 1a e6 de 7d 2a f9 1f 93 b5 87 27 fe 5a 28 3f 74 fb fb d4 29 3a 52 d7 60 69 4d 79 9e b5 a7 3c 13 e8 f0 ea 3a 72 e3 52 b5 90 2c 8a 7a b0 24 0d bf 43 db f1 f7 ae e2 cb 54 b0 b9 d2 e3 9e d0 9d 8e 3a 13 92 a7 b8 39 af 10 d0 75 8f b2 dd 8b d8 e4 69 21 7e 5d 7a 67 9c e0 fd 08 ae c2 ce fe 3b Data Ascii: YF+dxKm/tV#j\=5t<bQqlGvx+-wvWE+HjFm97>P?tkN1[2nS[=o!x9s}'Z(?t):R`iMy<:rR,z$CT:9ui!~]zg;
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: 1b 23 8d a2 50 33 1b fa 06 1d 8f b1 fc 09 ae 6b 49 d4 f5 4f 0b ca a9 2e d7 b6 91 8e 6d f2 4e 07 aa 9f e9 ff 00 eb ad cb 2f 10 79 1f ba bf 5f 95 86 37 81 95 61 ee 3b d5 ab cb 1b 6b a8 92 6b 07 8a 54 fb cb 16 ec 80 7f d8 3d be 87 f4 a7 7b 6e 3b 76 3d 0f e1 ef 8e ad e5 b2 8e 0b 89 cc f6 3d 12 4e b2 5b 1f ee 91 d7 6f b7 6e d5 d9 ea 9a 74 37 96 e0 46 ab 34 52 e5 f7 87 c8 20 8c 82 a7 d3 35 f3 0c a2 eb 48 d4 0d de 9c c6 29 73 fb c8 d8 60 37 b3 2d 7a 67 c3 6f 88 b1 af fa 2c d9 f2 ba cb 68 cd f3 21 ee d1 93 d7 e9 f9 e3 ad 5a 7a 59 ec 4b 5a dd 6e 6d dc 25 d6 89 78 62 62 5a 19 0e 48 fe f0 1e 9e f5 dc 78 5e ee de 38 53 4f ba 20 da de 2f 0d d9 49 e8 d9 fa 63 f4 aa ba 94 36 1a cd 9c 73 db cc 26 82 45 69 03 c7 d4 e3 03 03 b8 3c f4 ae 5a ce e6 6d 0a f9 74 fd 45 f7 59 31 Data Ascii: #P3kIO.mN/y_7a;kkT={n;v==N[ont7F4R 5H)s`7-zgo,h!ZzYKZnm%xbbZHx^8SO /Ic6s&Ei<ZmtEY1
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: b8 58 8c 29 23 04 0f c0 53 d7 e5 ea 37 0a 63 44 c3 ab 8f fb e8 0a 64 8a cb ce e1 f4 12 03 4c 0b 1e 62 81 8f 2d 7f 2a 7a cc bd a3 41 f4 aa 69 b9 be ee 71 eb 9a 71 41 bb 19 2d f4 a7 61 5c b6 2e 18 1e 38 14 bf 69 4f e2 56 26 aa 14 1c 64 3f b7 14 a1 10 f7 71 f8 0a 2c 87 76 7c 45 fe 89 30 32 59 5f 2b e3 9c 39 c1 1f f0 21 c8 fc 45 16 5e 21 d5 2d ae 0d bb 43 25 e2 83 8c 8e 4e 3d 98 70 7f 1a 9a 1b 3b 68 82 79 36 f1 21 5e a4 28 cd 5b 31 33 79 6b c8 c2 93 d3 bf f9 35 8b 65 a4 36 ea 38 6f ed 7c cb 7b 49 6d e6 6e 83 e5 0b 9f 71 9f d4 55 6d 2e c7 5a b3 b8 de 97 71 42 78 dd 1a e5 95 be bc 57 41 67 6e 7c a4 5c 0c 55 cb 7b 42 4b 7a 92 29 5c a3 1f 54 b2 9f 54 29 14 ef 18 65 e7 cc 8e 32 18 7b 67 3d 2a 3d 33 c1 b0 c9 72 b7 46 4b 95 95 1b e5 64 7d a4 7b d7 51 61 02 79 85 89 Data Ascii: X)#S7cDdLb-zAiqqA-a\.8iOV&d?q,v\|E02Y_+9!E^!-C%N=p;hy6!^([13yk5e68o\|{ImnqUm.ZqBxWAgn\|\U{BKz)\TT)e2{g==3rFKd}{Qay
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: 7f dd a8 1e 07 07 e4 38 a4 4b 77 e4 96 c1 f6 af 51 b4 66 ae 4b 35 c3 34 84 e4 e7 dc d4 45 e4 6e 37 31 cf bd 39 6d d4 72 58 9f 5c 9a 95 15 17 19 51 91 53 cc 96 c5 58 ad b9 f3 b7 93 f4 34 ab 14 84 82 15 be 84 d5 cd eb e9 49 c1 3c 64 51 ce 1c a5 72 ae a4 6e 89 98 0a 23 b9 58 98 fc 80 7d 6a d4 63 e7 20 b3 70 01 e4 e7 d7 fc 28 9e 5b 78 02 9b 8b 98 a1 de 76 ae f7 0b b8 fa 0c f5 34 73 8f 94 aa 6e d6 4c 83 81 f4 a9 03 2c 60 10 37 7a 73 56 bc a5 3c 12 4f b6 29 b7 d7 16 1a 66 9f 2d fe a3 34 50 da 40 bb a4 91 c7 0a 3a 51 cc 82 cc 22 77 95 4e 2d 1f 9e e0 8f ea 6a 45 8a 46 50 ca 92 e3 d8 83 5e 31 ab fc 70 ba 8b 5b 99 74 7d 3e d8 e9 68 4a 42 64 52 1e 4e 47 ce 70 78 e8 46 3d eb a4 d1 3e 36 e8 63 4f 4f ed 9b 59 2d ee c9 25 96 20 4a e3 3c 11 59 fb 78 de c1 64 7c c9 36 ad Data Ascii: 8KwQfK54En719mrX\QSX4I<dQrn#X}jc p([xv4snL,`7zsV<O)f-4P@:Q"wN-jEFP^1p[t}>hJBdRNGpxF=>6cOOY-% J<Yxd\|6
