Edit tour

Windows Analysis Report
http://aselog24x7.cl/

Overview

General Information

Sample URL:	http://aselog24x7.cl/
Analysis ID:	1579124
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6864 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1964,i,5279644903293289592,10840831433166987168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aselog24x7.cl/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.19.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.31.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:41:19.847123+0100	2857090	1	Successful Credential Theft Detected	173.255.223.22	443	192.168.2.16	49756	TCP

HTTP traffic detected: POST /timing/share_page_load HTTP/1.1Host: metric.nimbusweb.meConnection: keep-aliveContent-Length: 10sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/x-www-form-urlencodedAccept: */*Origin: https://premiumgain.nimbusweb.meSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://premiumgain.nimbusweb.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:41:34 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 899dbb4f-8b35-40a3-afc3-76a4431be800x-ms-ests-server: 2.1.19683.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:41:34 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 7e8beaf7-7dfc-49c7-aaf2-1f973a74eb01x-ms-ests-server: 2.1.19683.3 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:41:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: be9d2c48-002e-4abd-9001-b58fcaa62d00x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:41:48 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: b73b7cb2-ac9e-4b7b-a5e6-37fb55726b8dx-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: E93AACCA80E644FE92C2ED10E4E16139 Ref B: BY3EDGE0120 Ref C: 2024-12-20T20:41:48Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:41:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: ba64c6b0-3f19-4e2e-ac50-dc5c25cf3c00x-ms-ests-server: 2.1.19683.6 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:42:00 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 85fb312d-720b-4835-b5dd-fabaa9f12e00x-ms-ests-server: 2.1.19683.6 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:42:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: b824d423-6a79-442f-bb10-f153e79a3d00x-ms-ests-server: 2.1.19683.6 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:42:23 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 2b4afc0a-24c3-425c-b33a-95d264133400x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 20 Dec 2024 20:42:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: e4290cf3-b6c0-4ef0-addd-0139f3ce2700x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: http://bit.ly/2sd4HMP
Source: chromecache_190.1.dr	String found in binary or memory: http://g.co/ng/security#xss)
Source: chromecache_138.1.dr, chromecache_163.1.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_190.1.dr	String found in binary or memory: http://nimb.ws/EkX87M
Source: chromecache_122.1.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_122.1.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_122.1.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_122.1.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_190.1.dr	String found in binary or memory: https://...
Source: chromecache_185.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://angular.io/api/common/NgForOf#change-propagation
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://angular.io/api/core/Component#animations).
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://angular.io/errors/NG0$
Source: chromecache_191.1.dr, chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_183.1.dr, chromecache_148.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_172.1.dr, chromecache_167.1.dr	String found in binary or memory: https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.css
Source: chromecache_172.1.dr, chromecache_167.1.dr	String found in binary or memory: https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.js
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://d3jlxgnskmmqem.cloudfront.net/diamond-animation/animation-blue.json
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://d3jlxgnskmmqem.cloudfront.net/diamond-animation/animation-yellow.json
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://events.getsitectrl.com/api/v1/events
Source: chromecache_157.1.dr	String found in binary or memory: https://fengyuanchen.github.io/viewerjs
Source: chromecache_132.1.dr	String found in binary or memory: https://g.co/ng/security#xss)
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://goo.gl/X2J8zc.
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://goo.gl/wIDDiL
Source: chromecache_185.1.dr	String found in binary or memory: https://google.com
Source: chromecache_185.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_153.1.dr, chromecache_188.1.dr	String found in binary or memory: https://l.getsitecontrol.com/m42xj3qw.json
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://m2.getsitecontrol.com/images/45937/16a24fa610de8063461479d5c7326693_235751283.png
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://m2.getsitecontrol.com/images/45937/92b6dc2dfd1666d858aca7e557de7c36_234815107.png
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://material.angular.io/guide/theming
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: https://media.springernature.com/full/springer-cms/rest/v1/img/18893370/v1/height/700
Source: chromecache_172.1.dr	String found in binary or memory: https://metric.nimbusweb.me
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: https://mths.be/he
Source: chromecache_125.1.dr, chromecache_132.1.dr	String found in binary or memory: https://ngrx.io/guide/store/configuration/runtime-checks
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.co/contact.php
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.me
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/auth/openidconnect.php?provider=
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.me/client/
Source: chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/contact-us.php
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.me/pricing.php
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/pricing.php?ws_banner=dunningType_past_due_invoice_day14B2B
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/pricing.php?ws_banner=dunningType_past_due_invoice_day14B2C
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/s/share/4246032/x9umr2emrgvf4xxa45vy
Source: chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/s/share/5441210/4qccr41slk6wsw61h5fb
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/s/share/5441213/cwwryo2477pssn2sgkww
Source: chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/s/share/5607239/l55bgak2ivs9bfptruka#b1995924032_670
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/screenshot/
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.me/share/
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.me/share/dist/common.js?v=9.26.11
Source: chromecache_172.1.dr	String found in binary or memory: https://nimbusweb.me/share/dist/vendor/webcomponents-bundle.js?v=9.26.11
Source: chromecache_172.1.dr, chromecache_199.1.dr, chromecache_161.1.dr, chromecache_119.1.dr, chromecache_190.1.dr	String found in binary or memory: https://nimbusweb.me/terms-and-conditions.php
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day0
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day3
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day5
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day7
Source: chromecache_185.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_191.1.dr, chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_183.1.dr, chromecache_148.1.dr, chromecache_185.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_124.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_167.1.dr	String found in binary or memory: https://premiumgain.nimbusweb.me
Source: chromecache_167.1.dr	String found in binary or memory: https://premiumgain.nimbusweb.me/share/dist/i/b8f7709850a83dcde71fd51d51ef3f59.png
Source: chromecache_167.1.dr	String found in binary or memory: https://premiumgain.nimbusweb.me/share/dist/i/ff6a823eabd85e67c626d007c2830bd5.png
Source: chromecache_155.1.dr	String found in binary or memory: https://s2.getsitecontrol.com/widgets/es6/runtime.0e5d0b4.js
Source: chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_148.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_156.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_124.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_179.1.dr, chromecache_155.1.dr	String found in binary or memory: https://support.nimbusweb.co/portal/en/newticket
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_191.1.dr, chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_183.1.dr, chromecache_148.1.dr, chromecache_185.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_172.1.dr	String found in binary or memory: https://teams.nimbusweb.me
Source: chromecache_172.1.dr	String found in binary or memory: https://text.nimbusweb.me
Source: chromecache_191.1.dr, chromecache_170.1.dr, chromecache_183.1.dr, chromecache_185.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_185.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_172.1.dr, chromecache_167.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_171.1.dr, chromecache_175.1.dr, chromecache_166.1.dr, chromecache_124.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_185.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_185.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_135.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_185.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_184.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_135.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_185.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_175.1.dr, chromecache_124.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_171.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_148.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_185.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.16:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49845 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@19/134@60/19

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1964,i,5279644903293289592,10840831433166987168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aselog24x7.cl/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1964,i,5279644903293289592,10840831433166987168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
stt.nimbusweb.me	216.239.36.21	true	false	high
l1ve.twuseb.us	173.255.223.22	true	true	unknown
1b9f8d12-4db8a1b1.twuseb.us	173.255.223.22	true	true	unknown
premiumgain.nimbusweb.me	216.137.52.31	true	false	high
metric.nimbusweb.me	108.158.75.7	true	false	high
stats.g.doubleclick.net	66.102.1.156	true	false	high
gscstatic2.b-cdn.net	143.244.56.58	true	false	high
aselog24x7.cl	200.63.97.50	true	false	unknown
events.getsitectrl.com	44.209.154.24	true	false	high
87e039e4-4db8a1b1.twuseb.us	173.255.223.22	true	true	unknown
65f66297-4db8a1b1.twuseb.us	173.255.223.22	true	true	unknown
www.google.com	142.250.181.132	true	false	high
gscwidgets2.b-cdn.net	138.199.15.193	true	false	high
analytics.google.com	142.250.181.110	true	false	high
d3hogio4d1txum.cloudfront.net	3.160.185.95	true	false	high
bia.twuseb.us	173.255.223.22	true	true	unknown
8adbfcfb-4db8a1b1.twuseb.us	173.255.223.22	true	false	high
nimbusweb.me	18.66.161.15	true	false	high
8e1d6ffe-4db8a1b1.twuseb.us	173.255.223.22	true	true	unknown
s2.getsitecontrol.com	unknown	unknown	false	high
l.getsitecontrol.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	unknown
https://events.getsitectrl.com/api/v1/events	false	high
https://metric.nimbusweb.me/timing/share_init_editor_dump	false	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js	true	unknown
https://bia.twuseb.us/favicon.ico	true	unknown
https://l1ve.twuseb.us/Me.htm?v=3	true	unknown
https://premiumgain.nimbusweb.me/share/dist/f/12365dee78645ac21eaec216a048746c.woff	false	unknown
https://premiumgain.nimbusweb.me/share/dist/hammer.min.js	false	unknown
https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc	true	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	unknown
https://stt.nimbusweb.me/gtlytics.js?id=GTM-WHFRJTP	false	unknown
https://1b9f8d12-4db8a1b1.twuseb.us/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1734727329219&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true	true	unknown
https://bia.twuseb.us/?N4JV=9Xdg	false	unknown
https://premiumgain.nimbusweb.me/share/dist/index.js?v=9.26.11-73fecd7b	false	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	true	unknown
https://premiumgain.nimbusweb.me/share/dist/assets/loader-32.png	false	unknown
https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy	false	unknown
https://nimbusweb.me/share/dist/common.js?v=9.26.11	false	high
https://metric.nimbusweb.me/timing/share_page_load	false	unknown
https://s2.getsitecontrol.com/widgets/es6/runtime.0e5d0b4.js	false	high
https://premiumgain.nimbusweb.me/share/dist/i/fb0c3c85d07caa53ebf54b3a58b8d30e.png	false	unknown
https://nimbusweb.me/share/dist/vendor/webcomponents-bundle.js?v=9.26.11	false	high
https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	true	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	unknown
https://premiumgain.nimbusweb.me/share/dist/i/ff6a823eabd85e67c626d007c2830bd5.png	false	unknown
https://metric.nimbusweb.me/timing/share_page_note_title	false	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	true	unknown
https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.js	false	unknown
https://l.getsitecontrol.com/m42xj3qw.json	false	high
https://www.google.com/recaptcha/api.js	false	high
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js	true	unknown
https://premiumgain.nimbusweb.me/gwapi2/ft%3Atasks/shares/11450334?securityKey=ots3f4w6xehf2feb09wy&nodeId=1Hy4Ofi612giTUWL	false	unknown
https://65f66297-4db8a1b1.twuseb.us/Prefetch/Prefetch.aspx	true	unknown
https://premiumgain.nimbusweb.me/share/dist/f/80df5da08b99c807a5c6f7ae308e1f89.woff	false	unknown
https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.css	false	unknown
https://premiumgain.nimbusweb.me/user-marketing-info/	false	unknown
https://premiumgain.nimbusweb.me/share/share-api/mentionDiff	false	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	true	unknown
https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://nimbusweb.me/s/share/4246032/x9umr2emrgvf4xxa45vy	chromecache_161.1.dr, chromecache_190.1.dr	false	high
https://metric.nimbusweb.me	chromecache_172.1.dr	false	unknown
https://premiumgain.nimbusweb.me	chromecache_167.1.dr	false	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_148.1.dr	false	high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_175.1.dr, chromecache_124.1.dr	false	high
https://support.google.com/recaptcha#6262736	chromecache_175.1.dr, chromecache_124.1.dr	false	high
https://nimbusweb.me/s/share/5441213/cwwryo2477pssn2sgkww	chromecache_161.1.dr, chromecache_190.1.dr	false	high
https://ngrx.io/guide/store/configuration/runtime-checks	chromecache_125.1.dr, chromecache_132.1.dr	false	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_184.1.dr, chromecache_156.1.dr	false	high
https://material.angular.io/guide/theming	chromecache_125.1.dr, chromecache_132.1.dr	false	unknown
https://m2.getsitecontrol.com/images/45937/16a24fa610de8063461479d5c7326693_235751283.png	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_175.1.dr, chromecache_124.1.dr	false	high
http://polymer.github.io/AUTHORS.txt	chromecache_122.1.dr	false	high
https://www.google.com	chromecache_185.1.dr	false	high
https://www.youtube.com/iframe_api	chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_185.1.dr	false	high
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	chromecache_175.1.dr, chromecache_124.1.dr	false	high
https://mths.be/he	chromecache_161.1.dr, chromecache_190.1.dr	false	unknown
https://nimbusweb.co/contact.php	chromecache_172.1.dr	false	unknown
https://media.springernature.com/full/springer-cms/rest/v1/img/18893370/v1/height/700	chromecache_161.1.dr, chromecache_190.1.dr	false	high
https://support.google.com/recaptcha/#6175971	chromecache_175.1.dr, chromecache_124.1.dr	false	high
https://stats.g.doubleclick.net/j/collect	chromecache_156.1.dr	false	high
https://nimbusweb.me/pricing.php?ws_banner=dunningType_past_due_invoice_day14B2C	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://nimbusweb.me/pricing.php?ws_banner=dunningType_past_due_invoice_day14B2B	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://support.google.com/recaptcha	chromecache_124.1.dr	false	high
https://nimbusweb.me/screenshot/	chromecache_161.1.dr, chromecache_190.1.dr	false	high
https://nimbusweb.me/pricing.php	chromecache_172.1.dr	false	high
https://d3jlxgnskmmqem.cloudfront.net/diamond-animation/animation-blue.json	chromecache_125.1.dr, chromecache_132.1.dr	false	unknown
https://nimbusweb.me/share/	chromecache_172.1.dr	false	high
http://polymer.github.io/PATENTS.txt	chromecache_122.1.dr	false	high
https://nimbusweb.me/client/	chromecache_172.1.dr	false	high
https://angular.io/errors/NG0$	chromecache_125.1.dr, chromecache_132.1.dr	false	high
http://polymer.github.io/LICENSE.txt	chromecache_122.1.dr	false	high
https://support.nimbusweb.co/portal/en/newticket	chromecache_179.1.dr, chromecache_155.1.dr	false	unknown
https://cct.google/taggy/agent.js	chromecache_191.1.dr, chromecache_174.1.dr, chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_183.1.dr, chromecache_148.1.dr, chromecache_185.1.dr	false	high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_175.1.dr, chromecache_124.1.dr	false	high
https://teams.nimbusweb.me	chromecache_172.1.dr	false	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_124.1.dr	false	high
https://fengyuanchen.github.io/viewerjs	chromecache_157.1.dr	false	high
https://www.google.%/ads/ga-audiences	chromecache_184.1.dr, chromecache_156.1.dr	false	high
https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://m2.getsitecontrol.com/images/45937/92b6dc2dfd1666d858aca7e557de7c36_234815107.png	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://nimbusweb.me	chromecache_172.1.dr	false	high
https://nimbusweb.me/terms-and-conditions.php	chromecache_172.1.dr, chromecache_199.1.dr, chromecache_161.1.dr, chromecache_119.1.dr, chromecache_190.1.dr	false	high
https://goo.gl/wIDDiL	chromecache_125.1.dr, chromecache_132.1.dr	false	high
https://nimbusweb.me/s/share/5441210/4qccr41slk6wsw61h5fb	chromecache_190.1.dr	false	high
http://bit.ly/2sd4HMP	chromecache_125.1.dr, chromecache_132.1.dr	false	high
https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day0	chromecache_179.1.dr, chromecache_155.1.dr	false	high
http://nimb.ws/EkX87M	chromecache_190.1.dr	false	unknown
https://cloud.google.com/contact	chromecache_175.1.dr, chromecache_124.1.dr	false	high
https://nimbusweb.me/auth/openidconnect.php?provider=	chromecache_161.1.dr, chromecache_190.1.dr	false	high
https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day3	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://nimbusweb.me/s/share/5607239/l55bgak2ivs9bfptruka#b1995924032_670	chromecache_190.1.dr	false	high
https://nimbusweb.me/user-billing/edit-billinginfo?ws_banner=dunningType_past_due_invoice_day5	chromecache_179.1.dr, chromecache_155.1.dr	false	high
https://g.co/ng/security#xss)	chromecache_132.1.dr	false	high
https://text.nimbusweb.me	chromecache_172.1.dr	false	unknown
https://www.google.com/recaptcha/api2/	chromecache_171.1.dr, chromecache_175.1.dr, chromecache_166.1.dr, chromecache_124.1.dr	false	high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_122.1.dr	false	high
https://angular.io/api/core/Component#animations).	chromecache_125.1.dr, chromecache_132.1.dr	false	high
https://d3jlxgnskmmqem.cloudfront.net/diamond-animation/animation-yellow.json	chromecache_125.1.dr, chromecache_132.1.dr	false	unknown
http://hammerjs.github.io/	chromecache_138.1.dr, chromecache_163.1.dr	false	high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_175.1.dr, chromecache_124.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.160.185.95	d3hogio4d1txum.cloudfront.net	United States	16509	AMAZON-02US	false
200.63.97.50	aselog24x7.cl	Chile	265831	SOCCOMERCIALWIRENETCHILELTDACL	false
172.217.19.164	unknown	United States	15169	GOOGLEUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.181.110	analytics.google.com	United States	15169	GOOGLEUS	false
216.239.34.21	unknown	United States	15169	GOOGLEUS	false
66.102.1.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.36.21	stt.nimbusweb.me	United States	15169	GOOGLEUS	false
143.244.56.58	gscstatic2.b-cdn.net	United States	174	COGENT-174US	false
108.158.75.7	metric.nimbusweb.me	United States	16509	AMAZON-02US	false
216.137.52.31	premiumgain.nimbusweb.me	United States	8014	BATELNETBS	false
108.158.75.61	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.66.161.15	nimbusweb.me	United States	3	MIT-GATEWAYSUS	false
216.137.52.105	unknown	United States	8014	BATELNETBS	false
173.255.223.22	l1ve.twuseb.us	United States	63949	LINODE-APLinodeLLCUS	false
138.199.15.193	gscwidgets2.b-cdn.net	European Union	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
44.209.154.24	events.getsitectrl.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579124
Start date and time:	2024-12-20 21:40:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://aselog24x7.cl/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@19/134@60/19

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.162.84, 172.217.17.46, 172.217.17.67, 142.250.181.3, 216.58.208.232, 142.250.181.14, 172.217.17.35, 172.217.19.202, 172.217.19.234, 142.250.181.138, 216.58.208.234, 172.217.17.42, 142.250.181.74, 142.250.181.106, 172.217.19.10, 172.217.17.74, 172.217.19.206, 23.206.103.35, 52.149.20.212, 204.79.197.222
Excluded domains from analysis (whitelisted): clients1.google.com, fp.msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, c-ring.msedge.net, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://aselog24x7.cl/