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: ec 76 9a 7f c5 4f 16 35 8c 65 22 81 94 02 a1 9a 34 dc 71 c7 77 ab 36 df 13 3c 5b 23 ed 58 ad c9 66 cf ce b1 80 3f 1d fc 57 27 a6 78 32 fa c2 e5 66 9f 56 b7 48 d4 1d d1 3b 67 39 f4 1d 3f 5a d2 78 20 57 3b 10 15 03 a4 98 0c c7 fe 00 18 01 f8 d6 8e a4 93 e8 5a 6f b1 a7 3f c5 7f 10 a4 99 75 b4 5d 8c 57 3b 63 20 9f fb f9 cd 4b 6d f1 63 5e 75 95 89 b2 c4 68 5f 0c a9 96 c1 e8 b8 6e 4f b7 b1 ac b4 8b 4e 55 dc ba 7c 2e e4 72 65 c9 19 fa 03 cd 4b 6e d0 40 4b 0b 7b 48 d1 b3 b8 47 00 5e c4 0c 1c e7 8c e6 9a ad 17 d4 b5 e8 6c c5 f1 37 c5 92 22 48 9a 4a b2 37 21 bc 8e 08 e7 fd af 63 f9 54 77 5f 16 7c 47 62 40 bc d2 e3 8b 70 c8 2d 09 19 1f 9f b5 50 d3 96 5b fb 80 3c d2 f1 45 c9 91 94 f4 f4 1c d2 df 43 2c b0 03 71 05 bd d0 67 fd e8 11 12 7d 88 04 ff 00 5a b8 4b 99 31 c9 Data Ascii: vO5e"4qw6<[#Xf?W'x2fVH;g9?Zx W;Zo?u]W;c Kmc^uh_nONU\|.reKn@K{HG^l7"HJ7!cTw_\|Gb@p-P[<EC,qg}ZK1
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: ad b5 19 ef 26 69 12 3b c7 2f 28 45 03 20 a1 e3 0d 8e cb cf 5a d4 8a ef ec f6 66 ef 53 77 92 14 fb ca b2 84 76 39 23 0a dc fb f3 8e d5 82 92 da e8 b6 c2 34 79 60 85 00 6d 92 46 4b 39 38 e1 ba ff 00 85 72 9a c6 bb 71 71 75 fd 9f 2c 9b 6d 8c 6d 85 da 00 e8 48 e0 1c 75 26 b0 85 05 56 7c e8 c2 75 e5 0a 7c 88 8f c7 32 5b cd 78 b7 f6 69 b2 19 19 91 03 36 f6 3b 70 32 c7 d7 39 e7 da bb a9 26 bb 9b 89 2e 26 7f f7 98 e2 b8 fd 6e e2 da 11 6f 11 86 28 36 d9 02 f1 02 42 61 d9 9b 00 0f af ff 00 aa bb 02 51 30 dc 00 46 73 9c ff 00 9e 95 ae 29 72 a8 a3 0a 2d ea 31 06 38 6c 9a 94 6d 45 cb 0f e9 51 34 fc 31 da 40 23 a9 1f ca ab 34 cd 20 21 4f e3 5c ca 0d ee 75 42 94 a5 a9 66 69 d4 1c 02 71 ed de 9b 69 6d 71 a8 ce a8 a1 96 2e ae e7 a2 8f eb 49 61 63 3d e4 a3 68 75 88 f5 90 Data Ascii: &i;/(E ZfSwv9#4y`mFK98rqqu,mmHu&V\|u\|2[xi6;p29&.&no(6BaQ0Fs)r-18lmEQ41@#4 !O\uBfiqimq.Iac=hu
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: 00 b2 10 f1 8f 32 1b 92 1b f5 db 8a e7 f5 3b 4b c6 0c 2d e6 5b 52 79 fd fc 4e 57 fe fb e9 fa d7 25 67 5e 9c 7f 73 15 f3 64 cd 29 6a 79 07 89 be 18 ea 57 92 9b 9d 3e ea d1 24 f2 92 30 b3 16 04 05 1b 7a 8c 8e 40 cd 50 92 5d 98 66 6c 1d c7 1d 33 ff 00 d6 af 5b 3a 7f 8b 19 0f 92 34 cb b8 b1 cb 43 70 0f f5 af 1d 8e 20 c7 84 24 8e 58 b3 1c 0a e1 a3 53 15 36 fd ba b7 63 6c 24 15 db 68 76 e6 6e a4 91 d7 d8 55 9b 4b 77 be 71 14 4c 00 18 e7 1c 13 f9 53 6c 6c e6 bc 77 45 dd 14 2b d6 42 84 82 7d 3a 8c d7 51 63 69 0d 8c 58 44 51 21 1c 90 a0 57 65 3a 77 d5 9d 55 2a 28 e8 b7 16 da 01 67 6c b6 f1 9c 90 39 39 cd 68 c9 fe 87 a4 28 3c 4d 77 f3 7d 23 07 8f cc f3 f8 54 3a 55 b3 5f 5f a4 2c 76 a7 2d 2b 7f 75 07 24 d3 35 7b af b5 de c9 2a 8d b1 fd d8 d7 fb aa 38 03 f2 ad 1f bd Data Ascii: 2;K-[RyNW%g^sd)jyW>$0z@P]fl3[:4Cp $XS6cl$hvnUKwqLSllwE+B}:QciXDQ!We:wU(gl99h(<Mw}#T:U__,v-+u$5{8
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: 74 bf 06 ad a5 85 ee 9d 77 a8 7d b2 c6 f1 30 d1 f9 3b 0a 48 3e ec 8a 77 1c 11 f4 e6 b1 3f e1 5a 64 00 75 be 7d 7e cb ff 00 d9 d7 a6 08 03 8c 67 15 4a ef 50 d1 ac 6f d6 ca ef 51 8e 3b 82 9b c4 7b 59 8e 3f 00 71 47 24 10 bd a5 47 b1 c3 c7 f0 a4 48 b9 3a fe 3f ed cf 3f fb 3d 79 ad d5 85 bc 37 73 c2 6f 63 71 1c 8c 8a f1 2e f0 c0 1e 0f 5e 33 e8 79 15 f4 75 8c fa 7d ec af 6b 65 a9 c3 24 c1 03 b2 a3 8d e8 a7 a1 2a 79 1f 88 ee 2b e4 2f 1d ea 3f 69 f1 55 f9 b6 bb 68 e2 8a 56 85 48 93 87 d8 4a ee 18 e3 04 83 8f 6c 75 eb 53 25 14 ae 8b 8c a6 cf 55 f0 5e ab 0a 6b de 1a b2 6f 0c d9 cd f6 62 96 9e 6f da 1b cc b7 9a 50 12 59 78 00 f4 03 03 3c 73 cf 3c 7b 94 9e 1f d1 da ca 3d fa 6d 9b bc 24 32 3b 42 a5 b7 60 8c e7 ae 79 35 f3 37 c1 0f 1c 78 87 4e f1 14 4d 77 1d 8e a1 06 Data Ascii: tw}0;H>w?Zdu}~gJPoQ;{Y?qG$GH:??=y7socq.^3yu}ke$*y+/?iUhVHJluS%U^koboPYx<s<{=m$2;B`y57xNMw
2024-12-18 21:14:41 UTC	1390	IN	Data Raw: a5 48 20 67 2d 90 78 e2 bc cf 5c bf 13 5e dc 47 a7 15 8e de 68 e5 79 91 90 af 3e 53 75 e3 38 1c d2 ab 24 d5 93 12 8b 30 e3 f1 08 36 2d 2d ce 62 7b 5d b1 b1 67 91 b7 ed 20 b6 d5 ce 00 3b 97 3e 98 1d 39 af 66 f8 65 ab cd 7f a7 dc 49 75 31 38 64 8c 23 91 c1 0a 09 20 f7 ea 79 ef 5e 31 2d b4 30 d8 5b 5b ff 00 69 24 b3 29 77 63 b5 80 2d 84 0a 0b 2f 00 0c 0a ec 7e 1f 78 8a 1b 08 a6 b5 be 69 00 07 7a cb 1a 6d 50 b8 1c 01 c9 3c 9c 7e 15 10 76 63 e5 68 a3 fb 51 24 57 33 f8 6d 76 09 08 fb 48 5c 11 ff 00 4c a9 df 07 a6 8f 4b f0 fc a3 cb 8d 77 cc c0 f2 07 40 0f af bd 67 fc 56 d4 e1 d7 ae f4 cf b1 c5 3e 2d 8c bf 3c b8 19 dd b3 a0 04 ff 00 76 ba df 85 5e 1b 87 51 f0 c4 c6 59 a6 8f cc 91 b7 aa ff 00 10 c9 1f 87 4e d5 35 5b 52 f7 4b 8a be e6 ab 6a b3 99 4b 22 5b 98 b2 00 Data Ascii: H g-x\^Ghy>Su8$06--b{]g ;>9feIu18d# y^1-0[[i$)wc-/~xizmP<~vchQ$W3mvH\LKw@gV>-<v^QYN5[RKjK"[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49828	172.217.19.228	443	5436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 21:14:43 UTC	826	OUT	GET /recaptcha/enterprise/payload?p=06AFcWeA6Kl7jAjMfZK52TrA9tzYwLQQWsdpXfC_w-aJyMaaaK2H1e0bGhSDkFYjktRS6vkH4tPST1iSb2gZ8D6eXaGx7uX1NLnW6xRzaUvLx7q64MhYh8UzdHpoId0ExJeLvgoZ87O8_vi8B-P7hhFRkjYTo5vk1AJV3Zz1i8xvT30c1jidmxHsSzEB1Rurpo5j3JOzp6IDq7&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
2024-12-18 21:14:44 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 18 Dec 2024 21:14:44 GMT Date: Wed, 18 Dec 2024 21:14:44 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-18 21:14:44 UTC	709	IN	Data Raw: 37 32 38 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 7288JFIFC!"$"$C,,"}!1AQa"q
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: f7 59 18 fb 1e 46 2b 1e 64 f7 2a c7 ba 78 4b c5 90 ea fb 6d 2f 8a c1 a8 74 56 23 6a 5c fd 3d 1b fc fd 35 ae 74 e5 92 19 e3 90 99 3c c7 62 51 c7 dd f6 fe b5 f3 a5 86 ad 71 a3 cc b6 fa ab b5 c5 99 6c 47 76 07 cc be 81 fb e7 df f9 f6 f6 7f 06 78 be 2b 88 e1 b4 d5 ae 11 b7 00 2d ef 77 02 18 76 57 ff 00 e2 ab 45 2b ab 48 97 1b 6a 8c dd 46 d2 6d 1e fe 39 d5 37 a2 3e 50 9c 80 c3 3f 74 fd 6b 4e 1b f1 31 5b db 32 f1 cb b8 6e 53 d5 5b 3d eb a9 d5 f4 f8 6f 21 78 e4 8c 1e 39 1d 73 f4 ae 1a e6 de 7d 2a f9 1f 93 b5 87 27 fe 5a 28 3f 74 fb fb d4 29 3a 52 d7 60 69 4d 79 9e b5 a7 3c 13 e8 f0 ea 3a 72 e3 52 b5 90 2c 8a 7a b0 24 0d bf 43 db f1 f7 ae e2 cb 54 b0 b9 d2 e3 9e d0 9d 8e 3a 13 92 a7 b8 39 af 10 d0 75 8f b2 dd 8b d8 e4 69 21 7e 5d 7a 67 9c e0 fd 08 ae c2 ce fe 3b Data Ascii: YF+dxKm/tV#j\=5t<bQqlGvx+-wvWE+HjFm97>P?tkN1[2nS[=o!x9s}'Z(?t):R`iMy<:rR,z$CT:9ui!~]zg;