Input	Output
URL: http://aselog24x7.cl Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://aselog24x7.cl
URL: https://premiumgain.nimbusweb.me/share/11450334/ot... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a simple timestamp assignment, which is a common practice for tracking the start of a page load or resource loading process. This behavior does not exhibit any high-risk indicators and is likely part of a legitimate analytics or performance monitoring implementation." }
window._shareStartLoad = Date.now();
URL: https://premiumgain.nimbusweb.me/share/11450334/ot... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script sends user data to a third-party domain (teams.nimbusweb.me) without clear transparency, which poses a moderate risk. However, the behavior is consistent with typical marketing/analytics functionality, so the risk is not high." }
var url="/user-marketing-info/";"teams.nimbusweb.me"===document.location.host&&(url="https://nimbusweb.me"+url);fetch(url,{credentials:"include"}).then(function(a){return a.json()}).then(function(a){a.event="userMarketingInfo";dataLayer.push(a)});
URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including redirecting the user to a potentially untrusted domain and modifying the URL with query parameters. While the intent is not entirely clear, the script's behavior raises concerns and requires further investigation." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(true){s&&s.body&&(s.body.style.display="block")}else if(false){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://bia.twuseb.us/?N4JV=9Xdg... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that require further review. While it includes some legitimate functionality like analytics and telemetry, there are also indicators of moderate risk, such as external data transmission and the use of fallback domains. The overall behavior is not clearly malicious, but the script could benefit from improved transparency and security practices." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/","urlDefaultFavicon":"https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/login.srf?N4JV=9Xdg\u0026client-request-id=dd8ae258-a329-4f0f-84a1-14c0f954c7a9\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"urlReportPageLoad":"https://bia.twuseb.us/common/instrumentation/reportpageload?mkt=en-US","dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://bia.twuseb.us/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://b4dc6a17-4db8a1b1.twuseb.us/{0}/winauth/sso?client-request-id=dd8ae258-a329-4f0f-84a1-14c0f954c7a9","iwaSsoProbeUrlFormat":"https://b4dc6a17-4db8a1b1.twuseb.us/{0}/winauth/ssoprobe?client-request-id=dd8ae258-a329-4f0f-84a1-14c0f954c7a9","iwaIFrameUrlFormat":"https://b4dc6a17-4db8a1b1.twuseb.us/{0}/winauth/iframe?client-request-id=dd8ae258-a329-4f0f-84a1-14c0f954c7a9\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://b4dc6a17-4db8a1b1.twuseb.us/common/winauth/sso/edgeredirect?client-request-id=dd8ae258-a329-4f0f-84a1-14c0f954c7a9\u0026origin=login.microsoftonline.com\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"scid":2001,"hpgact":2101,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFerr2VVko6qd-d1-0DF-FQbX6H577Y9ZKgEpwxSKYRmw0qu6vRW5rnz1Ru8oJHi2mzdWagp2TJwTH7iUF5XkZOiTuyWQO3-K3pSGZEoxTgw1hPGuzNuyD5QyjXFSP6mDr5IYPNC7DCKzhL8gExG5P_RdhkI7aT042AywNadIgURD5B0lZTpYGOLLZDnJiI6uee7vvCdnRtp9o_4Z9mNIo4GiAA","canary":"wFyoITccLGjY2ZwLWwO4tIWW9G17hhS4rKjsV5kDz/s=9:1:CANARY:xlA1EiE+L2fDterZTnZW/T+cuyzJ8+ddUBU8mldXGPU=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"dd8ae258-a329-4f0f-84a1-14c0f954c7a9","sessionId":"7341605b-f535-40a8-88a9-b7cfcc660602","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://bia.twuseb.us/common/instrumentation/reportpageload","dssostatus":"https://bia.twuseb.us/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0"},"V":"117.0"},"watson":{"url":"/common/handlers/watson","bundle":"https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js","sbundle":"https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js","fbundle":"https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js","resetErro
URL: https://bia.twuseb.us/?N4JV=9Xdg... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This JavaScript snippet exhibits several behaviors that raise moderate security concerns. It uses dynamic code execution through the `Function` constructor, which can be a high-risk indicator. Additionally, it sends data to external domains, which could potentially lead to data exfiltration. While the intent of the script is not entirely clear, the combination of these behaviors warrants further investigation and a medium-risk score." }
!function(){"use strict";var t=function(r,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,r){t.__proto__=r}\|\|function(t,r){for(var e in r)Object.prototype.hasOwnProperty.call(r,e)&&(t[e]=r[e])},t(r,e)};function r(r,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function n(){this.constructor=r}t(r,e),r.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}function e(t,r,e,n){return new(e\|\|(e=Promise))((function(o,i){function u(t){try{s(n.next(t))}catch(t){i(t)}}function c(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){var r;t.done?o(t.value):(r=t.value,r instanceof e?r:new e((function(t){t(r)}))).then(u,c)}s((n=n.apply(t,r\|\|[])).next())}))}function n(t,r){var e,n,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(c){return function(s){return function(c){if(e)throw new TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(u=0)),u;)try{if(e=1,n&&(o=2&c[0]?n.return:c[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,c[1])).done)return o;switch(n=0,o&&(c=[2&c[0],o.value]),c[0]){case 0:case 1:o=c;break;case 4:return u.label++,{value:c[1],done:!1};case 5:u.label++,n=c[1],c=[0];continue;case 7:c=u.ops.pop(),u.trys.pop();continue;default:if(!(o=u.trys,(o=o.length>0&&o[o.length-1])\|\|6!==c[0]&&2!==c[0])){u=0;continue}if(3===c[0]&&(!o\|\|c[1]>o[0]&&c[1]<o[3])){u.label=c[1];break}if(6===c[0]&&u.label<o[1]){u.label=o[1],o=c;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(c);break}o[2]&&u.ops.pop(),u.trys.pop();continue}c=r.call(t,u)}catch(t){c=[6,t],n=0}finally{e=o=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}([c,s])}}}Object.create;function o(t){var r="function"==typeof Symbol&&Symbol.iterator,e=r&&t[r],n=0;if(e)return e.call(t);if(t&&"number"==typeof t.length)return{next:function(){return t&&n>=t.length&&(t=void 0),{value:t&&t[n++],done:!t}}};throw new TypeError(r?"Object is not iterable.":"Symbol.iterator is not defined.")}function i(t,r){var e="function"==typeof Symbol&&t[Symbol.iterator];if(!e)return t;var n,o,i=e.call(t),u=[];try{for(;(void 0===r\|\|r-- >0)&&!(n=i.next()).done;)u.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(e=i.return)&&e.call(i)}finally{if(o)throw o.error}}return u}function u(t,r,e){if(e\|\|2===arguments.length)for(var n,o=0,i=r.length;o<i;o++)!n&&o in r\|\|(n\|\|(n=Array.prototype.slice.call(r,0,o)),n[o]=r[o]);return t.concat(n\|\|Array.prototype.slice.call(r))}function c(t){return this instanceof c?(this.v=t,this):new c(t)}function s(t,r,e){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var n,o=e.apply(t,r\|\|[]),i=[];return n={},u("next"),u("throw"),u("return",(function(t){return function(r){return Promise.resolve(r).then(t,l)}})),n[Symbol.asyncIterator]=function(){return this},n;function u(t,r){o[t]&&(n[t]=function(r){return new Promise((function(e,n){i.push([t,r,e,n])>1\|\|s(t,r)}))},r&&(n[t]=r(n[t])))}function s(t,r){try{(e=o[t](r)).value instanceof c?Promise.resolve(e.value.v).then(a,l):f(i[0][2],e)}catch(t){f(i[0][3],t)}var e}function a(t){s("next",t)}function l(t){s("throw",t)}function f(t,r){t(r),i.shift(),i.length&&s(i[0][0],i[0][1])}}function a(t){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var r,e=t[Symbol.asyncIterator];return e?e.call(t):(t=o(t),r={},n("next"),n("throw"),n("return"),r[Symbol.asyncIterator]=function(){return this},r);function n(e){r[e]=t[e]&&function(r){return new Promise((function(n,o){(function(t,r,e,n){Promise.resolve(n).then((function(r){t({value:r,done:e})}),r)})(n,o,(r=t[e](r)).done,r.value)}))}}}Object.create;"function"==typeof SuppressedError&&SuppressedError;function l(t){return"function"==typeof t}var f,h=((f=function(t){return function(r){t(this),this.message=r?r.length+" errors oc
URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a web page loading and debugging utility. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script is primarily focused on handling document ready and load events, as well as providing a simple logging mechanism through the `$Debug` object. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script seems to be a benign utility with no clear signs of malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("
URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission to third-party domains, the use of fallback domains, and aggressive DOM manipulation. While the script appears to have a legitimate purpose related to authentication and user management, the lack of transparency around the data being sent and the use of multiple domains, some of which may be untrusted, warrant further investigation. The overall risk score is in the medium range, indicating the need for closer scrutiny and potential mitigation measures." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://l1ve.twuseb.us/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fbia.twuseb.us%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR6gvfEL3H_6N5zxezqrGPFd2YxcsbnZJaBVa5iVCZsnP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhrzb6L4i2HBH23ax-Znf9Bl-EUq365W2W-Z0hyso97VqRRVLlPeLm_SYlneLilu6F5RkawSZF3VnGYabZLlX6xrYWV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvkddv7peLzvxzuMVv06AR0mlp7dBbniUW16WT1heqJdXvkVpoUeis3a-e1iigVduWLBrbmBSnnm67QYBhgcCDAA1\u0026estsfed=1\u0026uaid=5fbc538c47a447f18cd436d59ac673dc\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026fci=https%3a%2f%2fc389b748-4db8a1b1.twuseb.us","urlMsaLogout":"https://l1ve.twuseb.us/logout.srf?iframed_by=https%3a%2f%2fbia.twuseb.us","urlOtherIdpForget":"https://l1ve.twuseb.us/forgetme.srf?iframed_by=https%3a%2f%2fbia.twuseb.us","showCantAccessAccountLink":true,"urlGitHubFed":"https://l1ve.twuseb.us/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fbia.twuseb.us%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR6gvfEL3H_6N5zxezqrGPFd2YxcsbnZJaBVa5iVCZsnP4FRsYXjIy3mAT9i9I9U8KL3VJTUosSSzLz8y6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFWhrzb6L4i2HBH23ax-Znf9Bl-EUq365W2W-Z0hyso97VqRRVLlPeLm_SYlneLilu6F5RkawSZF3VnGYabZLlX6xrYWV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvkddv7peLzvxzuMVv06AR0mlp7dBbniUW16WT1heqJdXvkVpoUeis3a-e1iigVduWLBrbmBSnnm67QYBhgcCDAA1\u0026estsfed=1\u0026uaid=5fbc538c47a447f18cd436d59ac673dc\u0026fci=https%3a%2f%2fc389b748-4db8a1b1.twuseb.us\u0026idp_hint=github.twuseb.us","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!!DJ~Djibouti~253!!!DM~Dominica~1!!!DO~Dominican Republic~1!!!EC~Ecuador~593!!!EG~Egypt~20!!!SV~El Salvador~503!!!GQ~Equatorial Guinea~240!!!ER~Eritrea~291!!!EE~Estonia~372!!!ET~Ethiopia~251!!!FK~Falkland Islands~500!!!FO~Faroe Islands~298!!!FJ~Fiji~679!!!FI~Finland~358!!!FR~France~33!!!GF~French Guiana~594!!!PF~French Polynesia~689!!!GA~Gabon~241!!!GM~Gambia~220!!!GE~Georgia~995!!!DE~Germany~49!!!GH~Ghana~233!!!GI~Gibraltar~350!!!GR~Greece~30!!!GL~Greenland~299!!!GD~Grenada~1!!!GP~Guadeloupe~590!!!GU~Guam~1!!!GT~Guatemala~502!!!GG~Guernsey~44!!!GN~Guinea~224!!!GW~Guinea-Bissau~245!!!GY~Guyana~592!!!HT~Haiti~509!!!HN~Honduras~504!!!HK~Hong Kong SAR~852!!!HU~Hungary~36!!!IS~Icelan
URL: https://premiumgain.nimbusweb.me/share/dist/hammer... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be the Hammer.js library, which is a popular open-source JavaScript library for handling touch and gesture events. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is well-structured and does not exhibit any suspicious behavior. It is likely a legitimate and widely-used library for web development purposes." }
/! Hammer.JS - v2.0.7 - 2016-04-22 http://hammerjs.github.io/ * * Copyright (c) 2016 Jorik Tangelder; * Licensed under the MIT license / !function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(b,c,d){var e="DEPRECATED METHOD: "+c+"\n"+d+" AT \n";return function(){var c=new Error("get-stack-trace"),d=c&&c.stack?c.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s\(/gm,"{anonymous}()@"):"Unknown Stack Trace",f=a.console&&(a.console.warn\|\|a.console.log);return f&&f.call(a.console,e,d),b.apply(this,arguments)}}function i(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&la(d,c)}function j(a,b){return function(){return a.apply(b,arguments)}}function k(a,b){return typeof a==oa?a.apply(b?b[0]\|\|d:d,b):a}function l(a,b){return a===d?b:a}function m(a,b,c){g(q(b),function(b){a.addEventListener(b,c,!1)})}function n(a,b,c){g(q(b),function(b){a.removeEventListener(b,c,!1)})}function o(a,b){for(;a;){if(a==b)return!0;a=a.parentNode}return!1}function p(a,b){return a.indexOf(b)>-1}function q(a){return a.trim().split(/\s+/g)}function r(a,b,c){if(a.indexOf&&!c)return a.indexOf(b);for(var d=0;d<a.length;){if(c&&a[d][c]==b\|\|!c&&a[d]===b)return d;d++}return-1}function s(a){return Array.prototype.slice.call(a,0)}function t(a,b,c){for(var d=[],e=[],f=0;f<a.length;){var g=b?a[f][b]:a[f];r(e,g)<0&&d.push(a[f]),e[f]=g,f++}return c&&(d=b?d.sort(function(a,c){return a[b]>c[b]}):d.sort()),d}function u(a,b){for(var c,e,f=b[0].toUpperCase()+b.slice(1),g=0;g<ma.length;){if(c=ma[g],e=c?c+f:b,e in a)return e;g++}return d}function v(){return ua++}function w(b){var c=b.ownerDocument\|\|b;return c.defaultView\|\|c.parentWindow\|\|a}function x(a,b){var c=this;this.manager=a,this.callback=b,this.element=a.element,this.target=a.options.inputTarget,this.domHandler=function(b){k(a.options.enable,[a])&&c.handler(b)},this.init()}function y(a){var b,c=a.options.inputClass;return new(b=c?c:xa?M:ya?P:wa?R:L)(a,z)}function z(a,b,c){var d=c.pointers.length,e=c.changedPointers.length,f=b&Ea&&d-e===0,g=b&(Ga\|Ha)&&d-e===0;c.isFirst=!!f,c.isFinal=!!g,f&&(a.session={}),c.eventType=b,A(a,c),a.emit("hammer.input",c),a.recognize(c),a.session.prevInput=c}function A(a,b){var c=a.session,d=b.pointers,e=d.length;c.firstInput\|\|(c.firstInput=D(b)),e>1&&!c.firstMultiple?c.firstMultiple=D(b):1===e&&(c.firstMultiple=!1);var f=c.firstInput,g=c.firstMultiple,h=g?g.center:f.center,i=b.center=E(d);b.timeStamp=ra(),b.deltaTime=b.timeStamp-f.timeStamp,b.angle=I(h,i),b.distance=H(h,i),B(c,b),b.offsetDirection=G(b.deltaX,b.deltaY);var j=F(b.deltaTime,b.deltaX,b.deltaY);b.overallVelocityX=j.x,b.overallVelocityY=j.y,b.overallVelocity=qa(j.x)>qa(j.y)?j.x:j.y,b.scale=g?K(g.pointers,d):1,b.rotation=g?J(g.pointers,d):0,b.maxPointers=c.prevInput?b.pointers.length>c.prevInput.maxPointers?b.pointers.length:c.prevInput.maxPointers:b.pointers.length,C(c,b);var k=a.element;o(b.srcEvent.target,k)&&(k=b.srcEvent.target),b.target=k}function B(a,b){var c=b.center,d=a.offsetDelta\|\|{},e=a.prevDelta\|\|{},f=a.prevInput\|\|{};b.eventType!==Ea&&f.eventType!==Ga\|\|(e=a.prevDelta={x:f.deltaX\|\|0,y:f.deltaY\|\|0},d=a.offsetDelta={x:c.x,y:c.y}),b.deltaX=e.x+(c.x-d.x),b.deltaY=e.y+(c.y-d.y)}function C(a,b){var c,e,f,g,h=a.lastInterval\|\|b,i=b.timeStamp-h.timeStamp;if(b.eventType!=Ha&&(i>Da\|\|h.velocity===d)){var j=b.deltaX-h.deltaX,k=b.deltaY-h.deltaY,l=F(i,j,k);e=l.x,f=l.y,c=qa(l.x)>qa(l.y)?l.x:l.y,g=G(j,k),a.lastInterval=b}else c=h.velocity,e=h.velocityX,f=h.velocityY,g=h.direction;b.velocity=c,b.velocityX=e,b.velocityY=f,b.direction=g}function D(a){for(var b=[],c=0;c<a.pointers.length;)b[c]={clientX:pa(a.pointers[c].clientX),clientY:pa(a.pointers[c].clientY)},c++;return{timeStamp:ra(),poin
URL: https://d3hogio4d1txum.cloudfront.net/tasks-bundle... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a part of a larger application that includes analytics tracking functionality. While there are no clear indicators of malicious intent, the script exhibits some moderate-risk behaviors that warrant further review. The use of the `gtag` and `gtm` APIs to track user interactions and send data to external domains is a common practice, but the lack of transparency around the specific data being transmitted and the reputation of the destination domains raises some concerns. Additionally, the aggressive DOM manipulation and the potential for fallback domains introduce additional risks. Overall, this script requires closer inspection to ensure that the analytics implementation aligns with best practices and does not inadvertently expose sensitive user information." }
/! For license information please see tasks-bundle.js.LICENSE.txt / (()=>{var __webpack_modules__={7924:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n),Object.defineProperty(e,i,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,i){void 0===i&&(i=n),e[i]=t[n]}),r=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|i(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),r(n(652),t),r(n(2975),t),r(n(9640),t),r(n(9154),t)},2212:(e,t)=>{"use strict";var n;Object.defineProperty(t,"__esModule",{value:!0}),t.AiAnalyticsCategory=t.AI_ANALYTICS_ACTION=void 0,(n=t.AI_ANALYTICS_ACTION\|\|(t.AI_ANALYTICS_ACTION={})).AiFeedbackLike="ai_feedback_like",n.AiFeedbackDislike="ai_feedback_dislike",t.AiAnalyticsCategory="ai"},2975:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Analytics=t.createAnalytics=t.trackEvent=t.setupGtag=t.setupGTM=t.insertGTM=t.insertGtag=t.ANALYTICS_SOURCE=void 0;const i=n(2212),r=n(9461),s=n(4875),a=n(9154),o=n(4837),l=n(471),c=n(9640),d=n(4201);var u;(u=t.ANALYTICS_SOURCE\|\|(t.ANALYTICS_SOURCE={})).CLICK="event_source_click",u.KEY="event_source_key",u.MENU="event_source_menu",u.DRAG="event_source_drag",t.insertGtag=e=>{const t=document.createElement("script");t.src=`https://stt.nimbusweb.me/gtag/js?id=${e}`,t.async=!0,p(t),(0,window.gtag)("js",new Date)},t.insertGTM=e=>{const t=document.createElement("script");t.src=`https://stt.nimbusweb.me/gtlytics.js?id=${e}`,t.async=!0,p(t)},t.setupGTM=()=>{(0,window.gtag)({"gtm.start":(new Date).getTime(),event:"gtm.js"})},t.setupGtag=e=>{const t=window.gtag,{resourceId:n,userId:i,transportUrl:r}=e,s={custom_map:{dimension1:`${i}`},send_page_view:!1,user_id:`${i}`,transport_type:"beacon"};r&&(s.transport_url=r),t("config",n,s)},t.trackEvent=(e,t,n,i)=>{const r=window.gtag;if(r){let s={event_category:t,event_label:n};"object"==typeof i?s=Object.assign(Object.assign({},s),i):void 0!==i&&(s.value=i),r("event",e,s)}else console.warn("No gtag found on the page, event will not be tracked",e,t,n,i)};const p=e=>{const t=document.getElementsByTagName("script")[0];t&&t.parentNode&&t.parentNode.insertBefore(e,t)};t.createAnalytics=function(){return new h};class h{constructor(){}trackTasksOpenDetailedView(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskDetailedOpen,c.TasksAnalyticsCategory,e)}trackTasksCloseDetailedView(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskDetailedClose,c.TasksAnalyticsCategory,e,t)}trackTasksDescriptionAdd(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskDescriptionAdd,c.TasksAnalyticsCategory,e,t)}trackTasksDescriptionChange(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskDescriptionChange,c.TasksAnalyticsCategory,e,t)}trackTasksDescriptionRemove(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskDescriptionRemove,c.TasksAnalyticsCategory,e)}trackTasksCommentAdd(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskCommentAdd,c.TasksAnalyticsCategory,e)}trackTasksDetailedSwitch(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskDetailedSwitch,c.TasksAnalyticsCategory,e)}trackTasksConvertToTaskList(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskConvertToList,c.TasksAnalyticsCategory,e)}trackTasksStatusComplete(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskStatusComplete,c.TasksAnalyticsCategory,e)}trackTasksStatusUncomplete(e){this.event(c.TASKS_ANALYTICS_ACTION.TaskStatusUncomplete,c.TasksAnalyticsCategory,e)}trackTasksLabelCreate(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskLabelCreate,c.TasksAnalyticsCategory,e,t)}trackTasksLabelAdd(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskLabelAdd,c.TasksAnalyticsCategory,e,t)}trackTasksLabelRemove(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskLabelRemove,c.TasksAnalyticsCategory,e,t)}trackTasksAssigneeAdd(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskAssigneeAdd,c.TasksAnalyticsCategory,e,t)}trackTasksAssigneeRemove(e,t){this.event(c.TASKS_ANALYTICS_ACTION.TaskAssigneeRemove,c.TasksAnalyticsCategory,e,t)}trackTas
URL: https://bia.twuseb.us/?N4JV=9Xdg... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script contains legacy practices such as using outdated event handling methods like attachEvent and detachEvent, which are considered low-risk indicators. There is no evidence of dynamic code execution, data exfiltration, or interaction with suspicious domains. The script appears to be focused on DOM event handling and logging, which aligns with typical non-malicious behavior." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "tes" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "test" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 19:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.982994349910851
Encrypted:	false
SSDEEP:	48:84dMcTsADqH2idAKZdA1FehwiZUklqehvty+3:8AzfGy
MD5:	14C97AD7C83E1A27E15C99B72012462F
SHA1:	F0FD7E7D3C599095D077220E87255D112BFC385D
SHA-256:	90A0A66CB76ACCED793A21F88EDB3F86499481F79F56D9F159C29932A33DA2FC
SHA-512:	7DECDCF92011C255F288CE5150C5377E49C31E7F3256A85EEC0051DE21E959CCD3410EF3CA6B51F95DA28E6E42AF548A39351D1B072BFF0A6E09DFD869877156
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....KCo.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............m.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 19:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9973993625019775
Encrypted:	false
SSDEEP:	48:8rKdMcTsADqH2idAKZdA1seh/iZUkAQkqehwty+2:8rizp9Qby
MD5:	E7154D207831B856C665F82E45D7CDA1
SHA1:	FBF828E84289802D7612B97BB0229F711E6865C5
SHA-256:	6CF9954BB755DFCF43086CBB982800F4C8064692C176156D6ABCB4FB299E867C
SHA-512:	A565344CCE4BFC91B123109814671740689EE0676A683E0E92E4CC47378D618BBFFB4101D426D8F4CB70C50A363B79AD4D499BA190940B6F4F9E6939F3A15B14
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......8o.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............m.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.011005527639523
Encrypted:	false
SSDEEP:	48:82dMcTsADAH2idAKZdA14meh7sFiZUkmgqeh7s6ty+BX:82znnqy
MD5:	E4F3DE76CB0422788A1DFAD69C92C388
SHA1:	50D736016986D827B430211D165A8D418DF3D518
SHA-256:	0C8846DC66115EA52D8BCD698BF91232AE2F6BABFA3ABEDA394A718E12208D9B
SHA-512:	3FF770B7121C43D15552CFB107B67488272D2AEC2BE573ACC9F81B5D053543B2BDCF492F551002E9C7814CFF4A96D91381BA0E3AC725BE71D74BF5ADCE2CD2CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............m.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 19:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9975039253421496
Encrypted:	false
SSDEEP:	48:8UdMcTsADqH2idAKZdA1TehDiZUkwqeh8ty+R:8Ez68y
MD5:	668E22D9FF7325CC1614A15A306B16F3
SHA1:	8D5D1E541BD1FE636469E89F9369E78B51A8A3A2
SHA-256:	D65F1EBDF96A8D3E3DFCA392525B26E4A83C4E19678B4E86BF2A6C7E188C5016
SHA-512:	74B48A042F2ED454505AF4BF506DAE13457DE5EE564636EF091B071E866D53C977A8DE052BBDB728D89B263B5F69424AB009D46C9C5F203D36F941E0C9CA75BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....$.1o.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............m.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 19:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.986487504605315
Encrypted:	false
SSDEEP:	48:8pdMcTsADqH2idAKZdA1dehBiZUk1W1qeh+ty+C:8Xza94y
MD5:	90E3A1264DDCD62F2C67DD2078FAA5DF
SHA1:	AFA4DBB68B39DE75EA617C7F5C2846F07E5B25A8
SHA-256:	B7FD7E8746B5FB52CE8AB58C098C5D42C623A8948A65410A712B36BD741CB2EE
SHA-512:	991D0CF4978A8DDA7DEECC983D6C0F81C7C27D2E9BD528954633543B8B8708ED27E49DAD686293A1E8BE56FCA4CC2C2B576C8A36E002C8425A82460456DB496A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......=o.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............m.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 19:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9971283723486315
Encrypted:	false
SSDEEP:	48:8PBdMcTsADqH2idAKZdA1duTeehOuTbbiZUk5OjqehOuTbUty+yT+:8PPzwTfTbxWOvTbqy7T
MD5:	2F7C41670C28A276F29B3114ACC1C617
SHA1:	4A3464F07582874FD4D27E40D48DCD673429D4E9
SHA-256:	DC4C4900F4CE880E43351619295CE61E294000B1E3D14101C79E6620C2139F95
SHA-512:	825606C79C5830E32DEFB712D4320719F77C2FFC6EFE9BE34D7E208406E0641ACEEDB7B171D709FF57AB46940802E9B0F8AD426CA9A5725D31153DBCC0D94D42
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......'o.S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............m.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407050
Category:	downloaded
Size (bytes):	116388
Entropy (8bit):	7.99746076695011
Encrypted:	true
SSDEEP:	3072:E8RyYb05PFwWZvL7R6Xd1YfOSdY5v0JDFQG8eFU6BcuoU:Py00XwWZvL9ajYWSofgRBcub
MD5:	D184AD57332C1C182841018768FDC616
SHA1:	04BB1C465637C19EABB4FB7AE520A0907C3CD236
SHA-256:	B3CB249B77911E1389E48388CA8345E232BB691E6C8986723D5D2D446BFAF7AC
SHA-512:	C82D8E6305C163D019882522DCA257A3D2F63242916B1739AED32B5D29CAF416CB3AF44045E612141EFEC40218EB35399B5E5D46EC52D3FF57661782C05FC3E5
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js
Preview:	...........k[.H.(.}..[..-..c.c....0......!L.a...#yt......k...J..&...........^.~...._..j...W;;?8=.........m...~.}<>?zs.~=.(.;..qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...X-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..m..7.%^M.d.;...~2I.Z.]..V.o...z..0..7..h.g..7....b..Iz.....o<?P-..kpTX.........N....o....C.._...`O..7..W...[.l>...Z.4....... ...s{.....,.y1N.!..L.g..x.E.....B.._.~....g.b)..m{.b.\mY-...].u.D.....7.o4u'.5?......8....'.......I..Z..K<6...T}P..'.O.(.-..f..V<....$z...}.l..K~.."......I..j.ifuE,....c.E.<..M...T%....f..[o..N2...S...:l..w..y.....i.l...X..=~..........frk..?M#^Q.z.{...M.f......"S....s..d.e91._,.O.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M...'.X.n/..mW.\|..........w../...>\...l.K8<..j.%r2.....j...m

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5844)
Category:	downloaded
Size (bytes):	555075
Entropy (8bit):	4.918327839517979
Encrypted:	false
SSDEEP:	1536:1VkNafLE9RkKKpljt9uvmhRvubmDM6WKScjLBdPKxdHvnLtnaEoOFoceSMCK4m8c:cNR9RkKKpljt9uHxlLNY
MD5:	40E18F7BB11B8DB06FC0638314B08E93
SHA1:	4F20AAF99447628CC4681932ECFBB8A25023CBFB
SHA-256:	884D03FED760723D780AD868D3344B83528415E6F4AF3ABC5DD18A3FDA6D4FF9
SHA-512:	79F1EAF09820265EEF0B5FAD76B48B3122CCF47F501FFC0BC6D790055FC098D8ED5555CDC07A28A70FE19B8C5355D2C3D008BBAF03B107DF64C89E30235C50D9
Malicious:	false
Reputation:	low
URL:	https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.css
Preview:	.nim-chat-wrapper {. display: block;. width: 380px;. overflow: hidden;. border-radius: 4px;. box-shadow: 0px 2px 4px -1px rgba(0, 0, 0, 0.2), 0px 4px 5px 0px rgba(0, 0, 0, 0.14), 0px 1px 10px 0px rgba(0, 0, 0, 0.12);.}...nim-chat-loader-overlay {. position: absolute;. padding: 20px;. width: 100%;. height: 100%;. z-index: 100;. opacity: 1;. transform: scale(1);. transition: opacity 0.2s, transform 0.2s;.}..nim-chat-loader-overlay.m-invisible {. position: absolute;. opacity: 0;. transform: scale(0);.}...debug {. border: 1px solid red;. position: absolute;. left: 0px;. top: 0px;.}...m-calendar-menu {. max-width: 320px !important;.}...vjs-modal-dialog .vjs-modal-dialog-content, .video-js .vjs-modal-dialog, .vjs-button > .vjs-icon-placeholder:before, .video-js .vjs-big-play-button .vjs-icon-placeholder:before {. position: absolute;. top: 0;. left: 0;. width: 100%;. height: 100%;.}...vjs-button > .vjs-icon-placeholder:before, .video-js .vjs-big-play-button .vjs-icon

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	668
Entropy (8bit):	4.968793420154584
Encrypted:	false
SSDEEP:	12:YC9KY/39qdnafKdJn6HwJlA1gCgmLeBZvbIvSwEwGoX23Dx3GEra2HR:YC0o3mafSDHgivbVjwXGTEErz
MD5:	F1AAD3854C9944CE1FE05CF112A5FF1E
SHA1:	4A91A78E279AEBBFAE8E20C4AE0EEB05FB1BCB42
SHA-256:	4C14D6054E122286D8F34AA993AB43591046600472CB5E48A13166FFF3D37418
SHA-512:	1F01F6DF9CDD4B965EC8A1030BAF08EAA387B1D620E50A686FE12ABB11A73FF2918464E5627985017D06CDFA7B850E0CED820C3440FF421D5ABC4E3CED1FA8C2
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/share-api/org
Preview:	{"globalId":"u23zxp","userId":3545773,"createdAt":1729700398,"updatedAt":1729700825,"title":"Premiumgain","sub":"premiumgain","suspended":false,"suspendedReason":"initial","suspendedAt":null,"domain":null,"domainShorter":true,"description":null,"peopleToCollaborate":null,"maxMembers":3,"pricingModel":"en","type":"notes","smallLogoStoredFileUUID":null,"bigLogoStoredFileUUID":null,"isOtherDescription":false,"authFormText":"Never forget anything important!","authFormPrivacyLinkEnabled":true,"authAllowRegistration":true,"privacyLinkText":"Terms & Privacy","privacyLinkUrl":"https://nimbusweb.me/terms-and-conditions.php","orgType":"business","isShareAdEnabled":true}

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (999)
Category:	downloaded
Size (bytes):	102695
Entropy (8bit):	5.416907137629318
Encrypted:	false
SSDEEP:	1536:I9/PQqtNLLWYpd4RJwSSJO4JJBR+kVGus0UpcTd0n4kQ6mBwD9TblZn:I9n7tVJd48SulecTdEr
MD5:	893102E1869ADC5BCE0A94FEB6F74249
SHA1:	AA12E4ED5006F270AB072E00D749A2D0CC392198
SHA-256:	E233A0FFB3016B204EDB0BBB841952FEB31A194AD53CD473C76003391F24BFD3
SHA-512:	074A94A3AC29A9343DC71CC028E7BFE7E71EFDE29E825C922ABD66AEB9257710B309AD77529511241FA4B5C9206EA8187A08A73DBE3CDC045E7D53BC72BB2A9B
Malicious:	false
Reputation:	low
URL:	https://nimbusweb.me/share/dist/vendor/webcomponents-bundle.js?v=9.26.11
Preview:	/*.@license @nocompile.Copyright (c) 2018 The Polymer Project Authors. All rights reserved..This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt.The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt.The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt.Code distributed by Google as part of the polymer project is also.subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt./.(function(){/*.. Copyright (c) 2016 The Polymer Project Authors. All rights reserved.. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. Code distributed by Google as part of the polymer project is also. subject to an additional IP rights grant found a

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.9805705000682945
Encrypted:	false
SSDEEP:	384:BRvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:Bpmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	69F909D3BA8C6B993DD001B8B9F54F55
SHA1:	F9EAAAA6BC33CE60A2DA8E9FF0F3408CC21CC9EA
SHA-256:	5DEB7C0DFBFFCA6439CADD009CD4F57AF7C3E8B6AD9B1467DB95A1B0DC262B0C
SHA-512:	F6BF4430A5156EA007DE793074AF2C2D2B5410AB04BF96FDC310FC3C66B3E9C0A759B5FC44E55B86811D5F6D07C382A5B6E648899617EE107DB31CF8A9F4C269
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64960)
Category:	downloaded
Size (bytes):	4999359
Entropy (8bit):	5.675573217830655
Encrypted:	false
SSDEEP:	49152:l6zhY5NIs0jpqXplN7dok4gKuGVIiQX0TrO6ywLMVD3mr5xOPHxv9i4q92Y+S6Q+:Qz7rC
MD5:	6E7A6D936DE4FE50CF1C96953682CD89
SHA1:	928D4727003B9876437D793A1F6855AF34ED5B1B
SHA-256:	6DE51819A411C1B183FBC5A867B1BEDD32E9B1814D8ECD0E7AAFD414474F014B
SHA-512:	1C5CD013C83664355494507EA027BE15D6BA189F9D4759942080B351C2427BD7DD5B03BE0C920E0E2231B77A5304A1C650F668D06A36657B1A2F08DA03C923BF
Malicious:	false
Reputation:	low
URL:	https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.js
Preview:	/! For license information please see tasks-bundle.js.LICENSE.txt /.(()=>{var __webpack_modules__={7924:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n),Object.defineProperty(e,i,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,i){void 0===i&&(i=n),e[i]=t[n]}),r=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|i(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),r(n(652),t),r(n(2975),t),r(n(9640),t),r(n(9154),t)},2212:(e,t)=>{"use strict";var n;Object.defineProperty(t,"__esModule",{value:!0}),t.AiAnalyticsCategory=t.AI_ANALYTICS_ACTION=void 0,(n=t.AI_ANALYTICS_ACTION\|\|(t.AI_ANALYTICS_ACTION={})).AiFeedbackLike="ai_feedback_like",n.AiFeedbackDislike="ai_feedback_dislike",t.AiAnalyticsCategory="ai"},2975:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Analytics=t.createAnalytics=t.trackEvent=t.setupGtag=t.setupGTM=t.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113795
Category:	dropped
Size (bytes):	35194
Entropy (8bit):	7.993505114309871
Encrypted:	true
SSDEEP:	768:GRv2Jy/qEj3ZrMzxkPJI1hvvs6rEtXJBrXFTZQnsYsbMCAY5VIsRVc5:h0lSYI1hvvorXFQvsbMCHr77c5
MD5:	FB49A5261BE1810A52DED01D981579C5
SHA1:	EF85933B6BA90810173F6445C6B791E70AAF475F
SHA-256:	6F390B9E714F9CC08E126EB82116A2EC6F503901C4ACBB56E42464878441A5CC
SHA-512:	B5B06D09467491D49A9DCBBD47566BE73B42F70481993883E488993C9985B37A983A72A136FA87F6B89239E6163788C2607AE53CC95CE9C497D176307BAE7BB2
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p..Y..pk.o...$.r.@x.C.m.....7...k........X;MgA<.=..s....z......c..*y....t.."..?..x>...... ....i1X...?....\|Z?;..^._Z....x9.q\../...R...E..E. .i....Y...kz.>.y..u.....N..U.=.O.W...1..x~...0.~H.Z;..._m......../..iz.t.6...2)j......,..4...Y:...%.:..x..k.z.../....@.D.r?......GP....`..o.'..~1.....&.HJ.`.@.}mV../8.b.m..guo.H_.7Qv.r...dQ.....-.QE......G:.U'...r.~.1.....H.k...O..dk.d.\|.7..x\/..i^.Y..Q_/.`..i.&...-.......P...yEv....,....'.^...X.......YK.".....l.r.ax.....<...1!..4GQ.M_.....L..F..51.!.....]....y...(...=O5?

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407050
Category:	dropped
Size (bytes):	116388
Entropy (8bit):	7.99746076695011
Encrypted:	true
SSDEEP:	3072:E8RyYb05PFwWZvL7R6Xd1YfOSdY5v0JDFQG8eFU6BcuoU:Py00XwWZvL9ajYWSofgRBcub
MD5:	D184AD57332C1C182841018768FDC616
SHA1:	04BB1C465637C19EABB4FB7AE520A0907C3CD236
SHA-256:	B3CB249B77911E1389E48388CA8345E232BB691E6C8986723D5D2D446BFAF7AC
SHA-512:	C82D8E6305C163D019882522DCA257A3D2F63242916B1739AED32B5D29CAF416CB3AF44045E612141EFEC40218EB35399B5E5D46EC52D3FF57661782C05FC3E5
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.c....0......!L.a...#yt......k...J..&...........^.~...._..j...W;;?8=.........m...~.}<>?zs.~=.(.;..qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...X-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..m..7.%^M.d.;...~2I.Z.]..V.o...z..0..7..h.g..7....b..Iz.....o<?P-..kpTX.........N....o....C.._...`O..7..W...[.l>...Z.4....... ...s{.....,.y1N.!..L.g..x.E.....B.._.~....g.b)..m{.b.\mY-...].u.D.....7.o4u'.5?......8....'.......I..Z..K<6...T}P..'.O.(.-..f..V<....$z...}.l..K~.."......I..j.ifuE,....c.E.<..M...T%....f..[o..N2...S...:l..w..y.....i.l...X..=~..........frk..?M#^Q.z.{...M.f......"S....s..d.e91._,.O.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M...'.X.n/..mW.\|..........w../...>\...l.K8<..j.%r2.....j...m

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 246368, version 1.4
Category:	downloaded
Size (bytes):	246368
Entropy (8bit):	7.994649771644958
Encrypted:	true
SSDEEP:	6144:4vq45Dlcq9zii0r6bFDbJzFn9dG3oCmBGYoik:4COy5i0Oxb5Fe4XGzL
MD5:	12365DEE78645AC21EAEC216A048746C
SHA1:	FCA809D23C8BA60E80F3ED1F7CE6A243897B494A
SHA-256:	F08E51B27293D93D7770FA7AA4DF43908782AE51334C64649D2C8B72C35E8FC2
SHA-512:	351AF686263D8697B3B7AB97DB04F8BF27E25BAE2D0FE322694A5EE16F62BC4643BFA4606C142FDEAE4694B9FAD98167CD9BF40713A7A4A59C008E5FD02CBAE3
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/f/12365dee78645ac21eaec216a048746c.woff
Preview:	wOFF.......`.......4........................FFTM...D........rz..GDEF.......)........GPOS..JH..w.../2..g.GSUB......,.......+"OS/2.......`...`w.vcmap...............cvt ..%.............fpgm............6...gasp...............#glyf..D.........h..~head.......3...6.H.+hhea.......!...$.R.9hmtx...l......0.N.2Aloca..&.......0..7.tmaxp....... ... ...;name......W....0Z.2post......8.....G.t.prep..$ ........f...x.c`d```...<Q#...+.<...............5.#...I.u..Z..q.x.c`d`.......k.o..&1.E................. .R.T...........\.....K.................3.......3.....f..................@.x....!....MONO.@.............X ........J..... ..x...l..y...X..<W.QF....R..e.b.".!.!.G. ....c.........0..1.....!f<.</ch...a.0.QB.I3..Z.b.1b.........?.+}...y....y.s../..._"....~.....`.......&/.Wd.._~.#..?.....I.]..n..qK%.z...1...I`.h./....kr.\|M....;.J..L..../(...%..7.2./......R.VD...WJ_j..%`.l./Yz.ok...%.e...ER.2....5gd.{Y.....O{K.!....o....tz... .&..).f.oI.[$..h._c.;S-..~\.S.yKi? M.2.o..".p...'....N.2

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91217
Entropy (8bit):	5.296834286252904
Encrypted:	false
SSDEEP:	1536:heEUBR8R+r7whEjcDe3NkW8pPna6gIsTjIPYgKtt0cYytjUGa7T5M/I:hvVoEENYP6/IPIjG7lMg
MD5:	3AF14409140A188D90E8ABFE3FA2A40A
SHA1:	5C4A242BE0777A189A49F57554C97257B8941E84
SHA-256:	295F29439726C35DF996F7FDFB173F1F979E39005B46D8A6CB091B98BAFA231C
SHA-512:	26C24279EDE06BAA9C0B4A94B2C67C6A7DFB633E1B5D93C62BE54156D6FEBBE2E9A800DB766FA7249351F3181975BECEE8F0590C225365965E71CD60737AE820
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/static/assets/a6794726fa7eda006545.vendors.fs_web.js
Preview:	(self.webpackChunkweb_editor=self.webpackChunkweb_editor\|\|[]).push([[997],{54519:(e,t,n)=>{"use strict";n.r(t),n.d(t,{fsjs:()=>i,ebmljs:()=>a});var i=n(94036),a=n(64028)},18595:(e,t,n)=>{var i=n(22357);e.exports=function(e){var t={},n=new i(e);t.trackNumber=n.nextUIntV(),t.timecode=n.nextInt16BE();var a=n.nextUInt8();t.invisible=!!(8&a),t.keyframe=!!(128&a),t.discardable=!!(1&a);var r=(6&a)>>1;return t.frames=function(e,t){if(!t)return[e.nextBuffer()];var n,i,a=[],r=e.nextUInt8()+1;if(2===t){if(e.length%r!=0)throw new Error("Fixed-Size Lacing Error");for(i=e.length/r,n=0;n<r;n++)a.push(e.nextBuffer(i));return a}var o=[];if(1===t)for(n=0;n<r-1;n++){var s;i=0;do{i+=s=e.nextUInt8()}while(255===s);o.push(i)}else if(3===t)for(i=e.nextUIntV(),o.push(i),n=1;n<r-1;n++)i+=e.nextIntV(),o.push(i);for(n=0;n<r-1;n++)a.push(e.nextBuffer(o[n]));return a.push(e.nextBuffer()),a}(n,r),t}},22357:(e,t,n)=>{n(47042);var i=n(50088);function a(e){this.buffer=e,this.offset=0}a.prototype.nextInt16BE=function()

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64960)
Category:	dropped
Size (bytes):	4999359
Entropy (8bit):	5.675573217830655
Encrypted:	false
SSDEEP:	49152:l6zhY5NIs0jpqXplN7dok4gKuGVIiQX0TrO6ywLMVD3mr5xOPHxv9i4q92Y+S6Q+:Qz7rC
MD5:	6E7A6D936DE4FE50CF1C96953682CD89
SHA1:	928D4727003B9876437D793A1F6855AF34ED5B1B
SHA-256:	6DE51819A411C1B183FBC5A867B1BEDD32E9B1814D8ECD0E7AAFD414474F014B
SHA-512:	1C5CD013C83664355494507EA027BE15D6BA189F9D4759942080B351C2427BD7DD5B03BE0C920E0E2231B77A5304A1C650F668D06A36657B1A2F08DA03C923BF
Malicious:	false
Reputation:	low
Preview:	/! For license information please see tasks-bundle.js.LICENSE.txt /.(()=>{var __webpack_modules__={7924:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n),Object.defineProperty(e,i,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,i){void 0===i&&(i=n),e[i]=t[n]}),r=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|i(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),r(n(652),t),r(n(2975),t),r(n(9640),t),r(n(9154),t)},2212:(e,t)=>{"use strict";var n;Object.defineProperty(t,"__esModule",{value:!0}),t.AiAnalyticsCategory=t.AI_ANALYTICS_ACTION=void 0,(n=t.AI_ANALYTICS_ACTION\|\|(t.AI_ANALYTICS_ACTION={})).AiFeedbackLike="ai_feedback_like",n.AiFeedbackDislike="ai_feedback_dislike",t.AiAnalyticsCategory="ai"},2975:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Analytics=t.createAnalytics=t.trackEvent=t.setupGtag=t.setupGTM=t.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 358 x 346, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54782
Entropy (8bit):	7.983133879056203
Encrypted:	false
SSDEEP:	1536:Q6DUNTTn9jsH+xIWS90WrQqouDjAay2qKEjU:Q6wNTz9IrWSeWrQ3fay2qTU
MD5:	FB0C3C85D07CAA53EBF54B3A58B8D30E
SHA1:	4506D2FF8FA8550D18C8D9E431E86E0D5C6D4925
SHA-256:	69FE14A5FA6BBD240513D7B9B432240782A3B51776C0047B892735C20EA1EAD6
SHA-512:	16DABC02E26F0FAC83F3967EC90E34461D705F9E39EC925A503F057B47C01CD4D80CCA3DC65A487A75E6A4568011F16535B49D62787B77D9EE985DF6130BC679
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f...Z.....-.......IDATx...yx........R..]U.ec..!....CH..!8.F.......>.O.<..<3.;..3.l..g..t76$k..@...!...ICB.7.dI%.].J..........HF.a.V}>.....K.G....;..U..?x.=.GF.....1B........`52.,.......9.....y.PUUUu...v...j9...~.V....G....<Q......#.D.X"...`.n..p.\|......UUUU..}w....b5...1....N......`$..y..&.?....)............~8E.BUUUU.^y.5b.$N..._....Y#RJ...p-.....Zw/...qll.7.-..V.iV4.)..).HiE'D.!..P..P.<Fc.Z..\|>_..[n)Su^.....,...9N...".../....!D.3.TUU...R9\|..v(....F#B4Id#..4"e.p,^'......U..H.H4T.T.JeJ@&......D.8.....@.8...)10.t...B.jU....z.Rz....p..".<F...>.c..revjB..;....v..}b;H..R.cR....`0.....!4a0h..T..T.....NU.h...jBE....."5.i.IB=R..WP!.\|D.B.T..>Q8t..4.SB.~.8.H.)..S]]].T.7R....n.B...Rz....p.."......?.....>..\|Z.......AJ.."...d4.:....n1Z.6..b5Y.f,........lf-..E....B.B.@.X$_...\av.P.d.R.l.R..!......_+B...t..k_..,..G....\|k?....^...[.e.R>...n.R.K...E..d.F..6..G~.C..n..A..c..RJ.....`0.mVk...Fq.j...]q:.8.Na4.....i.........tvt.(.....X.fp.....8...d..2.,

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48945), with LF, NEL line terminators
Category:	dropped
Size (bytes):	217666
Entropy (8bit):	5.332737682463185
Encrypted:	false
SSDEEP:	3072:RC5QSs8Km5kfPDg3Req8a3YL7hUlrs4ad:9qkfi3shUlrTW
MD5:	358D1530FDF2E2787AD45E3A84F90C83
SHA1:	E6CC352CE14EE42835D5B4F796DB97C8FD57A25C
SHA-256:	923CEED409970B037BD94B3FBDD9B62AFD5905F1D4BFAE8DCF3A293195C8D0EE
SHA-512:	7C1DF1D262CE68446874791C7CC64E0AF0A0468745A9F6C09747003093DF083F23156813F436FE63C8762FC03B01B055F9BF2C0F1E4DBB5C0532E6DB8A1DBF8D
Malicious:	false
Reputation:	low
Preview:	/! For license information please see common.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s="./src/common-browser.ts")}({

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22434)
Category:	downloaded
Size (bytes):	441000
Entropy (8bit):	5.6310068350754365
Encrypted:	false
SSDEEP:	6144:D4pAlDYnsmQ8HSZ1HcRCrZHe5NAoEZMf3/BxfvjuT+boHY:UpUnm9HS7Hc81e5a6hiY
MD5:	865E2F42F44C8C9538682E1C9BE52BBC
SHA1:	37CFDA89DBE82A1895FFB8B08AC2ABD945EBE474
SHA-256:	8852B895475DA75D6A34C71E080FD15279E8E86DE2AF35C8DE074E93282F8395
SHA-512:	67528F6191997606491089EB283BB97AA54E3B91B92A13FC99949FAAFCBCEE2F88671333D06006E2307749F2FFDDE03ABA20F26211C84022A46531897BFAB33A
Malicious:	false
Reputation:	low
URL:	https://stt.nimbusweb.me/gtag/js?id=G-7ZKFB3S0PN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":37,"tag_id":113},{"function":"__ogt_ga_send","priority":27,"vtp_value":true,"tag_id":109},{"function":"__ogt_referral_exclusion","priority":27,"vtp_includeConditions":["list","nimbusweb\\.me","thefusebase\\.com"],"tag_id":111},{"function":"__ogt_session_timeout","priority":27,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":112},{"function":"__ogt_dma","priority":27,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":114},{"function":"__ogt_1p_data_v2","priority":27,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELEC

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 358 x 346, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54782
Entropy (8bit):	7.983133879056203
Encrypted:	false
SSDEEP:	1536:Q6DUNTTn9jsH+xIWS90WrQqouDjAay2qKEjU:Q6wNTz9IrWSeWrQ3fay2qTU
MD5:	FB0C3C85D07CAA53EBF54B3A58B8D30E
SHA1:	4506D2FF8FA8550D18C8D9E431E86E0D5C6D4925
SHA-256:	69FE14A5FA6BBD240513D7B9B432240782A3B51776C0047B892735C20EA1EAD6
SHA-512:	16DABC02E26F0FAC83F3967EC90E34461D705F9E39EC925A503F057B47C01CD4D80CCA3DC65A487A75E6A4568011F16535B49D62787B77D9EE985DF6130BC679
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/i/fb0c3c85d07caa53ebf54b3a58b8d30e.png
Preview:	.PNG........IHDR...f...Z.....-.......IDATx...yx........R..]U.ec..!....CH..!8.F.......>.O.<..<3.;..3.l..g..t76$k..@...!...ICB.7.dI%.].J..........HF.a.V}>.....K.G....;..U..?x.=.GF.....1B........`52.,.......9.....y.PUUUu...v...j9...~.V....G....<Q......#.D.X"...`.n..p.\|......UUUU..}w....b5...1....N......`$..y..&.?....)............~8E.BUUUU.^y.5b.$N..._....Y#RJ...p-.....Zw/...qll.7.-..V.iV4.)..).HiE'D.!..P..P.<Fc.Z..\|>_..[n)Su^.....,...9N...".../....!D.3.TUU...R9\|..v(....F#B4Id#..4"e.p,^'......U..H.H4T.T.JeJ@&......D.8.....@.8...)10.t...B.jU....z.Rz....p..".<F...>.c..revjB..;....v..}b;H..R.cR....`0.....!4a0h..T..T.....NU.h...jBE....."5.i.IB=R..WP!.\|D.B.T..>Q8t..4.SB.~.8.H.)..S]]].T.7R....n.B...Rz....p.."......?.....>..\|Z.......AJ.."...d4.:....n1Z.6..b5Y.f,........lf-..E....B.B.@.X$_...\av.P.d.R.l.R..!......_+B...t..k_..,..G....\|k?....^...[.e.R>...n.R.K...E..d.F..6..G~.C..n..A..c..RJ.....`0.mVk...Fq.j...]q:.8.Na4.....i.........tvt.(.....X.fp.....8...d..2.,

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113795
Category:	downloaded
Size (bytes):	35194
Entropy (8bit):	7.993505114309871
Encrypted:	true
SSDEEP:	768:GRv2Jy/qEj3ZrMzxkPJI1hvvs6rEtXJBrXFTZQnsYsbMCAY5VIsRVc5:h0lSYI1hvvorXFQvsbMCHr77c5
MD5:	FB49A5261BE1810A52DED01D981579C5
SHA1:	EF85933B6BA90810173F6445C6B791E70AAF475F
SHA-256:	6F390B9E714F9CC08E126EB82116A2EC6F503901C4ACBB56E42464878441A5CC
SHA-512:	B5B06D09467491D49A9DCBBD47566BE73B42F70481993883E488993C9985B37A983A72A136FA87F6B89239E6163788C2607AE53CC95CE9C497D176307BAE7BB2
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p..Y..pk.o...$.r.@x.C.m.....7...k........X;MgA<.=..s....z......c..*y....t.."..?..x>...... ....i1X...?....\|Z?;..^._Z....x9.q\../...R...E..E. .i....Y...kz.>.y..u.....N..U.=.O.W...1..x~...0.~H.Z;..._m......../..iz.t.6...2)j......,..4...Y:...%.:..x..k.z.../....@.D.r?......GP....`..o.'..~1.....&.HJ.`.@.}mV../8.b.m..guo.H_.7Qv.r...dQ.....-.QE......G:.U'...r.~.1.....H.k...O..dk.d.\|.7..x\/..i^.Y..Q_/.`..i.&...-.......P...yEv....,....'.^...X.......YK.".....l.r.ax.....<...1!..4GQ.M_.....L..F..51.!.....]....y...(...=O5?