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: 1b 23 8d a2 50 33 1b fa 06 1d 8f b1 fc 09 ae 6b 49 d4 f5 4f 0b ca a9 2e d7 b6 91 8e 6d f2 4e 07 aa 9f e9 ff 00 eb ad cb 2f 10 79 1f ba bf 5f 95 86 37 81 95 61 ee 3b d5 ab cb 1b 6b a8 92 6b 07 8a 54 fb cb 16 ec 80 7f d8 3d be 87 f4 a7 7b 6e 3b 76 3d 0f e1 ef 8e ad e5 b2 8e 0b 89 cc f6 3d 12 4e b2 5b 1f ee 91 d7 6f b7 6e d5 d9 ea 9a 74 37 96 e0 46 ab 34 52 e5 f7 87 c8 20 8c 82 a7 d3 35 f3 0c a2 eb 48 d4 0d de 9c c6 29 73 fb c8 d8 60 37 b3 2d 7a 67 c3 6f 88 b1 af fa 2c d9 f2 ba cb 68 cd f3 21 ee d1 93 d7 e9 f9 e3 ad 5a 7a 59 ec 4b 5a dd 6e 6d dc 25 d6 89 78 62 62 5a 19 0e 48 fe f0 1e 9e f5 dc 78 5e ee de 38 53 4f ba 20 da de 2f 0d d9 49 e8 d9 fa 63 f4 aa ba 94 36 1a cd 9c 73 db cc 26 82 45 69 03 c7 d4 e3 03 03 b8 3c f4 ae 5a ce e6 6d 0a f9 74 fd 45 f7 59 31 Data Ascii: #P3kIO.mN/y_7a;kkT={n;v==N[ont7F4R 5H)s`7-zgo,h!ZzYKZnm%xbbZHx^8SO /Ic6s&Ei<ZmtEY1
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: b8 58 8c 29 23 04 0f c0 53 d7 e5 ea 37 0a 63 44 c3 ab 8f fb e8 0a 64 8a cb ce e1 f4 12 03 4c 0b 1e 62 81 8f 2d 7f 2a 7a cc bd a3 41 f4 aa 69 b9 be ee 71 eb 9a 71 41 bb 19 2d f4 a7 61 5c b6 2e 18 1e 38 14 bf 69 4f e2 56 26 aa 14 1c 64 3f b7 14 a1 10 f7 71 f8 0a 2c 87 76 7c 45 fe 89 30 32 59 5f 2b e3 9c 39 c1 1f f0 21 c8 fc 45 16 5e 21 d5 2d ae 0d bb 43 25 e2 83 8c 8e 4e 3d 98 70 7f 1a 9a 1b 3b 68 82 79 36 f1 21 5e a4 28 cd 5b 31 33 79 6b c8 c2 93 d3 bf f9 35 8b 65 a4 36 ea 38 6f ed 7c cb 7b 49 6d e6 6e 83 e5 0b 9f 71 9f d4 55 6d 2e c7 5a b3 b8 de 97 71 42 78 dd 1a e5 95 be bc 57 41 67 6e 7c a4 5c 0c 55 cb 7b 42 4b 7a 92 29 5c a3 1f 54 b2 9f 54 29 14 ef 18 65 e7 cc 8e 32 18 7b 67 3d 2a 3d 33 c1 b0 c9 72 b7 46 4b 95 95 1b e5 64 7d a4 7b d7 51 61 02 79 85 89 Data Ascii: X)#S7cDdLb-zAiqqA-a\.8iOV&d?q,v\|E02Y_+9!E^!-C%N=p;hy6!^([13yk5e68o\|{ImnqUm.ZqBxWAgn\|\U{BKz)\TT)e2{g==3rFKd}{Qay
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: 7f dd a8 1e 07 07 e4 38 a4 4b 77 e4 96 c1 f6 af 51 b4 66 ae 4b 35 c3 34 84 e4 e7 dc d4 45 e4 6e 37 31 cf bd 39 6d d4 72 58 9f 5c 9a 95 15 17 19 51 91 53 cc 96 c5 58 ad b9 f3 b7 93 f4 34 ab 14 84 82 15 be 84 d5 cd eb e9 49 c1 3c 64 51 ce 1c a5 72 ae a4 6e 89 98 0a 23 b9 58 98 fc 80 7d 6a d4 63 e7 20 b3 70 01 e4 e7 d7 fc 28 9e 5b 78 02 9b 8b 98 a1 de 76 ae f7 0b b8 fa 0c f5 34 73 8f 94 aa 6e d6 4c 83 81 f4 a9 03 2c 60 10 37 7a 73 56 bc a5 3c 12 4f b6 29 b7 d7 16 1a 66 9f 2d fe a3 34 50 da 40 bb a4 91 c7 0a 3a 51 cc 82 cc 22 77 95 4e 2d 1f 9e e0 8f ea 6a 45 8a 46 50 ca 92 e3 d8 83 5e 31 ab fc 70 ba 8b 5b 99 74 7d 3e d8 e9 68 4a 42 64 52 1e 4e 47 ce 70 78 e8 46 3d eb a4 d1 3e 36 e8 63 4f 4f ed 9b 59 2d ee c9 25 96 20 4a e3 3c 11 59 fb 78 de c1 64 7c c9 36 ad Data Ascii: 8KwQfK54En719mrX\QSX4I<dQrn#X}jc p([xv4snL,`7zsV<O)f-4P@:Q"wN-jEFP^1p[t}>hJBdRNGpxF=>6cOOY-% J<Yxd\|6
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: ec 76 9a 7f c5 4f 16 35 8c 65 22 81 94 02 a1 9a 34 dc 71 c7 77 ab 36 df 13 3c 5b 23 ed 58 ad c9 66 cf ce b1 80 3f 1d fc 57 27 a6 78 32 fa c2 e5 66 9f 56 b7 48 d4 1d d1 3b 67 39 f4 1d 3f 5a d2 78 20 57 3b 10 15 03 a4 98 0c c7 fe 00 18 01 f8 d6 8e a4 93 e8 5a 6f b1 a7 3f c5 7f 10 a4 99 75 b4 5d 8c 57 3b 63 20 9f fb f9 cd 4b 6d f1 63 5e 75 95 89 b2 c4 68 5f 0c a9 96 c1 e8 b8 6e 4f b7 b1 ac b4 8b 4e 55 dc ba 7c 2e e4 72 65 c9 19 fa 03 cd 4b 6e d0 40 4b 0b 7b 48 d1 b3 b8 47 00 5e c4 0c 1c e7 8c e6 9a ad 17 d4 b5 e8 6c c5 f1 37 c5 92 22 48 9a 4a b2 37 21 bc 8e 08 e7 fd af 63 f9 54 77 5f 16 7c 47 62 40 bc d2 e3 8b 70 c8 2d 09 19 1f 9f b5 50 d3 96 5b fb 80 3c d2 f1 45 c9 91 94 f4 f4 1c d2 df 43 2c b0 03 71 05 bd d0 67 fd e8 11 12 7d 88 04 ff 00 5a b8 4b 99 31 c9 Data Ascii: vO5e"4qw6<[#Xf?W'x2fVH;g9?Zx W;Zo?u]W;c Kmc^uh_nONU\|.reKn@K{HG^l7"HJ7!cTw_\|Gb@p-P[<EC,qg}ZK1
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: ad b5 19 ef 26 69 12 3b c7 2f 28 45 03 20 a1 e3 0d 8e cb cf 5a d4 8a ef ec f6 66 ef 53 77 92 14 fb ca b2 84 76 39 23 0a dc fb f3 8e d5 82 92 da e8 b6 c2 34 79 60 85 00 6d 92 46 4b 39 38 e1 ba ff 00 85 72 9a c6 bb 71 71 75 fd 9f 2c 9b 6d 8c 6d 85 da 00 e8 48 e0 1c 75 26 b0 85 05 56 7c e8 c2 75 e5 0a 7c 88 8f c7 32 5b cd 78 b7 f6 69 b2 19 19 91 03 36 f6 3b 70 32 c7 d7 39 e7 da bb a9 26 bb 9b 89 2e 26 7f f7 98 e2 b8 fd 6e e2 da 11 6f 11 86 28 36 d9 02 f1 02 42 61 d9 9b 00 0f af ff 00 aa bb 02 51 30 dc 00 46 73 9c ff 00 9e 95 ae 29 72 a8 a3 0a 2d ea 31 06 38 6c 9a 94 6d 45 cb 0f e9 51 34 fc 31 da 40 23 a9 1f ca ab 34 cd 20 21 4f e3 5c ca 0d ee 75 42 94 a5 a9 66 69 d4 1c 02 71 ed de 9b 69 6d 71 a8 ce a8 a1 96 2e ae e7 a2 8f eb 49 61 63 3d e4 a3 68 75 88 f5 90 Data Ascii: &i;/(E ZfSwv9#4y`mFK98rqqu,mmHu&V\|u\|2[xi6;p29&.&no(6BaQ0Fs)r-18lmEQ41@#4 !O\uBfiqimq.Iac=hu
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: 00 b2 10 f1 8f 32 1b 92 1b f5 db 8a e7 f5 3b 4b c6 0c 2d e6 5b 52 79 fd fc 4e 57 fe fb e9 fa d7 25 67 5e 9c 7f 73 15 f3 64 cd 29 6a 79 07 89 be 18 ea 57 92 9b 9d 3e ea d1 24 f2 92 30 b3 16 04 05 1b 7a 8c 8e 40 cd 50 92 5d 98 66 6c 1d c7 1d 33 ff 00 d6 af 5b 3a 7f 8b 19 0f 92 34 cb b8 b1 cb 43 70 0f f5 af 1d 8e 20 c7 84 24 8e 58 b3 1c 0a e1 a3 53 15 36 fd ba b7 63 6c 24 15 db 68 76 e6 6e a4 91 d7 d8 55 9b 4b 77 be 71 14 4c 00 18 e7 1c 13 f9 53 6c 6c e6 bc 77 45 dd 14 2b d6 42 84 82 7d 3a 8c d7 51 63 69 0d 8c 58 44 51 21 1c 90 a0 57 65 3a 77 d5 9d 55 2a 28 e8 b7 16 da 01 67 6c b6 f1 9c 90 39 39 cd 68 c9 fe 87 a4 28 3c 4d 77 f3 7d 23 07 8f cc f3 f8 54 3a 55 b3 5f 5f a4 2c 76 a7 2d 2b 7f 75 07 24 d3 35 7b af b5 de c9 2a 8d b1 fd d8 d7 fb aa 38 03 f2 ad 1f bd Data Ascii: 2;K-[RyNW%g^sd)jyW>$0z@P]fl3[:4Cp $XS6cl$hvnUKwqLSllwE+B}:QciXDQ!We:wU(gl99h(<Mw}#T:U__,v-+u$5{8
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: 74 bf 06 ad a5 85 ee 9d 77 a8 7d b2 c6 f1 30 d1 f9 3b 0a 48 3e ec 8a 77 1c 11 f4 e6 b1 3f e1 5a 64 00 75 be 7d 7e cb ff 00 d9 d7 a6 08 03 8c 67 15 4a ef 50 d1 ac 6f d6 ca ef 51 8e 3b 82 9b c4 7b 59 8e 3f 00 71 47 24 10 bd a5 47 b1 c3 c7 f0 a4 48 b9 3a fe 3f ed cf 3f fb 3d 79 ad d5 85 bc 37 73 c2 6f 63 71 1c 8c 8a f1 2e f0 c0 1e 0f 5e 33 e8 79 15 f4 75 8c fa 7d ec af 6b 65 a9 c3 24 c1 03 b2 a3 8d e8 a7 a1 2a 79 1f 88 ee 2b e4 2f 1d ea 3f 69 f1 55 f9 b6 bb 68 e2 8a 56 85 48 93 87 d8 4a ee 18 e3 04 83 8f 6c 75 eb 53 25 14 ae 8b 8c a6 cf 55 f0 5e ab 0a 6b de 1a b2 6f 0c d9 cd f6 62 96 9e 6f da 1b cc b7 9a 50 12 59 78 00 f4 03 03 3c 73 cf 3c 7b 94 9e 1f d1 da ca 3d fa 6d 9b bc 24 32 3b 42 a5 b7 60 8c e7 ae 79 35 f3 37 c1 0f 1c 78 87 4e f1 14 4d 77 1d 8e a1 06 Data Ascii: tw}0;H>w?Zdu}~gJPoQ;{Y?qG$GH:??=y7socq.^3yu}ke$*y+/?iUhVHJluS%U^koboPYx<s<{=m$2;B`y57xNMw