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20581)
Category:	downloaded
Size (bytes):	20765
Entropy (8bit):	5.295012879859902
Encrypted:	false
SSDEEP:	384:2b5vj+l3jfaksTAAvNWUwLATFqNCns+CSHDJDLrx:y5vj+5jfSTtrTFqNCs+CSHtD5
MD5:	084AA824C6E6F64CF28551D070ABE00C
SHA1:	DABFADE6656A1018D065B5F3673F4154AAF7A8BA
SHA-256:	7953631F0E54794D2352A3CFA591C0914D73E14F90141058E3CF16BEE7939BCF
SHA-512:	517BA666B64D88EC274DC6521CB39F713B346A8B363330561D73873AE07427F478E100747706392607DBBE58D77249557FAE46738125E918D9FA59F07766B3DA
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/hammer.min.js
Preview:	/! Hammer.JS - v2.0.7 - 2016-04-22. http://hammerjs.github.io/. . Copyright (c) 2016 Jorik Tangelder;. * Licensed under the MIT license /.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(b,c,d){var e="DEPRECATED METHOD: "+c+"\n"+d+" AT \n";return function(){var c=new Error("get-stack-trace"),d=c&&c.stack?c.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s\(/gm,"{anonymous}()@"):"Unknown Stack Trace",f=a.console&&(a.console.warn\|\|a.console.log);return f&&f.call(a.console,e,d),b.apply(this,arguments)}}function i(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&la(d,c)}function j(a,b){return function(){return a.apply(b,argumen

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	91217
Entropy (8bit):	5.296834286252904
Encrypted:	false
SSDEEP:	1536:heEUBR8R+r7whEjcDe3NkW8pPna6gIsTjIPYgKtt0cYytjUGa7T5M/I:hvVoEENYP6/IPIjG7lMg
MD5:	3AF14409140A188D90E8ABFE3FA2A40A
SHA1:	5C4A242BE0777A189A49F57554C97257B8941E84
SHA-256:	295F29439726C35DF996F7FDFB173F1F979E39005B46D8A6CB091B98BAFA231C
SHA-512:	26C24279EDE06BAA9C0B4A94B2C67C6A7DFB633E1B5D93C62BE54156D6FEBBE2E9A800DB766FA7249351F3181975BECEE8F0590C225365965E71CD60737AE820
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkweb_editor=self.webpackChunkweb_editor\|\|[]).push([[997],{54519:(e,t,n)=>{"use strict";n.r(t),n.d(t,{fsjs:()=>i,ebmljs:()=>a});var i=n(94036),a=n(64028)},18595:(e,t,n)=>{var i=n(22357);e.exports=function(e){var t={},n=new i(e);t.trackNumber=n.nextUIntV(),t.timecode=n.nextInt16BE();var a=n.nextUInt8();t.invisible=!!(8&a),t.keyframe=!!(128&a),t.discardable=!!(1&a);var r=(6&a)>>1;return t.frames=function(e,t){if(!t)return[e.nextBuffer()];var n,i,a=[],r=e.nextUInt8()+1;if(2===t){if(e.length%r!=0)throw new Error("Fixed-Size Lacing Error");for(i=e.length/r,n=0;n<r;n++)a.push(e.nextBuffer(i));return a}var o=[];if(1===t)for(n=0;n<r-1;n++){var s;i=0;do{i+=s=e.nextUInt8()}while(255===s);o.push(i)}else if(3===t)for(i=e.nextUIntV(),o.push(i),n=1;n<r-1;n++)i+=e.nextIntV(),o.push(i);for(n=0;n<r-1;n++)a.push(e.nextBuffer(o[n]));return a.push(e.nextBuffer()),a}(n,r),t}},22357:(e,t,n)=>{n(47042);var i=n(50088);function a(e){this.buffer=e,this.offset=0}a.prototype.nextInt16BE=function()

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22434)
Category:	dropped
Size (bytes):	441000
Entropy (8bit):	5.631090016136576
Encrypted:	false
SSDEEP:	6144:D4pAlDYnsmQ8HLZ1HcRCrZHe5NAoEZMf3/BxfvjuT+boHY:UpUnm9HL7Hc81e5a6hiY
MD5:	B1457BB09F1709EC1BE6B04056C3A270
SHA1:	736590459B36228F548B1ED8115DAAE3DC751FB4
SHA-256:	CB9835637E0EF9D0A6582E761D99B68F16B2D8648B57FFCB498984270AE43DF5
SHA-512:	B50E9BCDC6BE85F673F40431A3E3D1835C3ADADCC2EC2030DA26146EEA15D85D674B805C879F43E8FC5E588F81460104C8E0AF8DE13AA39F4BA8F099DA036026
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":37,"tag_id":113},{"function":"__ogt_ga_send","priority":27,"vtp_value":true,"tag_id":109},{"function":"__ogt_referral_exclusion","priority":27,"vtp_includeConditions":["list","nimbusweb\\.me","thefusebase\\.com"],"tag_id":111},{"function":"__ogt_session_timeout","priority":27,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":112},{"function":"__ogt_dma","priority":27,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":114},{"function":"__ogt_1p_data_v2","priority":27,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELEC

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	304172
Entropy (8bit):	5.574919106316268
Encrypted:	false
SSDEEP:	6144:u+YnsmQ8zZZ1HcRCrKkEZMf3/mrf9xuT+bsDX:uam9zZ7Hc8ybQX
MD5:	4428A272403D45CC64A13513F8F3B634
SHA1:	A6B770EEC22066DB193B19FBBDD3F2136332DEEA
SHA-256:	84C8FDB901156AEE4C0707F60FA765F691E4986EE890E5ABB6B9DE8AB283B0AD
SHA-512:	BA897D9C08246C3A3E7A8151516B83A20E5C799399EE6B9F25CC35F99365E44A024E79ACACAFDB7A315BA3B5A9D3A6D7FE8C4FEC4533F122B6B8DDB88E237077
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-7G2K66TV09&l=dataLayer&cx=c&gtm=45Fe4cc1v830451714za204
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48945), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	217666
Entropy (8bit):	5.332737682463185
Encrypted:	false
SSDEEP:	3072:RC5QSs8Km5kfPDg3Req8a3YL7hUlrs4ad:9qkfi3shUlrTW
MD5:	358D1530FDF2E2787AD45E3A84F90C83
SHA1:	E6CC352CE14EE42835D5B4F796DB97C8FD57A25C
SHA-256:	923CEED409970B037BD94B3FBDD9B62AFD5905F1D4BFAE8DCF3A293195C8D0EE
SHA-512:	7C1DF1D262CE68446874791C7CC64E0AF0A0468745A9F6C09747003093DF083F23156813F436FE63C8762FC03B01B055F9BF2C0F1E4DBB5C0532E6DB8A1DBF8D
Malicious:	false
Reputation:	low
URL:	https://nimbusweb.me/share/dist/common.js?v=9.26.11
Preview:	/! For license information please see common.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s="./src/common-browser.ts")}({

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	156742
Entropy (8bit):	5.378702325243123
Encrypted:	false
SSDEEP:	3072:6J0OjjXwlzeEvVIZFtBhKTxoghzkJ5lpxQ1V8oDzm:6iO4lzeEvVIZFMTGAkJ5dQ1NDzm
MD5:	9E19B6354DFF8D3DA3D88D0D265E7F5C
SHA1:	D145EDC8AA7F058FE852B95576ACB0C8E3E318B4
SHA-256:	C7414C792B8C81E73B4281D4001E3123BE930980614857D15ECEBE7DA7F42D98
SHA-512:	C19C1A0E2739F1FBF4BC2A41F9B712216D92660F5EA4E05107A69B65886F044A346187C67E358DA6D6DBD2034E68BFA23E8FA36503F57349F44A636282C114C2
Malicious:	false
Reputation:	low
URL:	https://s2.getsitecontrol.com/widgets/es6/runtime.0e5d0b4.js
Preview:	/! @build 2.12.0 getsitecontrol 147eb1ea126e08a2c93b /(()=>{var t={615:function(t,e,n){var r;t=n.nmd(t),function(i){e&&e.nodeType,t&&t.nodeType;var o="object"==typeof n.g&&n.g;o.global!==o&&o.window!==o&&o.self;var s,a=2147483647,c=36,l=/^xn--/,u=/[^\x20-\x7E]/,d=/[\x2E\u3002\uFF0E\uFF61]/g,h={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},p=Math.floor,g=String.fromCharCode;function f(t){throw new RangeError(h[t])}function m(t,e){for(var n=t.length,r=[];n--;)r[n]=e(t[n]);return r}function _(t,e){var n=t.split("@"),r="";return n.length>1&&(r=n[0]+"@",t=n[1]),r+m((t=t.replace(d,".")).split("."),e).join(".")}function v(t){for(var e,n,r=[],i=0,o=t.length;i<o;)(e=t.charCodeAt(i++))>=55296&&e<=56319&&i<o?56320==(64512&(n=t.charCodeAt(i++)))?r.push(((1023&e)<<10)+(1023&n)+65536):(r.push(e),i--):r.push(e);return r}function b(t){return m(t,(function(t){var e="";return t>65535&&(e+=g((t-=6

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142291
Category:	downloaded
Size (bytes):	49907
Entropy (8bit):	7.995631726941396
Encrypted:	true
SSDEEP:	1536:lv65Wwn0OlJ4vNmQf6ji5k8D6VZkTTqxZxV:Rfwn0OlJfaYp8m3pZxV
MD5:	650FDA997A3BF52D41CEF41BE0555A8A
SHA1:	AC727252ED485CDBF4FC8DCE959CAFDB1F7ECC8D
SHA-256:	2532ED2CA349CE224F0D801E07661D587FFD916EA049F65440057E4A813069B7
SHA-512:	152EF90ED40A563427A3A5544B0CF42629B8CE71C5F4D55FAF9F61BD81F9252B789CF2021D200C0B09CF1C8C3A9BEECBF5287686E7C3372F1F22E0F38C097EE4
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.L...\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De....q.W.~.@......T.y.S7J...f...P....Pz.......a.E..<.m./A,*...Q.....U..q...$.Db,...H<...'....J,..$..;nG.2DHYkL../......=.pB....A?.&...i,......2lo...$.<.s...?~p[......L..&x.qR.u3...6q:....U.Y1.."... .>Un#7@.........."H,@.......?..P....p6.S.[...E].A..G.....q..j4w6......YwI2....[?......<...<..........Eo....d...1....\|......../..cp...S5.......8....r....2...d...aUa>..JRM.-...nT.....qm....b.a...N..OEp..u.Z...2...#.:.@.&O3Q.s..c.(.. ...(..Z....^F.....l..U...bZ..4:.....?T.k.PeU\....L.a..>..t.......jV...B.i7....>b..T....D2...>.X.....v0.y....kMKf..EG..X.....V`e../Sg...->.Vh}.....R..^..OZF..i.(..#..1... P8!&3...D\ .+..".......0...PM.'..!..(...Tdi.;...$D%N .)..#3.V...'r\.... ...&....J\|."Nd%D:uw6.>U.+...H&.Z...T=.&U.v....J.t.0%+...U..3M....y...L......p='.....?%...x:woO.{Q5..0....D).(..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkRZSAmYgc43hIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 450682
Category:	dropped
Size (bytes):	122501
Entropy (8bit):	7.997576422148473
Encrypted:	true
SSDEEP:	3072:gA6ySXbsIyPbZHA/Rs9OMIGCdfcxs+w4Trqa8qoUg7N:sXb4NH5wMIRExsp4nIdN5
MD5:	EAD3B805D68B7D15C244AC76CB073533
SHA1:	4CE2AE5F85BCD91425C971353622D698CDC6B73D
SHA-256:	AC37743CC83AE01D732A169E0155DB4FC1D756D38ACF1FEBF71445505595F436
SHA-512:	0716C393CB6EAE94000FA33AD1AF6026D87A308C13731DFD2D61520695BDE513EDCBA0A8A088CE471681B29D7BE5CF9FDF0DC3DB85D1D52ABEDAF609D18CC69A
Malicious:	false
Reputation:	low
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q5y^.lT]...p1.:1..}.!z..}8...3...8...b..(..3..d........R....@.....Ur\|q.?]#.H>.....+..R................q.G...c..]... .%.NY0I....o...>.....$a.:g..'.<...9....@.eG.+.......V......JE...q..H..KQ.....,...........z0..W...V.....+..J..^.t.^....:H.."..q....K.QP..U.VX.....1.^.V.O..S...r.:.....>&........S{...V'...G~.....E........)..h.[..(..*.$...=..!.8..y.:K......j...'..9.F!,[L.5..vFS.U.Q.....&.\.nV..........Z...LK.~.\|."...D;Ug>....=...H$.J...R....4.C..bzPI..S.B@RJ.v>..GJ."/.UE.B..Q}`.g......K............@Z..2.(.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	283751
Entropy (8bit):	5.583935639790948
Encrypted:	false
SSDEEP:	6144:mYNYnsmQ88GZ1HcRCriua0Mf3/mrf6uT+bsGG:9Nm98G7Hc8wtG
MD5:	C200723EB038E811B6DE3F42BAA8A28A
SHA1:	D241B69A78362F6F8251F5EC45196002A8AC58F1
SHA-256:	BD0447279D3A36B232E2008275B616FD3D03B2BC217879C4449EA27723475441
SHA-512:	F3BFF7BAAECE09EEE5D094C4A908DD6AA0E6C5F0F4C32A4B65CCB59A5B1A8997C728A18F11FDB49F6AD7DD4ECC468B6DE3C1DD8657FD0C1B9E9F872B5ED1E1F1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-L1W7VLTSPG&l=dataLayer&cx=c&gtm=457e4cc1za200zb888117676
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":11},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","nimbusweb\\.me"],"tag_id":13},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":14},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":15},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vt

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (433), with no line terminators
Category:	downloaded
Size (bytes):	433
Entropy (8bit):	5.031024929246019
Encrypted:	false
SSDEEP:	6:nvifLFcdXZdLlhr26JcB6SZ0C5mrFtd5hH2XATkRCgO9lVhnGKp5Lx+5hMmmLcY+:q5WXr/2606nC4DzcQTksHnNLx+nNY63
MD5:	607497A71B3F58C69F285D965DFBC6AA
SHA1:	76C5A0E7C41B2E0E84C1C83D7D17E064ABBD8385
SHA-256:	69D8D1F0F122FE1954B10C80F12D43FB5C56F2524460D04CEAE12E4719B4692E
SHA-512:	D9DC72214EE002AB353E4DFBF1BC5DDEB8EB67B3D2CEE272BFDA5A4B58F1C2E241B7A2B3868BED8BF43F02C122E1AD4A385B34BC60FBCF3D48230394075E5E11
Malicious:	false
Reputation:	low
URL:	https://l.getsitecontrol.com/m42xj3qw.js
Preview:	"use strict";!function(t,e){if(!e.documentMode){var n=function(){(n.q=n.q\|\|[]).push(arguments)};t.gsc=t.gsc\|\|n;var s=new XMLHttpRequest;s.open("get","https://l.getsitecontrol.com/m42xj3qw.json",!0),s.onload=function(){var n=JSON.parse(s.responseText);if(n&&n.script){var c=e.createElement("script");c.onload=function(){t.gsc.start&&t.gsc.start(n)},c.src=n.script.mjs\|\|n.script,e.head.appendChild(c)}},s.send(null)}}(window,document);

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/share-api/profile/me
Preview:	null

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9222)
Category:	dropped
Size (bytes):	194736
Entropy (8bit):	4.193785389467704
Encrypted:	false
SSDEEP:	1536:/IdbqsNUcD5AddbqzNUK5LdbqsNUc65/dbq7gDc+5xdbq7gDc75udbqZmcn50db9:/dw053
MD5:	4DE08422C32F184C4C53312679EAF155
SHA1:	BDC503CD996C21D1F4FEF8AA88A576C25005ACE0
SHA-256:	D8F59368057A15E101CF020875EBB8CF4788D741E60EB2609CA0007D1244A16E
SHA-512:	A0DCDEC60AB9DECD178FD4D083923BC9E5048D9EBE2FDA6C61C58DD160D3BA829120C189DE51B71346F90677A2321F92048FD5588736C34AB3EE47A15DF6D4D0
Malicious:	false
Reputation:	low
Preview:	{. "widgets": [. {. "id": 248468,. "type": "form",. "layout": "fullscreen",. "sort_order": 131.0,. "name": "Dunning. \u041d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043e\u043f\u043b\u0430\u0442\u0430. Day 14 for PRO user",. "meta_title": null,. "meta_description": null,. "meta_image": null,. "meta_seo": false,. "pages": [. {. "data": {. "note": "",. "title": "<div><br>\u274cYour subscription has been suspended</div>",. "fields": [],. "buttons": [. {. "type": "primary",. "label": "CHOOSE YOUR PLAN",. "actions": [. {. "url": "https://nimbusweb.me/

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6035)
Category:	downloaded
Size (bytes):	2544418
Entropy (8bit):	5.356370989692976
Encrypted:	false
SSDEEP:	24576:1ktBqakY+kIBMGLK518OgjuxCVfJzkXkBui:+tBqDLfuxCVfJzkXkBui
MD5:	412AFAE036368B3CF898465C15044DE4
SHA1:	F016F4E194B3600DCBF85B4DC4C404721D72C571
SHA-256:	CC8469C7439711DA9657EF5AFD686228FFD87761279DF81F37E4D15FF0E50FCE
SHA-512:	4808B3FFF1AF8686BE38055A1A00AC33C3473D7A28AF6E87A118531EB2DC4F8F8AE4D4A0AC89D303386CE9302A7C7510AC3477EAF77F1F92F0A28ABD9A20617C
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/index.css?v=9.26.11-73fecd7b
Preview:	[flex] {-webkit-box-flex:1;-ms-flex:1 1 0px;flex:1 1 0; -webkit-box-sizing:border-box; box-sizing:border-box}..[layout="row"] { display: -webkit-box; display: -ms-flexbox; display: flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-sizing:border-box;box-sizing:border-box; }.[layout="column"] {display: -webkit-box;display: -ms-flexbox;display: flex; -webkit-box-orient: vertical; -webkit-box-direction: normal; -ms-flex-direction: column; flex-direction: column;-webkit-box-sizing:border-box;box-sizing:border-box; }..[layout="row"] > [flex] {min-width:1px;}.[layout="column"] > [flex] {min-height:1px;}..[flex="nogrow"] {-webkit-box-flex:0;-ms-flex:0 1 auto;flex:0 1 auto;}.[flex="noshrink"] {-webkit-box-flex:1;-ms-flex:1 0 auto;flex:1 0 auto;}.[flex="none"] {-webkit-box-flex:0;-ms-flex:0 0 auto;flex:0 0 auto;}.[flex="grow"] {-webkit-box-flex:1;-ms-flex:1 1 100%;flex:1 1 100%;}.[flex="auto"] {-webkit-box-flex:1;-ms-flex:1 1 au

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3470
Category:	downloaded
Size (bytes):	1417
Entropy (8bit):	7.871362695321925
Encrypted:	false
SSDEEP:	24:XnsRJx7yLdvMX8pOmOSHsvFaVwufLAJvkOzDxnfs1+AVwifxFawVka0HNL50/K7:Xn9dvDOSHsdGkJvkOi1FV5Z8wvGNlT7
MD5:	B2F7EB647947F473DC02D0570435037D
SHA1:	B47CAA5C1473E9A4934BECF5978C9936B0EA57EF
SHA-256:	91F62E70161CD873A31602C5CAE1051F277EB6163C0E40267B270FF5180B3293
SHA-512:	6B8B659214BD0B24CE1D813B3AC36E126E5CB615D5A5346E476CC6614B148B37CC47C2A0D19009469FD8D546F8F75D684506FD3624ED202C9EE930157454C1BD
Malicious:	false
Reputation:	low
URL:	https://l1ve.twuseb.us/Me.htm?v=3
Preview:	...........WMo.8...W.D..k."9...a...E]4mQu..W...es+S.I;)....}Y..u.C........\|.C%230_3N...._.e...>.....H.e..8U.....9...u@9..-......Z?..%.N....+n6J..g.?f.2zZ$..0.]m.v9..'I...G...u.)BC.$.h2.A.g..K.F.N.....n...k...B..Q.....[....i...4.....!.r;.riVS}#....@.(.....N./P.g,.....k 7I2m.0#D.l...f...4."...D..M...$...y#.r4.".+.j+.%,...?..o....O....=w)...Y..c.#<.`.0`....\|..p...z..F.....8.ph9...D.<.n.Ij......."..(...FA5Y.%.\\|.,hb.w`..X.fLi>...m....0&C...[-.~...&..6.hj.....9...<.p.J#.OC..b)g..[s/...<.....}X..LzC'..g.(.c..)...n.Ih'..8..&..WHb.........<C;5+.^3...D0.1.....U.....<].8Z.t..Z...O...OO}....N=.R.../...:...!..uJ.!...dc.:V..rm..&U.m.K.uj.,..L.R.-.!.\....j.Au.....v.WV......t..}..M..A3''0.v..RH\|rb............].....6L..0#.{.."...aK.......O......B........z\.B%.gn....a..>.^..,.0.0u..D...3i.7.k.!V?~..P>EwF1..$).s....J.m....I.py..@.sr..]._....%......9R..Fs...y...p]%U...hR...4...$0...Y`.t........f~u.eRL.g.......6]=.w..-(.O.....a..>\..2..@...T)..{..ovg....

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	5.026947981525145
Encrypted:	false
SSDEEP:	12:Y9kFUikH86UrWxsJqw2sVvm9gbBGa+xaNmd6wpHRD+hvsEvsmaj4PeCtLn:Y9k9OhUr720e9YNMhHeX564GCtL
MD5:	97A5D3FF11B2221E81659ACD8EA2B213
SHA1:	3AFD5DEE030F0D728C7A3DB2E6C716BDADFAB018
SHA-256:	7FDD313D50B182F09BA51C9355FB9C90E88E929E404CCD1D03816A83DA9B34D6
SHA-512:	40AD97F59707B92A54149BA39CCE7C1C8229DD09DB08D8AB80B62C7D44ECFCD6EF63F73FFE9554DB42DDB8C9561C8A66A213946F37221A9670655177FBE2730E
Malicious:	false
Reputation:	low
URL:	https://events.getsitectrl.com/api/v1/events
Preview:	{"id":"64f97372602acf39","user_id":"64f9737260060958","time":1734727289216,"token":"1734727289.92289d831fe43033abb3e6b02757c958.228e3e71bc0b29951b9962191dfcf504","geo":{"ip":"8.46.123.189","geopath":"147015:147762:231241:","geoname_id":5128581,"longitude":-74.0068,"latitude":40.7123,"postal_code":"10118","city":"New York","region":"New York","state_code":"NY","country":"United States","country_code":"US","timezone":"America/New_York"},"ua":{"platform":"Desktop","os":"Windows","os_family":"Windows","os_version":"10","browser":"Chrome","browser_family":"Chrome","browser_version":"117.0.0","device":"Other"},"utm":{}}

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	11070984
Entropy (8bit):	5.7391432383358065
Encrypted:	false
SSDEEP:	49152:OByig626j7626v0qppvr6ATCSv31NEQ/ypokIq4WqiIn2fhQdXPMKL14vDPKaoXb:lxAPKaYXMBnwb2usMXsM8kxyCX1
MD5:	224C3BBB8D8BBDA5D0FD2056321121DE
SHA1:	14325B59BB88FCA3C22242C0F02FFC1E151BC5AE
SHA-256:	893DA41E10323C6FB5F7E2C01A55A4D7A3D00D8F8CCE01E59F5193C516B8DA90
SHA-512:	1972E20A6853A2E507D58CC5B4F82C3B664633B1365264495E8825E2ED0669BA230451030A9F81E11ECECB6F86A7A8E6F8CF46986B6D7A898A343FA1CE033AF0
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/index.js?v=9.26.11-73fecd7b
Preview:	/! For license information please see index.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s="./src/client.ts")}({"./node_m

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (999)
Category:	dropped
Size (bytes):	102695
Entropy (8bit):	5.416907137629318
Encrypted:	false
SSDEEP:	1536:I9/PQqtNLLWYpd4RJwSSJO4JJBR+kVGus0UpcTd0n4kQ6mBwD9TblZn:I9n7tVJd48SulecTdEr
MD5:	893102E1869ADC5BCE0A94FEB6F74249
SHA1:	AA12E4ED5006F270AB072E00D749A2D0CC392198
SHA-256:	E233A0FFB3016B204EDB0BBB841952FEB31A194AD53CD473C76003391F24BFD3
SHA-512:	074A94A3AC29A9343DC71CC028E7BFE7E71EFDE29E825C922ABD66AEB9257710B309AD77529511241FA4B5C9206EA8187A08A73DBE3CDC045E7D53BC72BB2A9B
Malicious:	false
Reputation:	low
Preview:	/*.@license @nocompile.Copyright (c) 2018 The Polymer Project Authors. All rights reserved..This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt.The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt.The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt.Code distributed by Google as part of the polymer project is also.subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt./.(function(){/*.. Copyright (c) 2016 The Polymer Project Authors. All rights reserved.. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. Code distributed by Google as part of the polymer project is also. subject to an additional IP rights grant found a

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20581)
Category:	dropped
Size (bytes):	20765
Entropy (8bit):	5.295012879859902
Encrypted:	false
SSDEEP:	384:2b5vj+l3jfaksTAAvNWUwLATFqNCns+CSHDJDLrx:y5vj+5jfSTtrTFqNCs+CSHtD5
MD5:	084AA824C6E6F64CF28551D070ABE00C
SHA1:	DABFADE6656A1018D065B5F3673F4154AAF7A8BA
SHA-256:	7953631F0E54794D2352A3CFA591C0914D73E14F90141058E3CF16BEE7939BCF
SHA-512:	517BA666B64D88EC274DC6521CB39F713B346A8B363330561D73873AE07427F478E100747706392607DBBE58D77249557FAE46738125E918D9FA59F07766B3DA
Malicious:	false
Reputation:	low
Preview:	/! Hammer.JS - v2.0.7 - 2016-04-22. http://hammerjs.github.io/. . Copyright (c) 2016 Jorik Tangelder;. * Licensed under the MIT license /.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(b,c,d){var e="DEPRECATED METHOD: "+c+"\n"+d+" AT \n";return function(){var c=new Error("get-stack-trace"),d=c&&c.stack?c.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s\(/gm,"{anonymous}()@"):"Unknown Stack Trace",f=a.console&&(a.console.warn\|\|a.console.log);return f&&f.call(a.console,e,d),b.apply(this,arguments)}}function i(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&la(d,c)}function j(a,b){return function(){return a.apply(b,argumen