2024-12-18 21:14:44 UTC	1390	IN	Data Raw: a5 48 20 67 2d 90 78 e2 bc cf 5c bf 13 5e dc 47 a7 15 8e de 68 e5 79 91 90 af 3e 53 75 e3 38 1c d2 ab 24 d5 93 12 8b 30 e3 f1 08 36 2d 2d ce 62 7b 5d b1 b1 67 91 b7 ed 20 b6 d5 ce 00 3b 97 3e 98 1d 39 af 66 f8 65 ab cd 7f a7 dc 49 75 31 38 64 8c 23 91 c1 0a 09 20 f7 ea 79 ef 5e 31 2d b4 30 d8 5b 5b ff 00 69 24 b3 29 77 63 b5 80 2d 84 0a 0b 2f 00 0c 0a ec 7e 1f 78 8a 1b 08 a6 b5 be 69 00 07 7a cb 1a 6d 50 b8 1c 01 c9 3c 9c 7e 15 10 76 63 e5 68 a3 fb 51 24 57 33 f8 6d 76 09 08 fb 48 5c 11 ff 00 4c a9 df 07 a6 8f 4b f0 fc a3 cb 8d 77 cc c0 f2 07 40 0f af bd 67 fc 56 d4 e1 d7 ae f4 cf b1 c5 3e 2d 8c bf 3c b8 19 dd b3 a0 04 ff 00 76 ba df 85 5e 1b 87 51 f0 c4 c6 59 a6 8f cc 91 b7 aa ff 00 10 c9 1f 87 4e d5 35 5b 52 f7 4b 8a be e6 ab 6a b3 99 4b 22 5b 98 b2 00 Data Ascii: H g-x\^Ghy>Su8$06--b{]g ;>9feIu18d# y^1-0[[i$)wc-/~xizmP<~vchQ$W3mvH\LKw@gV>-<v^QYN5[RKjK"[

Target ID:	0
Start time:	16:13:47
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:13:50
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1956,i,14970668212707058074,7897732151016508089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:13:55
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	HTTP Parser: No favicon
Source: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	HTTP Parser: No favicon
Source: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	HTTP Parser: No favicon
Source: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	HTTP Parser: No favicon
Source: https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /1IRrYqkWKQoiBbzgMszUPYQsxda8 HTTP/1.1Host: share.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.5536/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /48586112.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.5536/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /48586112.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=tBpYkHFmfkF_nNgBUPQImVykazy4vD7T5lEbpAqmZbU-1734556440-1.0.1.1-9ikge7MO8DqqblLM5VQr1z.NMF3ClrDAK5HSzMSxSdL_mNzV5QZpIS_y._7napbftXJne996AUSjP_CdxXzd2w
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/48586112/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1734556200000/48586112.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48586112/211ad8aa-458a-4288-816f-380cb3350f61/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js.hsforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ig_lHjOI3vvIAAWJAQUT13NZmxlx4zSk0OZEJIMFjtk-1734556440-1.0.1.1-zO8J4i.xifglkzqz9PO_1oI.8.1ACCX0AbAiQdrnchmJBN8B2v8QiRYsfKUWRcWQ.rtqZKS_UbOsrjrfS9Xl5Q
Source: global traffic	HTTP traffic detected: GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=oRvaznjbtNPKz.KDB0Pmb5107Sbr8KeLpf1omHb.vmc-1734556441-1.0.1.1-_HKfhk0c03LJfiTaqBAlUlebgeFZBJ.TG0CPp1mtv3.IR0YvKVRPDK6IzDyTv2y1gfNvXC2Jz9RLRHggbb9rzw