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	427
Entropy (8bit):	7.121042694269167
Encrypted:	false
SSDEEP:	12:6v/7iY7/6Ts/0ogIaicoEPaotywMYRZd2tpIGIxukDnTt:27/67ogIpmaobMud2tTL6nJ
MD5:	FF6A823EABD85E67C626D007C2830BD5
SHA1:	FE6A997A92D1C85055F29BF95D746061BD9BAC5D
SHA-256:	9FAC2F294DE40D7C9D11E392E5DF670BF14D3C536E5B41001FE672BF3F00A828
SHA-512:	446AC55F50BA9F39DDDEE0201106D6E7C96899A3DE78872E3BD5A333D4E755D3777D866C961E157D1FD57350BACA114D9670F67EAF099A65EA35B5C2292C6E02
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/i/ff6a823eabd85e67c626d007c2830bd5.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................sRGB.........gAMA......a....@IDATx..=..@..'......-N..ba.W......{.S,.S.......,.....(~.uf.."...d.yw..e.mm.G^.g...)@{.8y.D.....E...G......j.^...{.^.^....D.O.....y..Q...>A.X.O..f.3.....$.<`e.....L.$.+..p..t.BH.....XY...7..[.........9.F.v.?.E....Q.....+..n...f......d.$..c9.I.$U@r.PO.y.J..uk..........@.U....Y.^..(.x....<.q?....I `.W..yW"?l....IEND.B`.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190229
Category:	downloaded
Size (bytes):	61131
Entropy (8bit):	7.995690331685171
Encrypted:	true
SSDEEP:	1536:IQaq1bRHRRfJbkctpYqwSfNa3GNF2Wvxigo:kq1brN9kyJ9M3GNF1Ygo
MD5:	8B337F7DF8862124EA871A51E5EA5A90
SHA1:	91ECBCE42A9F012C61A35C412EEFC4AA4FB2EC1C
SHA-256:	E1844834079C4501EFE8200BB14C67BB4CF02FED9947B056859F487A3225BA4B
SHA-512:	4860257697D14B2BB1B090A560C5525A693BF60890C6004CC1ACC4A657A1003627B4213179EC64974A2389B5A11461BD0E6E0EB985433284E00852003307FC39
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.765556935416344
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEctKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	764EE6309BF4800054E4A2A67DEB3575
SHA1:	2FFD2FDA8E49AD861B75DE1E5ED583D8CE1D5B0A
SHA-256:	652E8677AEC33767D2A5F229384F79B4F526104BF7E94D7D258070F94743C3CC
SHA-512:	4333F5A85D3085C54ACF34632CFDD57CF7EEA2D539C5CEFC1DBD07A6486083CAC1C1DA6BADB9743FD01BCDEE63AEFB187074A6BF7AB945BC897E227E1C4F5C6D
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10508)
Category:	downloaded
Size (bytes):	82051
Entropy (8bit):	5.3652739358105235
Encrypted:	false
SSDEEP:	1536:ua8Vt/31XVY2wHIyKu+vcIdZsmg2HYPTxvNdCLFQhErW2e9CI9debk:ua8Vt/31XVYXHIyKu+vcIdZg2HYP1NdZ
MD5:	4087FB487A5DF11006B148E55F174736
SHA1:	0CAA8D40986AFBD2CB1A5C934147072E30205DE7
SHA-256:	B7C68ED784A94A8BB55D459202FEC2D7A9E86AA40568DD3CD572634EC92FECBE
SHA-512:	69395E57197B6522F32F4F2CA3AAAFD6CA788EB450313D6F351BB9718EBBD557667752B05B3D2CE8DB06312D81B9C3238D2AEE3DD96007E0EF523EF2D080DAC9
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy
Preview:	<!DOCTYPE html><html lang="en"><head>. <title>BIA - FuseBase</title>. <meta charset="UTF-8">. <meta name="keywords" content="Nimbus, Note, Share">. <meta name="author" content="Nimbus">. <meta name="viewport" content="width=device-width, minimum-scale=1, maximum-scale=1">. <meta name="apple-mobile-web-app-capable" content="yes">. <meta name="robots" content="noindex, nofollow">. <base href="/share/">. <script>window._shareStartLoad = Date.now();</script>. <script src="https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.js"></script>..<link rel="stylesheet" type="text/css" href="https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.css">.. <script src="https://www.google.com/recaptcha/api.js" async="" defer=""></script>.. <link rel="stylesheet" type="text/css" href="dist/index.css?v=9.26.11-73fecd7b">. . <meta name="msapplication-TileColor" content="#1DB1CB">.. <style>#str-dlls { display: none }</style>.<style ng-transition="nns-v1">.nns-app-content[_ngconte

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 450682
Category:	downloaded
Size (bytes):	122501
Entropy (8bit):	7.997576422148473
Encrypted:	true
SSDEEP:	3072:gA6ySXbsIyPbZHA/Rs9OMIGCdfcxs+w4Trqa8qoUg7N:sXb4NH5wMIRExsp4nIdN5
MD5:	EAD3B805D68B7D15C244AC76CB073533
SHA1:	4CE2AE5F85BCD91425C971353622D698CDC6B73D
SHA-256:	AC37743CC83AE01D732A169E0155DB4FC1D756D38ACF1FEBF71445505595F436
SHA-512:	0716C393CB6EAE94000FA33AD1AF6026D87A308C13731DFD2D61520695BDE513EDCBA0A8A088CE471681B29D7BE5CF9FDF0DC3DB85D1D52ABEDAF609D18CC69A
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q5y^.lT]...p1.:1..}.!z..}8...3...8...b..(..3..d........R....@.....Ur\|q.?]#.H>.....+..R................q.G...c..]... .%.NY0I....o...>.....$a.:g..'.<...9....@.eG.+.......V......JE...q..H..KQ.....,...........z0..W...V.....+..J..^.t.^....:H.."..q....K.QP..U.VX.....1.^.V.O..S...r.:.....>&........S{...V'...G~.....E........)..h.[..(..*.$...=..!.8..y.:K......j...'..9.F!,[L.5..vFS.U.Q.....&.\.nV..........Z...LK.~.\|."...D;Ug>....=...H$.J...R....4.C..bzPI..S.B@RJ.v>..GJ."/.UE.B..Q}`.g......K............@Z..2.(.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2388
Entropy (8bit):	5.204582702572379
Encrypted:	false
SSDEEP:	48:YkrkNtHwp9RMXB7r/rPnrdIrHIr0pJkGS09tHOAl4i:drmtayr/rfrdcHc0VX9tuU4i
MD5:	39ADD032FEC88F1D2F2A027EEDC60F0D
SHA1:	A4405ACBC014BB793C0D828F36F586A77889729F
SHA-256:	E981DBC606AE1D423752B90EC793537982B5E0795B87FF38039AEB4E245AAD1E
SHA-512:	C595952FAF0524C2462800D97B7573096F3563D6435A1EC5D6F715A4A08E44E2870566213BA49BCFFD0C37FFF98C3437D5E6BE19EF7F28394FEC2FC3D227A0D8
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/gwapi2/ft%3Atasks/shares/11450334?securityKey=ots3f4w6xehf2feb09wy&nodeId=1Hy4Ofi612giTUWL
Preview:	{"taskLists":[],"notes":[{"globalId":"1Hy4Ofi612giTUWL","parentId":"default","createdAt":1734720456,"dateAdded":1734720456,"dateUpdated":1734720553,"updatedAt":1734720553,"type":"note","role":"note","title":"BIA","url":"","locationLat":0,"locationLng":0,"shared":true,"isSharedForPortal":false,"favorite":false,"lastChangeBy":5,"cntNotes":0,"size":128,"editnote":true,"isEncrypted":false,"isCompleted":false,"workspaceId":"3jytdbmtff8hh48z","isImported":false,"isFullwidth":false,"userId":3545773,"isReady":true,"outliner":true,"emoji":"","isPortalShare":false}],"boards":[],"tasks":[],"assignees":[],"reminders":[],"descriptions":[],"threads":[],"labels":[],"workspaceLabels":[],"members":[],"memberRoles":[],"users":[],"avatars":[],"share":{"id":11450334,"securityKey":"ots3f4w6xehf2feb09wy","dateUpdated":1734720553,"passwordRequired":false,"accessAllowed":true,"noteGlobalId":"1Hy4Ofi612giTUWL","userId":3545773,"note":{"globalId":"1Hy4Ofi612giTUWL","parentId":"default","createdAt":1734720456,"d

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51633)
Category:	dropped
Size (bytes):	431485
Entropy (8bit):	5.600571968832982
Encrypted:	false
SSDEEP:	6144:Zw/l2wYns2QgiZ1HcRCrZRe5NAma0Mf3/eqC:U2Y2Fi7Hc8ze5aHC
MD5:	05356B7D8FAE40A228FB26329776A0D4
SHA1:	698ADC4B426BA3F4BE0E21DCD2B4329D906D40D2
SHA-256:	716A693BC584C599DAEB5B06176052D633786EC4BE7615270E8AD466B118E0F6
SHA-512:	0AA0195AE4656EF931BD386914A86C5B2E6DCC412D4B46F58A0F4D9075C55B951C656D19B479124104F52FDFA72C6E2BCF938156BD887ED01AD4E09FD83B62D6
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"1076",. . "macros":[{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.videoTitle","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoStatus","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoPercent","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"registerDate"},{"functi

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.765556935416344
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEctKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	764EE6309BF4800054E4A2A67DEB3575
SHA1:	2FFD2FDA8E49AD861B75DE1E5ED583D8CE1D5B0A
SHA-256:	652E8677AEC33767D2A5F229384F79B4F526104BF7E94D7D258070F94743C3CC
SHA-512:	4333F5A85D3085C54ACF34632CFDD57CF7EEA2D539C5CEFC1DBD07A6486083CAC1C1DA6BADB9743FD01BCDEE63AEFB187074A6BF7AB945BC897E227E1C4F5C6D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4326)
Category:	dropped
Size (bytes):	31229
Entropy (8bit):	5.079501192701778
Encrypted:	false
SSDEEP:	384:143/WYua9SVeGpX1x/31nXH/3FfeC42WdFNIyKu+vcelYRkjQyx8:Ba8Vt/31XdfH42WdFNIyKu+vce9Y
MD5:	03AB8EE8732B55C40E80548AB21E8113
SHA1:	D288587A4BECDDBF44B2D4B821F19C7DDF6FF75E
SHA-256:	602D3FA58CCED4FA7FFBA9A2FE2734EE201CE9D2BC953019E1E7E4AB86EC970F
SHA-512:	3182A458A86468A52AA8FBBE8C05B9930BC39249DDF6516F89DFAC6B16E03BDB76A8B6B15E417D501CEDF4F60C0B072E51B9943EFD96DF6F248E1994B0C0994E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head>. <title>Premiumgain</title>. <meta charset="UTF-8">. <meta name="keywords" content="Nimbus, Note, Share">. <meta name="author" content="Nimbus">. <meta name="viewport" content="width=device-width, minimum-scale=1, maximum-scale=1">. <meta name="apple-mobile-web-app-capable" content="yes">. <meta name="robots" content="noindex, nofollow">. <base href="/share/">. <script>window._shareStartLoad = Date.now();</script>. <script src="https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.js"></script>..<link rel="stylesheet" type="text/css" href="https://d3hogio4d1txum.cloudfront.net/tasks-bundle.20241017.css">.. <script src="https://www.google.com/recaptcha/api.js" async="" defer=""></script>.. <link rel="stylesheet" type="text/css" href="dist/index.css?v=9.26.11-73fecd7b">. . <meta name="msapplication-TileColor" content="#1DB1CB">.. <style>#str-dlls { display: none }</style>.<style ng-transition="nns-v1">.nns-app-content[_ngcontent-

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190229
Category:	dropped
Size (bytes):	61130
Entropy (8bit):	7.995688776913609
Encrypted:	true
SSDEEP:	1536:IQaq1bRHRRfJbkctpfqwSfNa3GNF2WvxigM:kq1brN9kyi9M3GNF1YgM
MD5:	61CEFBB5CEC4402A47901A35BA0787FF
SHA1:	40138D18FC1A97E52039D2309EDA9CE3BC547BCC
SHA-256:	A29E390F98B0B77F1460B6FA9B6FD02BA0B6901B9A74569C9CB4358E1CD0C6F8
SHA-512:	FBB43F93EAAF83E00ABED6EB6AE2DFE4BD584B9F15C25625798AEC159142128392527947807E90B8B42A61948C4AA019C5BB816119ECBEAE262A02856251AFB3
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	283751
Entropy (8bit):	5.583935639790948
Encrypted:	false
SSDEEP:	6144:mYNYnsmQ88GZ1HcRCriua0Mf3/mrf6uT+bsGG:9Nm98G7Hc8wtG
MD5:	C200723EB038E811B6DE3F42BAA8A28A
SHA1:	D241B69A78362F6F8251F5EC45196002A8AC58F1
SHA-256:	BD0447279D3A36B232E2008275B616FD3D03B2BC217879C4449EA27723475441
SHA-512:	F3BFF7BAAECE09EEE5D094C4A908DD6AA0E6C5F0F4C32A4B65CCB59A5B1A8997C728A18F11FDB49F6AD7DD4ECC468B6DE3C1DD8657FD0C1B9E9F872B5ED1E1F1
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":11},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","nimbusweb\\.me"],"tag_id":13},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":14},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":15},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vt

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142291
Category:	dropped
Size (bytes):	49907
Entropy (8bit):	7.995631726941396
Encrypted:	true
SSDEEP:	1536:lv65Wwn0OlJ4vNmQf6ji5k8D6VZkTTqxZxV:Rfwn0OlJfaYp8m3pZxV
MD5:	650FDA997A3BF52D41CEF41BE0555A8A
SHA1:	AC727252ED485CDBF4FC8DCE959CAFDB1F7ECC8D
SHA-256:	2532ED2CA349CE224F0D801E07661D587FFD916EA049F65440057E4A813069B7
SHA-512:	152EF90ED40A563427A3A5544B0CF42629B8CE71C5F4D55FAF9F61BD81F9252B789CF2021D200C0B09CF1C8C3A9BEECBF5287686E7C3372F1F22E0F38C097EE4
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.L...\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De....q.W.~.@......T.y.S7J...f...P....Pz.......a.E..<.m./A,*...Q.....U..q...$.Db,...H<...'....J,..$..;nG.2DHYkL../......=.pB....A?.&...i,......2lo...$.<.s...?~p[......L..&x.qR.u3...6q:....U.Y1.."... .>Un#7@.........."H,@.......?..P....p6.S.[...E].A..G.....q..j4w6......YwI2....[?......<...<..........Eo....d...1....\|......../..cp...S5.......8....r....2...d...aUa>..JRM.-...nT.....qm....b.a...N..OEp..u.Z...2...#.:.@.&O3Q.s..c.(.. ...(..Z....^F.....l..U...bZ..4:.....?T.k.PeU\....L.a..>..t.......jV...B.i7....>b..T....D2...>.X.....v0.y....kMKf..EG..X.....V`e../Sg...->.Vh}.....R..^..OZF..i.(..#..1... P8!&3...D\ .+..".......0...PM.'..!..(...Tdi.;...$D%N .)..#3.V...'r\.... ...&....J\|."Nd%D:uw6.>U.+...H&.Z...T=.&U.v....J.t.0%+...U..3M....y...L......p='.....?%...x:woO.{Q5..0....D).(..

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 245192, version 1.4
Category:	downloaded
Size (bytes):	245192
Entropy (8bit):	7.993984083795472
Encrypted:	true
SSDEEP:	6144:Qbzrur/46YL+cyAB2ZkopDoY44444A44444444444hdJdgoiRMkHO:QbWDBYLoI2Z6Y44444A44444444444hZ
MD5:	6D82FD0D97BD44E9484816A35C937EF9
SHA1:	22FCDBC5DDEC03622F99267218D96E74F83C07BC
SHA-256:	15FE86A41798EBB7F44A0762303B596188AFD537FAD2E9D707125DF61A76EB59
SHA-512:	E20CFC5F004C6B986117F5CE160F18357A418EE396E97B326CFF6E22F2FCF104FD464998B4375384E867E8994B232C52DE8ADABAF651BEEAAEDBC3524F078E86
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/f/6d82fd0d97bd44e9484816a35c937ef9.woff
Preview:	wOFF........................................FFTM............rz.{GDEF...<...2.......VGPOS..D...x.../...GSUB...p...I...$..%COS/2.......`...`y...cmap...............cvt ..&H........'.'.fpgm...l........6...gasp...,...........#glyf..E............ohead.......4...6....hhea.......!...$...uhmtx...l...V..0..A..loca..'.......0...'.maxp....... ... ..."name.......a...&(O..post...p..8....H.s^.prep..#....Q......#Tx.c`d```.)....o.I.....k.^..W.....w.G/.#.H....B...x.c`d`.......{...qw0.E......r.T........%.R.T.k.........\.....K.......%.........3.......3.....f..................@.x....!....MONO. .............X ........^..... ..x...l..y..........<.P...(a.E.(...y...g1.Y..K..c.....d..)...B.E...QjY....Z..C..7..e.....P...>.y.{}}.q*..J_=.=.y...y.s.wJN.?.P..)..V&..5.E.!..o.4$.@V."+......./.!y.{F.qVJ..lpj..}Mj.V.....T....`.0m....@.....y"Y.-.v.....E.....o.X..[.).-.n.,u.......@r.........5.k.&o....._ .<F...w.............p..J,..I._ i.X....4.ER.e....6..[....N.IZ..}Z.{%..n...u{."..)...e..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	427
Entropy (8bit):	7.121042694269167
Encrypted:	false
SSDEEP:	12:6v/7iY7/6Ts/0ogIaicoEPaotywMYRZd2tpIGIxukDnTt:27/67ogIpmaobMud2tTL6nJ
MD5:	FF6A823EABD85E67C626D007C2830BD5
SHA1:	FE6A997A92D1C85055F29BF95D746061BD9BAC5D
SHA-256:	9FAC2F294DE40D7C9D11E392E5DF670BF14D3C536E5B41001FE672BF3F00A828
SHA-512:	446AC55F50BA9F39DDDEE0201106D6E7C96899A3DE78872E3BD5A333D4E755D3777D866C961E157D1FD57350BACA114D9670F67EAF099A65EA35B5C2292C6E02
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................sRGB.........gAMA......a....@IDATx..=..@..'......-N..ba.W......{.S,.S.......,.....(~.uf.."...d.yw..e.mm.G^.g...)@{.8y.D.....E...G......j.^...{.^.^....D.O.....y..Q...>A.X.O..f.3.....$.<`e.....L.$.+..p..t.BH.....XY...7..[.........9.F.v.?.E....Q.....+..n...f......d.$..c9.I.$U@r.PO.y.J..uk..........@.U....Y.^..(.x....<.q?....I `.W..yW"?l....IEND.B`.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9222)
Category:	downloaded
Size (bytes):	194736
Entropy (8bit):	4.193785389467704
Encrypted:	false
SSDEEP:	1536:/IdbqsNUcD5AddbqzNUK5LdbqsNUc65/dbq7gDc+5xdbq7gDc75udbqZmcn50db9:/dw053
MD5:	4DE08422C32F184C4C53312679EAF155
SHA1:	BDC503CD996C21D1F4FEF8AA88A576C25005ACE0
SHA-256:	D8F59368057A15E101CF020875EBB8CF4788D741E60EB2609CA0007D1244A16E
SHA-512:	A0DCDEC60AB9DECD178FD4D083923BC9E5048D9EBE2FDA6C61C58DD160D3BA829120C189DE51B71346F90677A2321F92048FD5588736C34AB3EE47A15DF6D4D0
Malicious:	false
Reputation:	low
URL:	https://l.getsitecontrol.com/m42xj3qw.json
Preview:	{. "widgets": [. {. "id": 248468,. "type": "form",. "layout": "fullscreen",. "sort_order": 131.0,. "name": "Dunning. \u041d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043e\u043f\u043b\u0430\u0442\u0430. Day 14 for PRO user",. "meta_title": null,. "meta_description": null,. "meta_image": null,. "meta_seo": false,. "pages": [. {. "data": {. "note": "",. "title": "<div><br>\u274cYour subscription has been suspended</div>",. "fields": [],. "buttons": [. {. "type": "primary",. "label": "CHOOSE YOUR PLAN",. "actions": [. {. "url": "https://nimbusweb.me/

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://8adbfcfb-4db8a1b1.twuseb.us/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 94040, version 2.137
Category:	downloaded
Size (bytes):	94040
Entropy (8bit):	7.993995111992599
Encrypted:	true
SSDEEP:	1536:ArnFZoLXVN8E9l+sjK9dpBVtKdHKGNxiVcBj9bP5rrjoy8pRfa+v+:moLFLOsm9dRtSHKIxCcrP5rrjoy8pRt+
MD5:	80DF5DA08B99C807A5C6F7AE308E1F89
SHA1:	9F6FD6C54E5D6D36BF805CB756F48F96086F3BAD
SHA-256:	9CB8BD1F1BC33E81434304DA0CB480009C00B4383453DC8B9AADA8FBA623226D
SHA-512:	1EC6587F3E507E2BA15B1DD9DD400B4B48062E7163E7796FF27BD74EC678AAADDA7C5244965D36DA281FA9A5EDA0B89D7BD3EE87D4719D7FFE1AD48911C81083
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/f/80df5da08b99c807a5c6f7ae308e1f89.woff
Preview:	wOFF......oX.......d........................FFTM..o<........s...GDEF..-,...h...~%...GPOS..9\|..5...e.f.lmGSUB..-........Lc...OS/2.......R...`....cmap...X...H....3...cvt .......H...H+~..fpgm.......:...._...gasp..- ............glyf.......q......head.......6...6...[hhea.......!...$.&..hmtx...d.......8'..]loca............%<..maxp....... ... .;. name...h...R...}....post.......b..2f....prep...........)v60......#....._.<...................R..0.....s............x.c`d``...........)g;.P......\|.................N...............A....x.c`f.......u..1...<.f................B4........X...1.c`Hc....2...X.n..c........x..X.pV..=.}....""[).E....4 ..h..A..0R.$X@.........E.(.......2N.m.U+TMA..ju.:...j$...{..c..9s....[...8.Q..E.....<.j.._#vb...3L:.#c....g...A7=.../q..C.W..R......D..E..C.9D!qS.<We.A....j..c....F...a..g...@.IA..%.y...M..T.v..H4.y?.e..'.5\|.....n@.>..n.R3....Z....Y(}..U........I.VD.~..cp.^..:......Q...t....UO....c:...{..9.].=...]%2T.9.C.h#.....Aw..p.c.>.T....1.1..>......e

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	228256
Entropy (8bit):	5.544908621745968
Encrypted:	false
SSDEEP:	3072:HMFitgcnsmIjn+D0RemYasxzuZ1IwPcRCrhl+Phka0Mf3/h9fmCVM3:sYnsmQnZ1HcRCrjFa0Mf3/h9o
MD5:	3D95B8ACE8A92103D1C2EAABC9E16E2C
SHA1:	507095B17B74CADB1141B867315A146AE0A3638C
SHA-256:	C0077D9965B89FFA4314CFE0CE556E3DF764C358C614B847FDE04363277A5CC9
SHA-512:	067B1D4BFBE00A0F559223124CE343E9E98202C5465A1FDC91D38CB14EDB8F2B66166A4FBB846ABAD68FABFE8EE54173C368B97091B1D480FB074290E92184C8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-67774717-30&l=dataLayer&cx=c&gtm=45he4cc1v888117676za204&sign=dae20bfa96e5c957c26bcf6aadba476b24d205cdd5e3613326c2dcbff0525b4a_20241220
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-67774717-30","tag_id":9},{"function":"__rep","vtp_containerId":"UA-67774717-30","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-L1W7VLTSPG"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-67774717-30","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51633)
Category:	downloaded
Size (bytes):	431485
Entropy (8bit):	5.600571968832982
Encrypted:	false
SSDEEP:	6144:Zw/l2wYns2QgiZ1HcRCrZRe5NAma0Mf3/eqC:U2Y2Fi7Hc8ze5aHC
MD5:	05356B7D8FAE40A228FB26329776A0D4
SHA1:	698ADC4B426BA3F4BE0E21DCD2B4329D906D40D2
SHA-256:	716A693BC584C599DAEB5B06176052D633786EC4BE7615270E8AD466B118E0F6
SHA-512:	0AA0195AE4656EF931BD386914A86C5B2E6DCC412D4B46F58A0F4D9075C55B951C656D19B479124104F52FDFA72C6E2BCF938156BD887ED01AD4E09FD83B62D6
Malicious:	false
Reputation:	low
URL:	https://stt.nimbusweb.me/gtlytics.js?id=GTM-WHFRJTP
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"1076",. . "macros":[{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.videoTitle","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoStatus","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoPercent","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"registerDate"},{"functi