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48586112&utk= HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/48586112/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=JGWks0UadJAM6o4DTXobs.eEvtWgn2uyhfwXD0.kHcc-1734556442-1.0.1.1-Z6Ob282ydJvR9hUozvoBmL8XyLBxxIQLAuYMo7ymZBIiUKx7Dij3hHK9guWHl9tAQSqoHtCieJDSVbGmxcSi1g
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442221&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1734556200000/48586112.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=eMlEWH_sY.aYPi9sWr0DpgErgOohtB8Y9ahptXJozoA-1734556442-1.0.1.1-FLAg5c4QXSFnNJ7nXqu.1yXaf8nTYu4sEKnyym0s6LCJPno3zRwjiTG3O.gK4F_QDnbORYY7KiE9X2fwHaJEnw
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png HTTP/1.1Host: 48586112.fs1.hubspotusercontent-na1.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48586112/211ad8aa-458a-4288-816f-380cb3350f61/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1Host: static.hsappstatic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=oRvaznjbtNPKz.KDB0Pmb5107Sbr8KeLpf1omHb.vmc-1734556441-1.0.1.1-_HKfhk0c03LJfiTaqBAlUlebgeFZBJ.TG0CPp1mtv3.IR0YvKVRPDK6IzDyTv2y1gfNvXC2Jz9RLRHggbb9rzw
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442940&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442990&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; _cfuvid=gNs2OxrEf.5cVI2e1E3zWYUcoTk_fAMWatvNdXGu9TU-1734556444371-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48586112&utk= HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=KbnNKd0P_o2JYEHB5SSGcABYmOmq2FNfBeDk9odQKTI-1734556444-1.0.1.1-j.n8vgtMHXKDftuzeOfSSBIG5kTvCxSRYLlJzFroTuG2Z6ermemKr.1oEYBbz1csk3wpDMnCJP8.WUQlYc0uOw
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378&render=explicit&hl=en HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /hubfs/48586112/Screenshot%202024-12-18%20at%2015.13.39.png HTTP/1.1Host: 48586112.fs1.hubspotusercontent-na1.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Rk2eCSIacOp6J_AKR.z9SjPcIhMmeWEgnk1uq83w0pg-1734556445-1.0.1.1-RemPK6zawNwZLA0n9hOt_Qln3BgmMbYftMUor8cEddxQJ27ld7ngzXFzoTQR6YpPLVLdv4vu7AshPXR6uqDLPw
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=faQIVjhvqNt3rreKU3FjvIwKi7kWOfap0Bdg7h.dsx0-1734556438-1.0.1.1-rCRgFPY6CepLRbFWHlrUAwF.eR8iEoBZxRkn5EXgIfVnRrr52pL_QG1u.rgX2MEmP5pm89bczFOhxihygwrwdA; _cfuvid=BcPQuft_v3VVQzQNUPtKJgq4rsJAW_VTVBpF5n5KM5o-1734556438222-0.0.1.1-604800000; __hstc=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1; hubspotutk=85cf389f545e649d02cc39a2190e9c84; __hssrc=1; __hssc=251652889.1.1734556442212
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442221&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; _cfuvid=gNs2OxrEf.5cVI2e1E3zWYUcoTk_fAMWatvNdXGu9TU-1734556444371-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442990&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=q99yfpcCLABT5_3wDxyWEHJjQHMVPeapFZQjxE3NIHY-1734556444-1.0.1.1-330dNJTkgzz1fHGoG5bkh.MGPM0YAYQ5On3KEEmm1LWFvTXpg4nkZrsOgsTwIMbzFogiPJNGp966_anzu2txeg; _cfuvid=gNs2OxrEf.5cVI2e1E3zWYUcoTk_fAMWatvNdXGu9TU-1734556444371-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_faa330e6_239b_4f2a_bea9_7dc87e8c0378&render=explicit&hl=en HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tv HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9zaGFyZS5oc2Zvcm1zLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=6ocesjmr60tvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556463915&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=D4NJw74L0JBnUML7CEDPXSPrapZO4zPzyTTcY4y7PTE-1734556446-1.0.1.1-Ekkh1oTNInCqFFd6kzgbEzq95nD2p5AukETWvWLcV4R1EzY3nlyIC61rTG6GfWDZZ7FYJy1mdTcaeIksnFgASg; _cfuvid=p_BXxO5wxL_kyzYG9_RmjXh60LhFOhCh.4pxQ_Apt4k-1734556446344-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=211ad8aa-458a-4288-816f-380cb3350f61&fci=faa330e6-239b-4f2a-bea9-7dc87e8c0378&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48586112&ccu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&pu=https%3A%2F%2Fshare.hsforms.com%2F1IRrYqkWKQoiBbzgMszUPYQsxda8&t=Form&cts=1734556442940&vi=85cf389f545e649d02cc39a2190e9c84&nc=true&u=251652889.85cf389f545e649d02cc39a2190e9c84.1734556442212.1734556442212.1734556442212.1&b=251652889.1.1734556442212&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=D4NJw74L0JBnUML7CEDPXSPrapZO4zPzyTTcY4y7PTE-1734556446-1.0.1.1-Ekkh1oTNInCqFFd6kzgbEzq95nD2p5AukETWvWLcV4R1EzY3nlyIC61rTG6GfWDZZ7FYJy1mdTcaeIksnFgASg; _cfuvid=p_BXxO5wxL_kyzYG9_RmjXh60LhFOhCh.4pxQ_Apt4k-1734556446344-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/payload?p=06AFcWeA6Qi13dSowk5ut8_juFpgs7BpbOsTln9vEaPDJqsUrnazeyGybbaF9GwZRGmy14JuVizx2NDRb2X8Sw4xCMdZ2CXzErPBStH7NAxSM_fc8hC2wcji8qnZ_72FHj8PNypRJE41DfuvoCsl5DCuvh08YFNSYP7NT-zij_TiBSzUt3h5K7t0AhErCTDL3ywP0MCcqdj-M9&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/payload?p=06AFcWeA6Qi13dSowk5ut8_juFpgs7BpbOsTln9vEaPDJqsUrnazeyGybbaF9GwZRGmy14JuVizx2NDRb2X8Sw4xCMdZ2CXzErPBStH7NAxSM_fc8hC2wcji8qnZ_72FHj8PNypRJE41DfuvoCsl5DCuvh08YFNSYP7NT-zij_TiBSzUt3h5K7t0AhErCTDL3ywP0MCcqdj-M9&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/payload?p=06AFcWeA6Kl7jAjMfZK52TrA9tzYwLQQWsdpXfC_w-aJyMaaaK2H1e0bGhSDkFYjktRS6vkH4tPST1iSb2gZ8D6eXaGx7uX1NLnW6xRzaUvLx7q64MhYh8UzdHpoId0ExJeLvgoZ87O8_vi8B-P7hhFRkjYTo5vk1AJV3Zz1i8xvT30c1jidmxHsSzEB1Rurpo5j3JOzp6IDq7&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/payload?p=06AFcWeA6Kl7jAjMfZK52TrA9tzYwLQQWsdpXfC_w-aJyMaaaK2H1e0bGhSDkFYjktRS6vkH4tPST1iSb2gZ8D6eXaGx7uX1NLnW6xRzaUvLx7q64MhYh8UzdHpoId0ExJeLvgoZ87O8_vi8B-P7hhFRkjYTo5vk1AJV3Zz1i8xvT30c1jidmxHsSzEB1Rurpo5j3JOzp6IDq7&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFnfCJGzQRin_ZSFYVz1RR3A5Alh5MUMH39acdKCBTpUBc6s4nkyjJ2sj2GlbIzh8IzIeCAYfU5RDz4Fkc38

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: share.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: static.hsappstatic.net
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: forms.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: 48586112.fs1.hubspotusercontent-na1.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Windows Analysis Report
https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8