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	621
Entropy (8bit):	5.015083447597463
Encrypted:	false
SSDEEP:	12:YW1aU4+LNm3jHJPWxsJqw2sVvm9gbBGa+xaNmd6wpHRD+hvsEvsmaj4PeCtLn:YW1NNm37JP720e9YNMhHeX564GCtL
MD5:	590DB2267453CC28453D99DD6C877FCE
SHA1:	EBDEF69966C6777773875E0F52E8951F1092FDC2
SHA-256:	6842A8FB5F71FDD9A37DB4BDD80D4299B137C6952A9C1AFB76CCF0AB35657D4C
SHA-512:	4E481A32A0BF702225B3A1A0A3F8945149935278E55678E6A7D6119C453A06537A7942DE1D320352F83BD2A7C492E8873D5190D06C5CEE31D9C385D98441F1FD
Malicious:	false
Reputation:	low
Preview:	{"id":"64f97374578641e0","user_id":"64f9737457fd8a48","time":1734727291230,"token":"1734727291.1a75bd90282c1b6a72c32ae029b9554a.89a1242ce5b0a04fea9f2c27fbb1b4ad","geo":{"ip":"8.46.123.189","geopath":"147015:147762:231241:","geoname_id":5128581,"longitude":-74.0068,"latitude":40.7123,"postal_code":"10118","city":"New York","region":"New York","state_code":"NY","country":"United States","country_code":"US","timezone":"America/New_York"},"ua":{"platform":"Desktop","os":"Windows","os_family":"Windows","os_version":"10","browser":"Chrome","browser_family":"Chrome","browser_version":"117.0.0","device":"Other"},"utm":{}}

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (433), with no line terminators
Category:	dropped
Size (bytes):	433
Entropy (8bit):	5.031024929246019
Encrypted:	false
SSDEEP:	6:nvifLFcdXZdLlhr26JcB6SZ0C5mrFtd5hH2XATkRCgO9lVhnGKp5Lx+5hMmmLcY+:q5WXr/2606nC4DzcQTksHnNLx+nNY63
MD5:	607497A71B3F58C69F285D965DFBC6AA
SHA1:	76C5A0E7C41B2E0E84C1C83D7D17E064ABBD8385
SHA-256:	69D8D1F0F122FE1954B10C80F12D43FB5C56F2524460D04CEAE12E4719B4692E
SHA-512:	D9DC72214EE002AB353E4DFBF1BC5DDEB8EB67B3D2CEE272BFDA5A4B58F1C2E241B7A2B3868BED8BF43F02C122E1AD4A385B34BC60FBCF3D48230394075E5E11
Malicious:	false
Reputation:	low
Preview:	"use strict";!function(t,e){if(!e.documentMode){var n=function(){(n.q=n.q\|\|[]).push(arguments)};t.gsc=t.gsc\|\|n;var s=new XMLHttpRequest;s.open("get","https://l.getsitecontrol.com/m42xj3qw.json",!0),s.onload=function(){var n=JSON.parse(s.responseText);if(n&&n.script){var c=e.createElement("script");c.onload=function(){t.gsc.start&&t.gsc.start(n)},c.src=n.script.mjs\|\|n.script,e.head.appendChild(c)}},s.send(null)}}(window,document);

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
Preview:	null

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	dropped
Size (bytes):	11070984
Entropy (8bit):	5.7391432383358065
Encrypted:	false
SSDEEP:	49152:OByig626j7626v0qppvr6ATCSv31NEQ/ypokIq4WqiIn2fhQdXPMKL14vDPKaoXb:lxAPKaYXMBnwb2usMXsM8kxyCX1
MD5:	224C3BBB8D8BBDA5D0FD2056321121DE
SHA1:	14325B59BB88FCA3C22242C0F02FFC1E151BC5AE
SHA-256:	893DA41E10323C6FB5F7E2C01A55A4D7A3D00D8F8CCE01E59F5193C516B8DA90
SHA-512:	1972E20A6853A2E507D58CC5B4F82C3B664633B1365264495E8825E2ED0669BA230451030A9F81E11ECECB6F86A7A8E6F8CF46986B6D7A898A343FA1CE033AF0
Malicious:	false
Reputation:	low
Preview:	/! For license information please see index.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s="./src/client.ts")}({"./node_m

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	228256
Entropy (8bit):	5.544908621745968
Encrypted:	false
SSDEEP:	3072:HMFitgcnsmIjn+D0RemYasxzuZ1IwPcRCrhl+Phka0Mf3/h9fmCVM3:sYnsmQnZ1HcRCrjFa0Mf3/h9o
MD5:	3D95B8ACE8A92103D1C2EAABC9E16E2C
SHA1:	507095B17B74CADB1141B867315A146AE0A3638C
SHA-256:	C0077D9965B89FFA4314CFE0CE556E3DF764C358C614B847FDE04363277A5CC9
SHA-512:	067B1D4BFBE00A0F559223124CE343E9E98202C5465A1FDC91D38CB14EDB8F2B66166A4FBB846ABAD68FABFE8EE54173C368B97091B1D480FB074290E92184C8
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-67774717-30","tag_id":9},{"function":"__rep","vtp_containerId":"UA-67774717-30","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-L1W7VLTSPG"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-67774717-30","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	dropped
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42487
Entropy (8bit):	5.501275537940693
Encrypted:	false
SSDEEP:	768:VonWesvYEWMF6PgVgAgZgjg6gpgBgwgogGgmgYgogugVgYgugggEgWg6gNgMgJgE:2BBJUhE
MD5:	9F91F79F48D929848F219A5898A72D91
SHA1:	CCE8D8689B5BFC502EAD7F746C9352FB9A37BA63
SHA-256:	D332A6D776816EC90D902D9F7A0CFDD817A7BF740B326F4593B70BD7300793BC
SHA-512:	D4055FC603C488C264D0A85C1C698BD853203BDFE4273D39A2DA61402AA996D7F4DF62B8CF4784D9094C31E9BAC004CEEF2E4486D0CC5DD109934829185F2046
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:pdf="http://ns.adobe.com/pdf/1.3/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/". xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/". xmpMM:Inst

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42487
Entropy (8bit):	5.501275537940693
Encrypted:	false
SSDEEP:	768:VonWesvYEWMF6PgVgAgZgjg6gpgBgwgogGgmgYgogugVgYgugggEgWg6gNgMgJgE:2BBJUhE
MD5:	9F91F79F48D929848F219A5898A72D91
SHA1:	CCE8D8689B5BFC502EAD7F746C9352FB9A37BA63
SHA-256:	D332A6D776816EC90D902D9F7A0CFDD817A7BF740B326F4593B70BD7300793BC
SHA-512:	D4055FC603C488C264D0A85C1C698BD853203BDFE4273D39A2DA61402AA996D7F4DF62B8CF4784D9094C31E9BAC004CEEF2E4486D0CC5DD109934829185F2046
Malicious:	false
Reputation:	low
URL:	https://premiumgain.nimbusweb.me/share/dist/assets/loader-32.png
Preview:	.PNG........IHDR... ... .....szz.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:pdf="http://ns.adobe.com/pdf/1.3/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/". xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/". xmpMM:Inst

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	156742
Entropy (8bit):	5.378702325243123
Encrypted:	false
SSDEEP:	3072:6J0OjjXwlzeEvVIZFtBhKTxoghzkJ5lpxQ1V8oDzm:6iO4lzeEvVIZFMTGAkJ5dQ1NDzm
MD5:	9E19B6354DFF8D3DA3D88D0D265E7F5C
SHA1:	D145EDC8AA7F058FE852B95576ACB0C8E3E318B4
SHA-256:	C7414C792B8C81E73B4281D4001E3123BE930980614857D15ECEBE7DA7F42D98
SHA-512:	C19C1A0E2739F1FBF4BC2A41F9B712216D92660F5EA4E05107A69B65886F044A346187C67E358DA6D6DBD2034E68BFA23E8FA36503F57349F44A636282C114C2
Malicious:	false
Reputation:	low
Preview:	/! @build 2.12.0 getsitecontrol 147eb1ea126e08a2c93b /(()=>{var t={615:function(t,e,n){var r;t=n.nmd(t),function(i){e&&e.nodeType,t&&t.nodeType;var o="object"==typeof n.g&&n.g;o.global!==o&&o.window!==o&&o.self;var s,a=2147483647,c=36,l=/^xn--/,u=/[^\x20-\x7E]/,d=/[\x2E\u3002\uFF0E\uFF61]/g,h={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},p=Math.floor,g=String.fromCharCode;function f(t){throw new RangeError(h[t])}function m(t,e){for(var n=t.length,r=[];n--;)r[n]=e(t[n]);return r}function _(t,e){var n=t.split("@"),r="";return n.length>1&&(r=n[0]+"@",t=n[1]),r+m((t=t.replace(d,".")).split("."),e).join(".")}function v(t){for(var e,n,r=[],i=0,o=t.length;i<o;)(e=t.charCodeAt(i++))>=55296&&e<=56319&&i<o?56320==(64512&(n=t.charCodeAt(i++)))?r.push(((1023&e)<<10)+(1023&n)+65536):(r.push(e),i--):r.push(e);return r}function b(t){return m(t,(function(t){var e="";return t>65535&&(e+=g((t-=6

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2388
Entropy (8bit):	5.204582702572379
Encrypted:	false
SSDEEP:	48:YkrkNtHwp9RMXB7r/rPnrdIrHIr0pJkGS09tHOAl4i:drmtayr/rfrdcHc0VX9tuU4i
MD5:	39ADD032FEC88F1D2F2A027EEDC60F0D
SHA1:	A4405ACBC014BB793C0D828F36F586A77889729F
SHA-256:	E981DBC606AE1D423752B90EC793537982B5E0795B87FF38039AEB4E245AAD1E
SHA-512:	C595952FAF0524C2462800D97B7573096F3563D6435A1EC5D6F715A4A08E44E2870566213BA49BCFFD0C37FFF98C3437D5E6BE19EF7F28394FEC2FC3D227A0D8
Malicious:	false
Reputation:	low
Preview:	{"taskLists":[],"notes":[{"globalId":"1Hy4Ofi612giTUWL","parentId":"default","createdAt":1734720456,"dateAdded":1734720456,"dateUpdated":1734720553,"updatedAt":1734720553,"type":"note","role":"note","title":"BIA","url":"","locationLat":0,"locationLng":0,"shared":true,"isSharedForPortal":false,"favorite":false,"lastChangeBy":5,"cntNotes":0,"size":128,"editnote":true,"isEncrypted":false,"isCompleted":false,"workspaceId":"3jytdbmtff8hh48z","isImported":false,"isFullwidth":false,"userId":3545773,"isReady":true,"outliner":true,"emoji":"","isPortalShare":false}],"boards":[],"tasks":[],"assignees":[],"reminders":[],"descriptions":[],"threads":[],"labels":[],"workspaceLabels":[],"members":[],"memberRoles":[],"users":[],"avatars":[],"share":{"id":11450334,"securityKey":"ots3f4w6xehf2feb09wy","dateUpdated":1734720553,"passwordRequired":false,"accessAllowed":true,"noteGlobalId":"1Hy4Ofi612giTUWL","userId":3545773,"note":{"globalId":"1Hy4Ofi612giTUWL","parentId":"default","createdAt":1734720456,"d

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	668
Entropy (8bit):	4.968793420154584
Encrypted:	false
SSDEEP:	12:YC9KY/39qdnafKdJn6HwJlA1gCgmLeBZvbIvSwEwGoX23Dx3GEra2HR:YC0o3mafSDHgivbVjwXGTEErz
MD5:	F1AAD3854C9944CE1FE05CF112A5FF1E
SHA1:	4A91A78E279AEBBFAE8E20C4AE0EEB05FB1BCB42
SHA-256:	4C14D6054E122286D8F34AA993AB43591046600472CB5E48A13166FFF3D37418
SHA-512:	1F01F6DF9CDD4B965EC8A1030BAF08EAA387B1D620E50A686FE12ABB11A73FF2918464E5627985017D06CDFA7B850E0CED820C3440FF421D5ABC4E3CED1FA8C2
Malicious:	false
Reputation:	low
Preview:	{"globalId":"u23zxp","userId":3545773,"createdAt":1729700398,"updatedAt":1729700825,"title":"Premiumgain","sub":"premiumgain","suspended":false,"suspendedReason":"initial","suspendedAt":null,"domain":null,"domainShorter":true,"description":null,"peopleToCollaborate":null,"maxMembers":3,"pricingModel":"en","type":"notes","smallLogoStoredFileUUID":null,"bigLogoStoredFileUUID":null,"isOtherDescription":false,"authFormText":"Never forget anything important!","authFormPrivacyLinkEnabled":true,"authAllowRegistration":true,"privacyLinkText":"Terms & Privacy","privacyLinkUrl":"https://nimbusweb.me/terms-and-conditions.php","orgType":"business","isShareAdEnabled":true}

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	304172
Entropy (8bit):	5.574957933941998
Encrypted:	false
SSDEEP:	6144:u+YnsmQ8z/Z1HcRCrKkEZMf3/mrf9xuT+bsDX:uam9z/7Hc8ybQX
MD5:	87126E546A1FCFE13B70CE098D84E201
SHA1:	3654351D336B2B803A9550CF8E95AEBE204D28C4
SHA-256:	F67C5DC5B0CAE2DF53A2F94A4C0E1FC2B453B9A0B6304A63C3C426CF225AED2D
SHA-512:	5DEC67B3F6BA468788782211262D4AABB5A7E6E54BEBF51AA6596A8ECDB4BDA70D61BCFC1BA3B7B2C0F5DD79558A3F293A1910D5E516FD71EE582268D3A0FB06
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T21:41:19.847123+0100	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	173.255.223.22	443	192.168.2.16	49756	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 21:40:39.384088039 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 21:40:39.687740088 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 21:40:40.293737888 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 21:40:41.496747971 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 21:40:41.616451979 CET	49709	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.617064953 CET	49710	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.625149965 CET	49711	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.736254930 CET	80	49709	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:41.736654043 CET	80	49710	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:41.736758947 CET	49709	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.736766100 CET	49710	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.739324093 CET	49709	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.744781017 CET	80	49711	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:41.744956017 CET	49711	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:41.858933926 CET	80	49709	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:43.141258001 CET	80	49709	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:43.184843063 CET	49709	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:43.564060926 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:43.564119101 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:43.564203978 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:43.564409018 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:43.564425945 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:43.793392897 CET	49689	80	192.168.2.16	192.229.211.108
Dec 20, 2024 21:40:43.901771069 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 21:40:44.916625023 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:44.916685104 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:44.916749001 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:44.916955948 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:44.916974068 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:45.151123047 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:45.151402950 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:45.151436090 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:45.152487040 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:45.152561903 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:45.153740883 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:45.153817892 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:45.154011011 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:45.154033899 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:45.196752071 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.258244991 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.258274078 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.258336067 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.258369923 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.258455038 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.286747932 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.286873102 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.286963940 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.287199974 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.287236929 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.290190935 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.290200949 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.290297031 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.290328979 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.330789089 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.449192047 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.449203014 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.449312925 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.484982014 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.484992027 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.485057116 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.485069990 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.485091925 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.485137939 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.501825094 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.501926899 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.501935005 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.544163942 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.544233084 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.544248104 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.544267893 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.544306993 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.544323921 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.544323921 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.574362040 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:46.574421883 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:46.574491024 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:46.574528933 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:46.574553967 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:46.574595928 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:46.574717999 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:46.574728012 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:46.574843884 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:46.574852943 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:46.597803116 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.616883039 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:46.617149115 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:46.617163897 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:46.618693113 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:46.618973970 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:46.619682074 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:46.619782925 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:46.648756981 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648767948 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648829937 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648865938 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648886919 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648881912 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.648881912 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.648922920 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648933887 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.648946047 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.648977041 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.661767960 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:46.661777973 CET	443	49714	142.250.181.132	192.168.2.16
Dec 20, 2024 21:40:46.681530952 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681569099 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681583881 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681658030 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681657076 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.681657076 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.681673050 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681730986 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.681759119 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681849957 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.681905031 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.682086945 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.682101011 CET	443	49713	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:46.682109118 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.682368040 CET	49713	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:46.709775925 CET	49714	443	192.168.2.16	142.250.181.132
Dec 20, 2024 21:40:46.894537926 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:46.894575119 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:46.894665003 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:46.894670010 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:46.894735098 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:46.894824982 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:46.894892931 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:46.894907951 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:46.895056963 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:46.895076036 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:47.540265083 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 21:40:47.841789961 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 21:40:47.878459930 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:47.878990889 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:47.879056931 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:47.879590988 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:47.879928112 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:47.880018950 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:47.880095005 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:47.921797037 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:47.921807051 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.148322105 CET	80	49709	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:48.148433924 CET	49709	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:48.159121037 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.159631014 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.159645081 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.160634995 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.160758018 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.165246964 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.165297985 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.165380955 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.165385962 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.168348074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.168605089 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.168618917 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.170264959 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.170365095 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.171224117 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.171328068 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.171355009 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.215369940 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.220846891 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.220845938 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.220868111 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.268846035 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.304076910 CET	49709	80	192.168.2.16	200.63.97.50
Dec 20, 2024 21:40:48.423809052 CET	80	49709	200.63.97.50	192.168.2.16
Dec 20, 2024 21:40:48.442841053 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 21:40:48.626904964 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.627388954 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.627403975 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.628299952 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.628370047 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.628458023 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.628894091 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.628912926 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.629518032 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.629569054 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.629726887 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.629733086 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.630376101 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.630448103 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.630681038 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.630747080 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.630769014 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.671344995 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.679810047 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.679814100 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.679831982 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:48.713918924 CET	49673	443	192.168.2.16	204.79.197.203
Dec 20, 2024 21:40:48.727771997 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:48.799050093 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.799083948 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.799140930 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:48.799154043 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.799204111 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:48.812766075 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.812891006 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:48.868077993 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.890427113 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.890537024 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:48.913356066 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913366079 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913412094 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913436890 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913444996 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.913455963 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913475037 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913487911 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.913491964 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.913506985 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.913527966 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.917478085 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917541027 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917560101 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917577028 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917593956 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.917612076 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917629004 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.917629957 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917651892 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917670012 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917689085 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.917700052 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.917732000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.917958021 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.918126106 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:48.964754105 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.964755058 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:48.964778900 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.987812996 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:48.989968061 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.990056038 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:48.994163990 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:48.994247913 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.017086029 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.028784990 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.039304972 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.039334059 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.039391041 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.039417982 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.039474010 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.039491892 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.039514065 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.039542913 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.056054115 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.056138039 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.077164888 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.077173948 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.077236891 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.077250004 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.077264071 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.077303886 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.088540077 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.088638067 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.105030060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105068922 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105118990 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.105120897 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105175972 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105180025 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.105197906 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105211020 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.105218887 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105233908 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.105242014 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.105257034 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.105288029 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.128412962 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.128421068 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.128477097 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.128492117 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.128503084 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.128509998 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.128562927 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.143802881 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.143814087 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.143863916 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.143881083 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.143899918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.143923044 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.143949986 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.143971920 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.184325933 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.184367895 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.184433937 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.184469938 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.184494019 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.184526920 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.193535089 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.193629026 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.220942020 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.221093893 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.221143007 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.221275091 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.221286058 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.225658894 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.225749969 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.225759029 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.234478951 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.234548092 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.234554052 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.234611988 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.239116907 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.239197016 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.245760918 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.245842934 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.251054049 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.251147985 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.253114939 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.253127098 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.253176928 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.253216982 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.253232956 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.253252983 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.253324032 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.254302025 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.254389048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.266319036 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.266340017 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.266442060 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.266449928 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.266496897 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.270733118 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.270822048 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.271910906 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.271940947 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.271981001 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.272022009 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.272047997 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.272123098 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.282481909 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.282596111 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.285015106 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.293426991 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.293531895 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.293555975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.294255972 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.294336081 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.294362068 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.294392109 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.294409990 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.294435024 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.298130989 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.298151016 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.298247099 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.298253059 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.318969965 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.318990946 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.319082975 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.319088936 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.319705963 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.319752932 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.319791079 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.319817066 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.319843054 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.319911957 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.337786913 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.337816000 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.337860107 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.337866068 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.337913990 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.344578028 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.344621897 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.344651937 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.344676018 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.344750881 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.344806910 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.344944954 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.374655008 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.374773026 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.374806881 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.374861956 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.379872084 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.379955053 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.385036945 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.385121107 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.390295982 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.390413046 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.392812967 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.400367975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.400475979 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.400497913 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.400553942 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.402956963 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.403031111 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.405705929 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.405782938 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.413230896 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.413351059 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.413362026 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.413381100 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.413494110 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.418267965 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.418344021 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.420897007 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.420963049 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.425862074 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.425949097 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.428710938 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.428813934 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.435496092 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.435650110 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.443175077 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.443267107 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.451097012 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.451198101 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.451229095 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.458148003 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458225965 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458261967 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.458282948 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458308935 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.458332062 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.458385944 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458398104 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458430052 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458445072 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458473921 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.458482981 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.458551884 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.458551884 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.459299088 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.459374905 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.459407091 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.459460020 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.472578049 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.472661972 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.473062992 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.473073959 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.473112106 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.473153114 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.473159075 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.473207951 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.476865053 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.476932049 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.476983070 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.477001905 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.477055073 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.480350018 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.480442047 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.480473995 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.480529070 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.484302998 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.484380960 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.485296965 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.485316038 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.485384941 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.485390902 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.485430956 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.486753941 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.486830950 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.488996983 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.491008043 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.491086006 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.494534016 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.494596958 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.494622946 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.494637966 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.494695902 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.496525049 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.496639967 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.496670961 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.499878883 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.499989986 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.503460884 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.503478050 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.503531933 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.503535986 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.503601074 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.517359018 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.517432928 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.517462969 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.517483950 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.517519951 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.518511057 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.518538952 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.518605947 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.518611908 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.530864954 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.530905962 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.530941963 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.530946016 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.531028986 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.533958912 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.534022093 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.534045935 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.534065962 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.534140110 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.545144081 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.545166969 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.545257092 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.545263052 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.548774004 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.551532984 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.551580906 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.551629066 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.551645994 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.551686049 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.565690994 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.565788984 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.568850040 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.568938971 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.570451975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.570518017 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.572410107 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.572485924 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.573983908 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.574048042 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.579085112 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.579175949 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.579221010 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.580933094 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.581022024 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.581043005 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.586052895 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.586160898 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.586180925 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.588875055 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.589062929 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.589078903 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.589109898 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.589143038 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.596786976 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.596848011 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.597229958 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.597276926 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.597310066 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.597343922 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.597367048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.598855972 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.598928928 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.598948002 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.599004984 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.602161884 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.602240086 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.605144024 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.605216980 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.605328083 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.605400085 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.611871958 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.611915112 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.611957073 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.611988068 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.612015963 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.618762970 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.618804932 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.618844032 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.618870974 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.618917942 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.618983984 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.619039059 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.621915102 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.622001886 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.624073982 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.624149084 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.637258053 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.637304068 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.637345076 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.637371063 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.637402058 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.644484043 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.644495010 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.644526005 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.644567013 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.644573927 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.644630909 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.644782066 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 21:40:49.648821115 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.648840904 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.648931026 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.648958921 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.655932903 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.655951977 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.656018972 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.656023979 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.656081915 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.661828995 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.661848068 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.661897898 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.661923885 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.661957979 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.663091898 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.663160086 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.663686037 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.663775921 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.666997910 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.667032957 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.667082071 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.667087078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.667159081 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.669120073 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.669214010 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.669260979 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.672653913 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.672754049 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.672794104 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.674817085 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.674906015 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.674933910 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.675072908 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.677037954 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.677134037 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.679716110 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.679835081 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.681114912 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.681138992 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.681226969 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.681253910 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.681860924 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.681885004 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.681958914 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.681966066 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.682025909 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.688858032 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.688875914 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.688955069 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.688971043 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.689610004 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.689629078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.689697027 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.689702988 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.689843893 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.697937012 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.697959900 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.698071957 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.698086977 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.698726892 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.698748112 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.698821068 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.698828936 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.698887110 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.706387997 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.706417084 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.706475019 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.706480026 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.706543922 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.706991911 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.707010984 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.707055092 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.707067013 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.707117081 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.712373972 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.712424994 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.712462902 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.712469101 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.712543011 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.716857910 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.716878891 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.716937065 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.716944933 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.716986895 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.758419991 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.758552074 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.759473085 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.759582043 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.761557102 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.761631012 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.763164043 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.763247013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.764209986 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.764283895 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.765976906 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.766046047 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.766069889 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.766134977 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.766948938 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.767021894 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.768826008 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.768893957 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.768937111 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.770639896 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.770705938 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.770731926 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.770782948 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.773386955 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.773485899 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.775013924 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.775109053 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.775238037 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.775296926 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.776854038 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.776935101 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.779622078 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.779712915 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.782610893 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.782692909 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.782723904 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.782782078 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.783281088 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.784434080 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.784554005 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.784590960 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.784656048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.785981894 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.786056042 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.786086082 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.786153078 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.791941881 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.791989088 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.792059898 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.792121887 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.792212963 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.792234898 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.793759108 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.793832064 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.830116987 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.830137968 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.830265999 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.830291986 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.830455065 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.836292028 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.836447001 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.836456060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.839068890 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.839088917 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.839116096 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.839183092 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.839205980 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.839229107 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.844873905 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.844897985 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.844955921 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.844961882 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.844995022 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.848016977 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.848042011 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.848090887 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.848114967 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.848131895 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.848762035 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.848803997 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.848819017 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.848838091 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.848850012 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.848884106 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.855611086 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.855628967 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.855690956 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.855715036 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.855817080 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.857737064 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.857760906 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.857824087 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.857840061 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.857892990 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.859847069 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.859937906 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.862118959 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.862234116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.862267017 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.866933107 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.867017984 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.867065907 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.869684935 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.869709969 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.869811058 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.869811058 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.869839907 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.873919964 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.873944044 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.874002934 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.874007940 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.874058008 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.874128103 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.878278017 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.878348112 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.878375053 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.878407955 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.878428936 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.879534960 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.879582882 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.879651070 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.879652023 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.879678011 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.879734993 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.885193110 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.885215998 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.885266066 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.885271072 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.885308027 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.885318995 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.887274027 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.887295008 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.887408018 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.887432098 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.887481928 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.892924070 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.892946005 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.893064022 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.893070936 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.893140078 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.895768881 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.895786047 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.895873070 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.895894051 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.895935059 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.900001049 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.900075912 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.900099039 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.900106907 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.900135994 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.900170088 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.904251099 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.904275894 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.904351950 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.904359102 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:49.904402971 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:49.932694912 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.950397968 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.954607010 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.954679012 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.954705000 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.954734087 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.954760075 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.954780102 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.958086967 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.958152056 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.958178997 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.958200932 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.958244085 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.962579966 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.962641954 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.962662935 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.962681055 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.962703943 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.962735891 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.966564894 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.966624022 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.966640949 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.966658115 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.966702938 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.966752052 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.970001936 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.970060110 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.970063925 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.970083952 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.970124960 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.975646019 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.975703955 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.975717068 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.975735903 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.975769043 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.981534958 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.981559038 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.981626034 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.981647968 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.981667995 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.984972954 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:49.985061884 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:49.985069990 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.022536993 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.022561073 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.022650957 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.022666931 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.022725105 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.027796030 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.029011965 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.029032946 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.029210091 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.029216051 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.029285908 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.030998945 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.031028986 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.031188965 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.031200886 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.031267881 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.037938118 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.037959099 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.038037062 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.038060904 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.038124084 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.040019035 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.040044069 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.040108919 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.040115118 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.040167093 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.040167093 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.046339035 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.046359062 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.046489954 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.046498060 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.046647072 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.047120094 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.047197104 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.047200918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.047213078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.047334909 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.052676916 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.052747965 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.052777052 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.052858114 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.052882910 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.053354025 CET	49718	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.053366899 CET	443	49718	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.055517912 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.055613995 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.055686951 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.056189060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.056219101 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.056260109 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.056263924 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.056345940 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.061789989 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.061815977 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.061873913 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.061897993 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.061935902 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.061981916 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.062526941 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.062602043 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.062608004 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.062621117 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.062711000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.063884974 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.064022064 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.064028978 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.064099073 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.071672916 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.071693897 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.072057962 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.072066069 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.072273970 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.076668978 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.076688051 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.076987982 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.076994896 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.077131987 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.081439018 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.081464052 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.081933022 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.081938982 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.082348108 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.143722057 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.143825054 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.143873930 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.143894911 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.143922091 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.144996881 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.149374008 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.149393082 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.149648905 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.149661064 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.150088072 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.151810884 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.152925968 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.156102896 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.156155109 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.156251907 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.156251907 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.156270981 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.158535004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.158572912 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.159631014 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.159641027 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.161036015 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.162094116 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.162147999 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.162177086 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.162184954 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.163666964 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.163789988 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.163798094 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.165667057 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.165819883 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.165827990 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.166611910 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.168185949 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.168550014 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.168555975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.170017004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.170216084 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.170222998 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.173207045 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.173367023 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.173373938 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.178807020 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.178827047 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.178893089 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.178905964 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.178931952 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.179630041 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.219268084 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.219348907 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.219417095 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.219430923 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.219461918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.220240116 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.220674038 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.220681906 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.228007078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.228055954 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.228212118 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.228212118 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.228219032 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.234932899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.234951973 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.235276937 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.235301018 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.243346930 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.243372917 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.243541002 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.243547916 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.244945049 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.245181084 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.248692036 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.248788118 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.248847008 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.248872042 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.249125957 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.251523018 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.251543045 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.251774073 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.251780987 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.251849890 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.252222061 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.252350092 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.252897978 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.253190994 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.254909992 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.255095005 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.257143974 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.257164001 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.257174015 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.257189989 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.257282972 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.257282972 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.257297039 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.259829044 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.259876013 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.259943008 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.259946108 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.259952068 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.260006905 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.260006905 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.264918089 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.264940023 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.265312910 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.265319109 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.265530109 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.272394896 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.272417068 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.272651911 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.272658110 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.272850037 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.308033943 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.308059931 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.308478117 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.308490992 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.308871031 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.333441973 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.333693027 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.333700895 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.334503889 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.334882021 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.336669922 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.336776018 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.342775106 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.342792988 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.342919111 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.342938900 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.343086958 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.344471931 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.344664097 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.346261978 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346313000 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346333981 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346354008 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346390963 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346409082 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346446991 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.346446991 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.346478939 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.346520901 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.347145081 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.347296953 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.347296953 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.347336054 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.349143028 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.349277020 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.349292994 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.349441051 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.350744963 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.350918055 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.351675987 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.351878881 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.354096889 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.354466915 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.358108997 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.358156919 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.358274937 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.358274937 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.358285904 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.360338926 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.360670090 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.360692978 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.361027002 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.363483906 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.363606930 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.363622904 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.366316080 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.366499901 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.366508007 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.375895977 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.399039030 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.399049997 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.399116993 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.399154902 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.399211884 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.399218082 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.399236917 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.399274111 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.399300098 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.399300098 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.407823086 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.415529013 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.415652037 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.428626060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.428657055 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.428946972 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.428956985 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.429219961 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.435187101 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.435270071 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.435331106 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.435352087 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.435380936 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.435878038 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.435981035 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.436003923 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.436089993 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.437079906 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.437222958 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.439043045 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.439212084 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.439237118 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.439604044 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.439650059 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.439659119 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.439686060 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.441684008 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.441840887 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.441863060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.442344904 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.442636967 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.442653894 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.443059921 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.443751097 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.443830967 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.445172071 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.445269108 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.445878983 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.447993994 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.448523045 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.448538065 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.448844910 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.449444056 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.449671030 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.450922012 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.450951099 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.451107979 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.451116085 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.451159000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.453542948 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.453768015 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.453810930 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.453826904 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.454092026 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.459044933 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.459065914 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.459335089 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.459341049 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.459476948 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.465775013 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.465795040 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.466145039 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.466159105 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.467206001 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.467227936 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.467360020 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.467360020 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.467366934 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.469188929 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.474123001 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.474142075 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.474308014 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.474313021 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.474630117 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.480999947 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.481075048 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.481210947 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.481225014 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.481297970 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.481966972 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.482232094 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.482239008 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.486788988 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.486814976 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.486987114 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.486993074 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.520934105 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.521953106 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.521981955 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.522113085 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.522113085 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.522119045 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.526644945 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.526822090 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.528496981 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.528692961 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.529402971 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.529820919 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.530766964 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.530885935 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.532368898 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.532505989 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.533416033 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.533556938 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.534997940 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.535300970 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.535792112 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.537549019 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.537677050 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.538184881 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.538381100 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.539398909 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.539706945 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.541682005 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.541894913 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.545245886 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.545263052 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.545367956 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.547257900 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.547327042 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.547374010 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.547382116 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.547415972 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.547714949 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.549763918 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.549813032 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.549849033 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.549855947 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.553016901 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.555346012 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.555403948 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.555480003 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.555480003 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.555488110 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.555577040 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.557950020 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.558125973 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.558746099 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.558873892 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.559792995 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.559915066 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.562752962 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.562783003 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.562872887 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.562872887 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.562886953 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.574140072 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.574299097 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.574305058 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.574436903 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.584916115 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.584944010 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.585024118 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.585073948 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.585087061 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.585141897 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.585149050 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.585195065 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.585221052 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.585221052 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.585711956 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.616281986 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.616302967 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.616353989 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.616420031 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.616435051 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.616472006 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.616492033 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.617027998 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.621507883 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.621546984 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.621676922 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.621676922 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.621690035 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.621875048 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.626832008 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.627104044 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.628734112 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.628871918 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.630646944 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.630669117 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.630781889 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.630781889 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.630789042 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.630901098 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.632016897 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.632086992 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.632124901 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.632141113 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.633121014 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.633414984 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.633553982 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.638346910 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.638391972 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.638495922 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.638495922 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.638518095 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.639724016 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.639970064 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.639992952 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.640384912 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.640430927 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.641103029 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.641129971 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.641237020 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.641237974 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.641256094 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.641364098 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.647519112 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.647597075 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.647659063 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.647665977 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.647701979 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.653089046 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.653109074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.653402090 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.653413057 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.657053947 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.657237053 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.657253981 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.658513069 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.658533096 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.658624887 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.658624887 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.658633947 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.661973000 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.662008047 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.662358046 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.662372112 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.662753105 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.665956974 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.665977001 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.666066885 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.666066885 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.666076899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.673492908 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.673515081 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.673634052 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.673634052 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.673641920 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.676413059 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.676733017 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.676742077 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.692945004 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.700329065 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.700352907 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.700474977 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.700474977 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.700483084 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.708781958 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.718822956 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.718991995 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.719007015 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.721345901 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.721647024 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.721674919 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.721684933 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.721906900 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.723822117 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.724304914 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.724463940 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.724791050 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.724807024 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.724889994 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.724889994 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.724895954 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.726098061 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.726270914 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.728135109 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.728466034 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.728775978 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.728847027 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.729091883 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.729233027 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.730135918 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.730309963 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.732031107 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.732202053 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.732728004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.732840061 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.734939098 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.735100031 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.735485077 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.735769033 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.735837936 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.736481905 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.736494064 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.736562967 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.736598015 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.736617088 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.736738920 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.736932039 CET	49720	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.736946106 CET	443	49720	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.737193108 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.737380981 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.737389088 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.737665892 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.738423109 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.738532066 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.741542101 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.741913080 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.741919041 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.742026091 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.745892048 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.745933056 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.746429920 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.746438026 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.746686935 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.746885061 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.746891975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.748353004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.748505116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.748512030 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.750813007 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.750978947 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.750984907 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.751435995 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.751585960 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.751591921 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.772952080 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.777205944 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.777213097 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.777245998 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.777272940 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.777343035 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.777348995 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.777443886 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.777443886 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.796061039 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.796111107 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.796209097 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.796209097 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.796214104 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.796283960 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.802779913 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.818094015 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.818105936 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.818126917 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.818239927 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.818240881 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.818248987 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.818447113 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.823422909 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.823534012 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.825375080 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.825573921 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.826772928 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.826796055 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.827002048 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.827011108 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.827316999 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.827403069 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.827406883 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.830559015 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.830698013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.830704927 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.830856085 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.831974030 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.832098961 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.832705975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.832928896 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.834908962 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.835232973 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.836925983 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.836956024 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.837038994 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.837038994 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.837044954 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.837204933 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.837605953 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.837733030 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.841845989 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.841860056 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.842014074 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.842020035 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.842310905 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.843249083 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.843588114 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.843974113 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.844019890 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.844063997 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.844072104 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.844096899 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.851026058 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.851054907 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.851066113 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.851093054 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.851108074 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.851111889 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.851161003 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.851167917 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.851167917 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.853105068 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.853179932 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.853323936 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.853462934 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.853463888 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.856364965 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.856403112 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.856515884 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.856524944 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.856544971 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.857661009 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.857681990 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.857686996 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.857701063 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.857906103 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.857928038 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.858215094 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.858227968 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.858424902 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.858433962 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.862607956 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.862626076 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.862843990 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.862853050 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.870130062 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.870151997 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.870290995 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.870290995 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.870300055 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:50.885803938 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.885828972 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.885941982 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.885942936 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.885986090 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.886045933 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.886219978 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.886233091 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.886317015 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:50.886333942 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:50.910686970 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.910816908 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.911130905 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.911227942 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.911894083 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.912250996 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.913012028 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.913130999 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.914469004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.914596081 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.914604902 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.914813042 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:50.917098999 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.917260885 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.917268038 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.917325020 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.920998096 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.921066046 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.921103954 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.921111107 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.921144962 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.923285007 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.923485994 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.923494101 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.924058914 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.924416065 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.924424887 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.924946070 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.925126076 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.925133944 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.925854921 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.925966024 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.925972939 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.926075935 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.929616928 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.929661036 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.929699898 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.929708004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.929821968 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.931834936 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.932004929 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.933588028 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.933979034 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.934583902 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.934653044 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.936485052 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.936613083 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.937289953 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.937350988 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.941854000 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.941898108 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.941932917 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.941941023 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.941972017 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.944246054 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.944375992 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:50.944384098 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:50.944449902 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.010924101 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.010940075 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.010981083 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.011029959 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.011038065 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.011140108 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.016345024 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.016501904 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.018728018 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.018938065 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.019294977 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.019946098 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.019964933 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.020153046 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.020158052 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.020435095 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.020570993 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.020755053 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.020766973 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.020914078 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.025516987 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.025574923 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.025612116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.025621891 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.025881052 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.028976917 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.028995991 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.029311895 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.029318094 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.029464960 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.033890009 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.033910036 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.034049988 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.034054995 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.034169912 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.040925026 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.040944099 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.041260958 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.041265965 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.041428089 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.048654079 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.048680067 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.048928976 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.048937082 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.053155899 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.056070089 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.056086063 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.056169987 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.056178093 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.056227922 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.063116074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.063133001 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.063225985 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.063242912 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.063328028 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.102615118 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.102678061 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.102705956 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.102720022 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.102773905 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.103626966 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.103718996 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.105762005 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.105838060 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.107981920 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.108051062 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.108112097 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.108988047 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.109065056 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.109074116 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.109132051 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.110589027 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.110658884 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.111427069 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.111486912 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.114206076 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.114284992 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.114917040 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.114984035 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.116656065 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.116740942 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.117554903 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.117619038 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.119416952 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.119492054 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.121002913 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.121066093 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.121328115 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.121387959 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.122637987 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.122705936 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.123711109 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.123780966 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.124468088 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.124532938 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.126966000 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.127041101 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.128321886 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.128390074 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.128995895 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.129065037 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.130458117 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.130542040 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.131302118 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.131375074 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.132844925 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.132917881 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.134401083 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.134478092 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.167790890 CET	49719	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:51.167824984 CET	443	49719	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:51.202884912 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.202905893 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.202996969 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.203017950 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.203072071 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.207926989 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.208029985 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.212697029 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.212713003 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.212724924 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.212781906 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.212785959 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.212799072 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.212863922 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.212879896 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.212929010 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.220603943 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.220653057 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.220688105 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.220699072 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.220787048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.222642899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.222665071 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.222750902 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.222764015 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.222814083 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.226838112 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.226846933 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.226916075 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.226926088 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.226969004 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.226984024 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.234378099 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.234384060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.234483957 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.234493971 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.234535933 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.240957022 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.241029978 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.241055965 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.241066933 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.241101980 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.241131067 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.248439074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.248482943 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.248517990 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.248523951 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.248569965 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.256138086 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.256179094 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.256216049 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.256222010 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.256268978 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.297806978 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.297835112 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.297914028 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.297943115 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.298005104 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.303411961 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.303430080 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.303512096 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.303520918 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.303580999 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.310236931 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.310259104 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.310307026 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.310312986 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.310344934 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.310367107 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.312937021 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.312983990 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.313015938 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.313023090 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.313080072 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.328280926 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.328306913 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.328356981 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.328363895 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.328396082 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.328413010 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.328990936 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.329049110 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.331027985 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.331099033 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.331710100 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.331764936 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.332434893 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.332492113 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.333781958 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.333834887 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.335244894 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.335316896 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.395360947 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.395411015 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.395438910 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.395457983 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.395477057 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.395488977 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.401350975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.401437998 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.403417110 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.403479099 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.404714108 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.404771090 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.405896902 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.405945063 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.405978918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.405991077 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.406013012 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.406033039 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.408170938 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.408255100 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.408788919 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.408853054 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.410896063 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.410978079 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.412431002 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.412493944 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.412945986 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.413017035 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.414196968 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.414268970 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.414920092 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.414973974 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.414997101 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.415008068 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.415049076 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.415059090 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.415323973 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.419241905 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.419284105 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.419317007 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.419325113 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.419358015 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.419368029 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.424540997 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.424583912 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.424624920 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.424633980 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.424686909 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.432786942 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.432841063 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.432862997 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.432872057 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.432895899 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.432915926 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.439881086 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.439922094 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.439981937 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.439989090 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.440030098 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.447643042 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.447685003 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.447710037 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.447729111 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.447772980 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.469748020 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.488922119 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.489001036 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.489016056 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.490598917 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.490659952 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.490668058 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.490729094 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.493066072 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.493123055 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.493375063 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.493437052 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.494589090 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.494641066 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.495382071 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.495435953 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.496350050 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.496407986 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.497415066 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.497472048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.498590946 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.498661041 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.499356985 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.499422073 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.500170946 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.500221014 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.501352072 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.501457930 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.503680944 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.503763914 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.505964994 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.506366014 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.506462097 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.506522894 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.508883953 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.508955002 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.510617018 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.510682106 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.513263941 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.513329983 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.515351057 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.515417099 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.517251968 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.517319918 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.518898010 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.518975973 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.519654036 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.519709110 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.587234020 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.587300062 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.587361097 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.587378979 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.587404013 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.587414980 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.594537020 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.594583988 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.594614983 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.594630003 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.594676018 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.595236063 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.595288038 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.595319986 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.595328093 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.595346928 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.595366001 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.596486092 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.596609116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.597915888 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.597984076 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.599328041 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.599390984 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.600717068 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.600775003 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.603600979 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.603661060 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.605757952 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.605792999 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.605829000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.605838060 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.605858088 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.605879068 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.611335993 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.611357927 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.611409903 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.611417055 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.611442089 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.611462116 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.616556883 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.616578102 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.616638899 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.616647005 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.616693974 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.624769926 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.624777079 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.624849081 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.624856949 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.624892950 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.631819010 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.631845951 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.631884098 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.631890059 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.631920099 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.631930113 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.639910936 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.639935970 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.639974117 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.639981985 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.640008926 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.640028954 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.679461956 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.679502964 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.679538012 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.679558992 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.679594994 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.680423975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.680479050 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.681332111 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.681391954 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.682642937 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.682698965 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.686253071 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.686304092 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.686330080 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.686342955 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.686356068 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.686942101 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.686995983 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.687001944 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.687052011 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.687843084 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.687896013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.689549923 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.689608097 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.692177057 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.692240000 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.692245960 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.692295074 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.693891048 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.693948030 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.695101976 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.695162058 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.698173046 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.698240995 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.698246002 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.699135065 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.699194908 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.699201107 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.699242115 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.699249029 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.700819969 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.700902939 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.700907946 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.700959921 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.701103926 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.701873064 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.701921940 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.701927900 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.701987028 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.702529907 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.703532934 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.703583002 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.703588963 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.703624964 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.706635952 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.706700087 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.706705093 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.708113909 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.708170891 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.708175898 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.708215952 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.708997011 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.709355116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.709877968 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.709933996 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.710937023 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.711005926 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.779037952 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.779067039 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.779114962 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.779134035 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.779160023 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.779181004 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.785721064 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.785756111 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.785789013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.785815001 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.785855055 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.786993027 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.787055016 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.787780046 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.787801027 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.787848949 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.787858963 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.787870884 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.787895918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.788455009 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.788502932 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.789593935 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.789655924 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.794508934 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.794550896 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.794675112 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.794698000 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.794744968 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.795944929 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.796009064 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.797422886 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.797472000 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.798185110 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.798207045 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.798249960 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.798259020 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.798285007 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.798300028 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.801902056 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.801914930 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.801958084 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.802136898 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.802143097 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.802182913 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.809070110 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.809148073 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.809148073 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.809164047 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.809201956 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.816518068 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.816545963 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.816606998 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.816616058 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.816654921 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.816654921 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.824326992 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.824354887 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.824441910 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.824441910 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.824451923 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.824547052 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.832115889 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.832144976 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.832299948 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.832308054 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.832354069 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.832354069 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.874126911 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.874181032 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.874205112 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.874222040 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.874248981 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.874264956 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.877568007 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.877607107 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.877633095 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.877643108 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.877681017 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.878585100 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.878639936 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.879875898 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.879925013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.880722046 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.880773067 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.881601095 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.881650925 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.882647991 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.882704020 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.884141922 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.884191036 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.886377096 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.886440992 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.886969090 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.887026072 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.888478041 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.888541937 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.889705896 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.889766932 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.891925097 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.891985893 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.892122030 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.892860889 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.892915964 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.892924070 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.892972946 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.893802881 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.894841909 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.894892931 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.894898891 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.894954920 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.897432089 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.897494078 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.898016930 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.899282932 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.899472952 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.899478912 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.899525881 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.901494980 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.901565075 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.903598070 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.903659105 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.904474974 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.904540062 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.971745014 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.971775055 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.971827984 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.971854925 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.971920013 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.971920013 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.976485014 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.976571083 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.979022026 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.979096889 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.980315924 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.980345011 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.980415106 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.980415106 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.980427027 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.980474949 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.980885983 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.980937958 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.982187986 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.982263088 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.984302044 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.984370947 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.985017061 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.985074043 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.988521099 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:51.988591909 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:51.989345074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.989367008 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.989420891 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.989428997 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.989465952 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.989465952 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.994379044 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.994405985 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.994484901 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.994484901 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:51.994493961 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:51.994534016 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.001446009 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.001482964 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.001526117 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.001535892 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.001579046 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.001579046 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.008940935 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.008980989 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.009038925 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.009038925 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.009046078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.009233952 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.013994932 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 21:40:52.016597986 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.016625881 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.016710997 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.016710997 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.016717911 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.016797066 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.023449898 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.023478031 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.023533106 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.023539066 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.023569107 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.023612976 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.045773029 CET	49678	443	192.168.2.16	20.189.173.10
Dec 20, 2024 21:40:52.063467979 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.063535929 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.066350937 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.066405058 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.066430092 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.066462040 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.066492081 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.067186117 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.067307949 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.067339897 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.067395926 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.068778038 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.068840027 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.068958044 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.069020033 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.071327925 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.071397066 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.074528933 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.074577093 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.074594975 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.074613094 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.074664116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.075306892 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.075428009 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.076031923 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.076159000 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.077372074 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.077475071 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.078484058 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.078665972 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.079405069 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.079771042 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.080487013 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.080710888 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.082557917 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.082649946 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.083848000 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.083956003 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.085732937 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.085793972 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.088229895 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.088300943 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.088920116 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.088995934 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.090251923 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.090374947 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.094271898 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.094322920 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.094363928 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.094369888 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.094398022 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.094434023 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.163440943 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.163469076 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.163594961 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.163594961 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.163608074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.163666010 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.168143034 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.169322014 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.169801950 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.169905901 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.170461893 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.170579910 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.172372103 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.172394037 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.172698975 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.172707081 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.173098087 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.173141956 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.173343897 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.177860975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.177916050 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.177959919 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.177978992 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.178206921 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.180658102 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.180742979 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.181366920 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.181380987 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.181571960 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.181579113 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.181672096 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.186451912 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.186465979 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.186603069 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.186618090 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.187108994 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.193511963 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.193526983 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.193622112 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.193628073 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.193793058 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.201263905 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.201277971 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.201632977 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.201639891 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.201723099 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.208690882 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.208705902 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.208920956 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.208926916 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.209028959 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.215509892 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.215523005 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.217963934 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.217979908 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.218549967 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.255146980 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.255543947 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.255587101 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.255609989 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.255660057 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.255733013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.256469965 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.256740093 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.257186890 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.257822037 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.258639097 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.258846998 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.259387016 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.259529114 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.261006117 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.261358976 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.265166998 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.265233040 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.265239000 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.265255928 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.265302896 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.265378952 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.265944004 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.266041040 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.267780066 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.267865896 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.269078016 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.269167900 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.272332907 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.272387981 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.272433996 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.272471905 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.272521019 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.277704000 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.277719975 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.277806044 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.277806044 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.277843952 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.277986050 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.282762051 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.282780886 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.282839060 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.282881021 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.282926083 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.282948017 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.284871101 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.284929037 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.285748005 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.285808086 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.317784071 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 21:40:52.355494022 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.355515003 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.355592012 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.355604887 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.355722904 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.361000061 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.361099958 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.361989021 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.362181902 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.363411903 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.363507986 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.364123106 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.364141941 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.364257097 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.364265919 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.364356041 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.368314981 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.368385077 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.368407965 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.368441105 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.368547916 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.372493029 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.372543097 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.372582912 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.372596979 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.372994900 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.373965979 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.373986006 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.374063015 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.374104977 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.374109983 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.374217033 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.378027916 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.378047943 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.378107071 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.378123999 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.378216982 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.385586023 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.385607004 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.385716915 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.385723114 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.385853052 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.387600899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.387702942 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.392523050 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.392560005 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.392591953 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.392608881 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.392746925 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.399585009 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.399677038 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.399715900 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.399720907 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.399744987 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.399766922 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.407433987 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.407506943 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.407567978 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.407573938 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.407617092 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.407728910 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.432950974 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.434279919 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.434295893 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.434614897 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.435034037 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.435098886 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.435169935 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.436074972 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.437954903 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.438004017 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.438374996 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.439603090 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.439673901 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.439827919 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.447164059 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.447619915 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.448280096 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.448389053 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.450651884 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.450747967 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.452589035 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.452666998 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.457175970 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.457241058 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.457297087 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.457323074 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.457359076 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.457906008 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.457951069 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.457964897 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.457993984 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.459080935 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.459191084 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.459204912 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.459382057 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.460374117 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.460509062 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.461133003 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.461481094 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.462961912 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.463115931 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.465378046 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.465473890 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.465626955 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.467009068 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.467355013 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.469209909 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.469415903 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.474672079 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.474708080 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.474788904 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.474788904 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.474806070 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.475097895 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.476130962 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.476387024 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.476855040 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.476864100 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.487322092 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.492866993 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.605357885 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.605384111 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.605535984 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.605578899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.605742931 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.608397961 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.608474970 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.608519077 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.608584881 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.608906031 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.611146927 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.611223936 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.611793995 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.611891985 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.613985062 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.614043951 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.614090919 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.614101887 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.614115000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.614490986 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.614521980 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.614614964 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.614629984 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.614835978 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.616137981 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.616413116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.620177031 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.620246887 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.620285988 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.620300055 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.620338917 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.622947931 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.622963905 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.623183966 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.623193026 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.623291016 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.627772093 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.627785921 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.627908945 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.627917051 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.628211021 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.635451078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.635467052 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.635736942 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.635745049 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.635879993 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.636998892 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.637124062 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.641859055 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.641959906 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.641993999 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.642002106 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.642184019 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.649698973 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.649714947 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.649832964 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.649841070 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.650115967 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.657284021 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.657298088 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.657536030 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.657542944 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.657718897 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.668788910 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.690964937 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.691252947 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.691279888 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.692889929 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.693008900 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.693125963 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.693299055 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.693377972 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.693423986 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.693443060 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.693522930 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.693530083 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.694446087 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.694696903 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.694885969 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.694885969 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.694952965 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.721491098 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.721563101 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.721658945 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.721702099 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.721875906 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.723236084 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.723474979 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.724726915 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.724912882 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.725934982 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.726011038 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.731167078 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.731195927 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.731297016 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.731297016 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.731349945 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.732964039 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.733145952 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.733164072 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.733867884 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.734450102 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.734467030 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.734611034 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.736824036 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.737415075 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.737600088 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.737781048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.743254900 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.743280888 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.743379116 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.743380070 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.743411064 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.745242119 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.745359898 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.745377064 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.745707989 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.748774052 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.748775959 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.748804092 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:52.749397039 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.749438047 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.749483109 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.749505997 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.749538898 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.751246929 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.796842098 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:52.804796934 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.804819107 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.805007935 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.805041075 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.805121899 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.806902885 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.807008028 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.807764053 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.807856083 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.807926893 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.807949066 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.807982922 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.808346987 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.808451891 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.808461905 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.808532953 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.810967922 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.811165094 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.811609030 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.811652899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.811738014 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.811748028 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.812089920 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.812999964 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.813379049 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.815747976 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.815906048 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.816519022 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.816710949 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.821440935 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.821460009 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.821624994 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.821635008 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.821934938 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.825752020 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.825767040 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.825845003 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.825845957 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.825855017 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.825944901 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.833585978 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.833600998 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.833687067 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.833698034 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.833775997 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.835824013 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.835968971 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.840128899 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.840159893 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.840214968 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.840223074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.841181040 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.847628117 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.847645044 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.847817898 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.847826958 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.848768950 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.855509996 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.855531931 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.855873108 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.855881929 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.856117964 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.863009930 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.863025904 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.863142014 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.863148928 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:52.863290071 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:52.913049936 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.913157940 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.913213015 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.913238049 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.913319111 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.917418957 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.917469025 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.917507887 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.917526007 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.917556047 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.917865992 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.922411919 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.922435045 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.922512054 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.922528028 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.922658920 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.923790932 CET	49680	80	192.168.2.16	192.229.211.108
Dec 20, 2024 21:40:52.928430080 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.928447962 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.928503036 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.928518057 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.928546906 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.928627014 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.932195902 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.932238102 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.932327032 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.932327032 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.932343960 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.933479071 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.933602095 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.933614016 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.938015938 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.938054085 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.938097954 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.938110113 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.938139915 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.941200972 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.941243887 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.941498995 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.941513062 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.941576958 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.941942930 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.942035913 CET	443	49716	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:52.942059994 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.942141056 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.942141056 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:52.942187071 CET	49716	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.002425909 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.002470016 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.002513885 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.002527952 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.002552032 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.009907007 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.009927988 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.010016918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.010025024 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.010035992 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.016163111 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.016185999 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.016262054 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.016262054 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.016269922 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.024777889 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.024801016 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.024883032 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.024883032 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.024890900 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.032419920 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.032463074 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.032551050 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.032551050 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.032557964 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.038978100 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.038999081 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.039192915 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.039199114 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.046650887 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.046689987 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.046817064 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.046823978 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.046853065 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.053924084 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.053942919 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.054013968 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.054020882 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.054160118 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.099754095 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.191684961 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.191699982 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.191724062 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.191771030 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.191783905 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.191822052 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.191839933 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.199414968 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.199424028 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.199456930 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.199579000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.199579000 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.199665070 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.199851990 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.207252979 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.207269907 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.207334995 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.207345009 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.207355976 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.207528114 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.214215040 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.214231014 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.214318037 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.214324951 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.214363098 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.223040104 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.223056078 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.223112106 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.223118067 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.223160028 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.229341030 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.229355097 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.229424953 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.229430914 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.229466915 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.237032890 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.237047911 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.237261057 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.237268925 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.237317085 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.244975090 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.244988918 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.245048046 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.245054960 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.245106936 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.348629951 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.348654985 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.348732948 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.348752022 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.348808050 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.351038933 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.351068020 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.351136923 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.351176977 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.351244926 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.372283936 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.372297049 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.372412920 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.374295950 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.374306917 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.374370098 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.378748894 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378813982 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378835917 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378854990 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378873110 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.378885031 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378895044 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.378900051 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378921032 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378938913 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378962040 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.378968954 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.378984928 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.380719900 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380745888 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380757093 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380775928 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380789042 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380794048 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.380801916 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380816936 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.380820990 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.380852938 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.380868912 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.382299900 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.382354975 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.384064913 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.384084940 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.384152889 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.384160042 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.384203911 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.391392946 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.391407967 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.391475916 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.391482115 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.391521931 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.399288893 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.399307966 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.399370909 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.399377108 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.399416924 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.406196117 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.406207085 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.406256914 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.406306982 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.406311989 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.406363010 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.415010929 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.415025949 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.415080070 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.415085077 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.415129900 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.418785095 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.421488047 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.421502113 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.421564102 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.421570063 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.421624899 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.429111958 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.429135084 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.429205894 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.429212093 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.429248095 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.436950922 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.436965942 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.437017918 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.437025070 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.437053919 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.437072039 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.438841105 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.469991922 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.470001936 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.470067978 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.482884884 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.542330027 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.542397976 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.542416096 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.542440891 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.542491913 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.542658091 CET	49724	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.542686939 CET	443	49724	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.545154095 CET	49727	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.545197010 CET	443	49727	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.545270920 CET	49727	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.545880079 CET	49727	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.545898914 CET	443	49727	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.558620930 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.558665991 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.558701038 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.558717012 CET	443	49725	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.558769941 CET	49725	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.560726881 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.560735941 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.560782909 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.560795069 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.560834885 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.560844898 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.560857058 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.560872078 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.560914993 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.560944080 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.560944080 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.560960054 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.560964108 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.560986996 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.561016083 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.561022997 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.561034918 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.561062098 CET	49726	443	192.168.2.16	18.66.161.15
Dec 20, 2024 21:40:53.575937033 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.575954914 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.576018095 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.576025009 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.576078892 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.583700895 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.583714962 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.583781958 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.583787918 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.583889008 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.591391087 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.591406107 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.591480017 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.591487885 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.591537952 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.593487024 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.593555927 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.593575001 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.598541021 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.598556995 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.598611116 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.598618031 CET	443	49717	3.160.185.95	192.168.2.16
Dec 20, 2024 21:40:53.598651886 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.598676920 CET	49717	443	192.168.2.16	3.160.185.95
Dec 20, 2024 21:40:53.602556944 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.602632046 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.602638960 CET	443	49723	216.137.52.31	192.168.2.16
Dec 20, 2024 21:40:53.602705002 CET	49723	443	192.168.2.16	216.137.52.31
Dec 20, 2024 21:40:53.603355885 CET	443	49726	18.66.161.15	192.168.2.16
Dec 20, 2024 21:40:53.603420973 CET	443	49726	18.66.161.15	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 21:40:40.837169886 CET	192.168.2.16	1.1.1.1	0x6555	Standard query (0)	aselog24x7.cl	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:40.837779999 CET	192.168.2.16	1.1.1.1	0xcf89	Standard query (0)	aselog24x7.cl	65	IN (0x0001)	false
Dec 20, 2024 21:40:43.143865108 CET	192.168.2.16	1.1.1.1	0x84d3	Standard query (0)	premiumgain.nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:43.144066095 CET	192.168.2.16	1.1.1.1	0x4157	Standard query (0)	premiumgain.nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:40:44.778604984 CET	192.168.2.16	1.1.1.1	0x52ea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:44.778744936 CET	192.168.2.16	1.1.1.1	0x5307	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 21:40:46.281389952 CET	192.168.2.16	1.1.1.1	0xc9fd	Standard query (0)	d3hogio4d1txum.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.281542063 CET	192.168.2.16	1.1.1.1	0x15ca	Standard query (0)	d3hogio4d1txum.cloudfront.net	65	IN (0x0001)	false
Dec 20, 2024 21:40:46.685628891 CET	192.168.2.16	1.1.1.1	0xfa00	Standard query (0)	nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.685841084 CET	192.168.2.16	1.1.1.1	0xe26d	Standard query (0)	nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:40:50.742311954 CET	192.168.2.16	1.1.1.1	0xc822	Standard query (0)	nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:50.742311954 CET	192.168.2.16	1.1.1.1	0x5c78	Standard query (0)	nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:40:53.545562029 CET	192.168.2.16	1.1.1.1	0x8229	Standard query (0)	premiumgain.nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:53.545676947 CET	192.168.2.16	1.1.1.1	0xa509	Standard query (0)	premiumgain.nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:40:56.754376888 CET	192.168.2.16	1.1.1.1	0x13dd	Standard query (0)	d3hogio4d1txum.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.754515886 CET	192.168.2.16	1.1.1.1	0x7e34	Standard query (0)	d3hogio4d1txum.cloudfront.net	65	IN (0x0001)	false
Dec 20, 2024 21:40:56.807877064 CET	192.168.2.16	1.1.1.1	0xe014	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.807991982 CET	192.168.2.16	1.1.1.1	0x29b0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 21:40:59.789326906 CET	192.168.2.16	1.1.1.1	0x5c6b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:59.789458990 CET	192.168.2.16	1.1.1.1	0x1e2a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:13.346318960 CET	192.168.2.16	1.1.1.1	0xbb50	Standard query (0)	metric.nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.346539021 CET	192.168.2.16	1.1.1.1	0xb6bd	Standard query (0)	metric.nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:41:13.366554976 CET	192.168.2.16	1.1.1.1	0x7c18	Standard query (0)	stt.nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.366816998 CET	192.168.2.16	1.1.1.1	0xf6bb	Standard query (0)	stt.nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:41:16.163923025 CET	192.168.2.16	1.1.1.1	0xf653	Standard query (0)	bia.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.164360046 CET	192.168.2.16	1.1.1.1	0x77dd	Standard query (0)	bia.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:41:16.352045059 CET	192.168.2.16	1.1.1.1	0xbe29	Standard query (0)	stt.nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.352190018 CET	192.168.2.16	1.1.1.1	0x98ae	Standard query (0)	stt.nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:41:16.963053942 CET	192.168.2.16	1.1.1.1	0xcb82	Standard query (0)	metric.nimbusweb.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.963210106 CET	192.168.2.16	1.1.1.1	0xb261	Standard query (0)	metric.nimbusweb.me	65	IN (0x0001)	false
Dec 20, 2024 21:41:18.177421093 CET	192.168.2.16	1.1.1.1	0x30ab	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:18.177568913 CET	192.168.2.16	1.1.1.1	0xb8a6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 20, 2024 21:41:19.348261118 CET	192.168.2.16	1.1.1.1	0x312d	Standard query (0)	l.getsitecontrol.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:19.348572016 CET	192.168.2.16	1.1.1.1	0x9fca	Standard query (0)	l.getsitecontrol.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:21.605319023 CET	192.168.2.16	1.1.1.1	0xc4b2	Standard query (0)	l.getsitecontrol.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:21.605483055 CET	192.168.2.16	1.1.1.1	0x8045	Standard query (0)	l.getsitecontrol.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:24.374568939 CET	192.168.2.16	1.1.1.1	0x22e7	Standard query (0)	s2.getsitecontrol.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:24.374803066 CET	192.168.2.16	1.1.1.1	0x3491	Standard query (0)	s2.getsitecontrol.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:24.646181107 CET	192.168.2.16	1.1.1.1	0xf2b6	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:24.646334887 CET	192.168.2.16	1.1.1.1	0xb02	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:25.237201929 CET	192.168.2.16	1.1.1.1	0x9135	Standard query (0)	8adbfcfb-4db8a1b1.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:41:25.237201929 CET	192.168.2.16	1.1.1.1	0x2cc1	Standard query (0)	8adbfcfb-4db8a1b1.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.086059093 CET	192.168.2.16	1.1.1.1	0xc98d	Standard query (0)	s2.getsitecontrol.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.086198092 CET	192.168.2.16	1.1.1.1	0x5b9b	Standard query (0)	s2.getsitecontrol.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:27.096432924 CET	192.168.2.16	1.1.1.1	0xc868	Standard query (0)	events.getsitectrl.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.096613884 CET	192.168.2.16	1.1.1.1	0xb366	Standard query (0)	events.getsitectrl.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:29.587574005 CET	192.168.2.16	1.1.1.1	0x6c07	Standard query (0)	events.getsitectrl.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:29.587707996 CET	192.168.2.16	1.1.1.1	0xd5b1	Standard query (0)	events.getsitectrl.com	65	IN (0x0001)	false
Dec 20, 2024 21:41:30.473083019 CET	192.168.2.16	1.1.1.1	0x6e	Standard query (0)	8adbfcfb-4db8a1b1.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:30.473330975 CET	192.168.2.16	1.1.1.1	0xe885	Standard query (0)	8adbfcfb-4db8a1b1.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:41:34.921798944 CET	192.168.2.16	1.1.1.1	0x6a4a	Standard query (0)	8e1d6ffe-4db8a1b1.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:34.922339916 CET	192.168.2.16	1.1.1.1	0xc44d	Standard query (0)	8e1d6ffe-4db8a1b1.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:41:35.617568016 CET	192.168.2.16	1.1.1.1	0x45a5	Standard query (0)	87e039e4-4db8a1b1.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:35.621002913 CET	192.168.2.16	1.1.1.1	0xc2c2	Standard query (0)	87e039e4-4db8a1b1.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:41:39.962006092 CET	192.168.2.16	1.1.1.1	0x43cc	Standard query (0)	l1ve.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:39.962259054 CET	192.168.2.16	1.1.1.1	0x158c	Standard query (0)	l1ve.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:41:44.697160006 CET	192.168.2.16	1.1.1.1	0x5cbc	Standard query (0)	65f66297-4db8a1b1.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:44.697324991 CET	192.168.2.16	1.1.1.1	0x7de6	Standard query (0)	65f66297-4db8a1b1.twuseb.us	65	IN (0x0001)	false
Dec 20, 2024 21:42:10.282062054 CET	192.168.2.16	1.1.1.1	0xbad5	Standard query (0)	1b9f8d12-4db8a1b1.twuseb.us	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:42:10.282383919 CET	192.168.2.16	1.1.1.1	0x257f	Standard query (0)	1b9f8d12-4db8a1b1.twuseb.us	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 21:40:41.613235950 CET	1.1.1.1	192.168.2.16	0x6555	No error (0)	aselog24x7.cl		200.63.97.50	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:43.563566923 CET	1.1.1.1	192.168.2.16	0x84d3	No error (0)	premiumgain.nimbusweb.me		216.137.52.31	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:43.563566923 CET	1.1.1.1	192.168.2.16	0x84d3	No error (0)	premiumgain.nimbusweb.me		216.137.52.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:43.563566923 CET	1.1.1.1	192.168.2.16	0x84d3	No error (0)	premiumgain.nimbusweb.me		216.137.52.105	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:43.563566923 CET	1.1.1.1	192.168.2.16	0x84d3	No error (0)	premiumgain.nimbusweb.me		216.137.52.114	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:44.915543079 CET	1.1.1.1	192.168.2.16	0x52ea	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:44.915766954 CET	1.1.1.1	192.168.2.16	0x5307	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 21:40:46.573863029 CET	1.1.1.1	192.168.2.16	0xc9fd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.95	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.573863029 CET	1.1.1.1	192.168.2.16	0xc9fd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.44	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.573863029 CET	1.1.1.1	192.168.2.16	0xc9fd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.573863029 CET	1.1.1.1	192.168.2.16	0xc9fd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.150	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.894081116 CET	1.1.1.1	192.168.2.16	0xfa00	No error (0)	nimbusweb.me		18.66.161.15	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.894081116 CET	1.1.1.1	192.168.2.16	0xfa00	No error (0)	nimbusweb.me		18.66.161.86	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.894081116 CET	1.1.1.1	192.168.2.16	0xfa00	No error (0)	nimbusweb.me		18.66.161.49	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:46.894081116 CET	1.1.1.1	192.168.2.16	0xfa00	No error (0)	nimbusweb.me		18.66.161.100	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:50.885222912 CET	1.1.1.1	192.168.2.16	0xc822	No error (0)	nimbusweb.me		18.66.161.15	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:50.885222912 CET	1.1.1.1	192.168.2.16	0xc822	No error (0)	nimbusweb.me		18.66.161.49	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:50.885222912 CET	1.1.1.1	192.168.2.16	0xc822	No error (0)	nimbusweb.me		18.66.161.86	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:50.885222912 CET	1.1.1.1	192.168.2.16	0xc822	No error (0)	nimbusweb.me		18.66.161.100	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:53.683012962 CET	1.1.1.1	192.168.2.16	0x8229	No error (0)	premiumgain.nimbusweb.me		216.137.52.105	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:53.683012962 CET	1.1.1.1	192.168.2.16	0x8229	No error (0)	premiumgain.nimbusweb.me		216.137.52.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:53.683012962 CET	1.1.1.1	192.168.2.16	0x8229	No error (0)	premiumgain.nimbusweb.me		216.137.52.114	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:53.683012962 CET	1.1.1.1	192.168.2.16	0x8229	No error (0)	premiumgain.nimbusweb.me		216.137.52.31	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.893584013 CET	1.1.1.1	192.168.2.16	0x13dd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.95	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.893584013 CET	1.1.1.1	192.168.2.16	0x13dd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.893584013 CET	1.1.1.1	192.168.2.16	0x13dd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.150	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.893584013 CET	1.1.1.1	192.168.2.16	0x13dd	No error (0)	d3hogio4d1txum.cloudfront.net		3.160.185.44	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:56.944677114 CET	1.1.1.1	192.168.2.16	0x29b0	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 21:40:56.947875023 CET	1.1.1.1	192.168.2.16	0xe014	No error (0)	www.google.com		172.217.19.164	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:59.926276922 CET	1.1.1.1	192.168.2.16	0x5c6b	No error (0)	www.google.com		172.217.19.164	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:40:59.926291943 CET	1.1.1.1	192.168.2.16	0x1e2a	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 21:41:13.557023048 CET	1.1.1.1	192.168.2.16	0xbb50	No error (0)	metric.nimbusweb.me		108.158.75.7	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.557023048 CET	1.1.1.1	192.168.2.16	0xbb50	No error (0)	metric.nimbusweb.me		108.158.75.50	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.557023048 CET	1.1.1.1	192.168.2.16	0xbb50	No error (0)	metric.nimbusweb.me		108.158.75.32	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.557023048 CET	1.1.1.1	192.168.2.16	0xbb50	No error (0)	metric.nimbusweb.me		108.158.75.61	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.575696945 CET	1.1.1.1	192.168.2.16	0x7c18	No error (0)	stt.nimbusweb.me		216.239.36.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.575696945 CET	1.1.1.1	192.168.2.16	0x7c18	No error (0)	stt.nimbusweb.me		216.239.38.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.575696945 CET	1.1.1.1	192.168.2.16	0x7c18	No error (0)	stt.nimbusweb.me		216.239.34.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:13.575696945 CET	1.1.1.1	192.168.2.16	0x7c18	No error (0)	stt.nimbusweb.me		216.239.32.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.489048004 CET	1.1.1.1	192.168.2.16	0xbe29	No error (0)	stt.nimbusweb.me		216.239.34.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.489048004 CET	1.1.1.1	192.168.2.16	0xbe29	No error (0)	stt.nimbusweb.me		216.239.32.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.489048004 CET	1.1.1.1	192.168.2.16	0xbe29	No error (0)	stt.nimbusweb.me		216.239.36.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.489048004 CET	1.1.1.1	192.168.2.16	0xbe29	No error (0)	stt.nimbusweb.me		216.239.38.21	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:16.552350998 CET	1.1.1.1	192.168.2.16	0xf653	No error (0)	bia.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:17.101207018 CET	1.1.1.1	192.168.2.16	0xcb82	No error (0)	metric.nimbusweb.me		108.158.75.61	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:17.101207018 CET	1.1.1.1	192.168.2.16	0xcb82	No error (0)	metric.nimbusweb.me		108.158.75.50	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:17.101207018 CET	1.1.1.1	192.168.2.16	0xcb82	No error (0)	metric.nimbusweb.me		108.158.75.7	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:17.101207018 CET	1.1.1.1	192.168.2.16	0xcb82	No error (0)	metric.nimbusweb.me		108.158.75.32	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:18.314997911 CET	1.1.1.1	192.168.2.16	0x30ab	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:18.314997911 CET	1.1.1.1	192.168.2.16	0x30ab	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:18.314997911 CET	1.1.1.1	192.168.2.16	0x30ab	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:18.314997911 CET	1.1.1.1	192.168.2.16	0x30ab	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:19.564490080 CET	1.1.1.1	192.168.2.16	0x312d	No error (0)	l.getsitecontrol.com	gscwidgets2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:19.564490080 CET	1.1.1.1	192.168.2.16	0x312d	No error (0)	gscwidgets2.b-cdn.net		138.199.15.193	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:19.565207958 CET	1.1.1.1	192.168.2.16	0x9fca	No error (0)	l.getsitecontrol.com	gscwidgets2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:21.743482113 CET	1.1.1.1	192.168.2.16	0x8045	No error (0)	l.getsitecontrol.com	gscwidgets2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:21.744273901 CET	1.1.1.1	192.168.2.16	0xc4b2	No error (0)	l.getsitecontrol.com	gscwidgets2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:21.744273901 CET	1.1.1.1	192.168.2.16	0xc4b2	No error (0)	gscwidgets2.b-cdn.net		138.199.15.193	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:24.513524055 CET	1.1.1.1	192.168.2.16	0x3491	No error (0)	s2.getsitecontrol.com	gscstatic2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:24.589809895 CET	1.1.1.1	192.168.2.16	0x22e7	No error (0)	s2.getsitecontrol.com	gscstatic2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:24.589809895 CET	1.1.1.1	192.168.2.16	0x22e7	No error (0)	gscstatic2.b-cdn.net		143.244.56.58	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:24.783015013 CET	1.1.1.1	192.168.2.16	0xf2b6	No error (0)	analytics.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:24.784609079 CET	1.1.1.1	192.168.2.16	0xb02	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:25.659796000 CET	1.1.1.1	192.168.2.16	0x2cc1	No error (0)	8adbfcfb-4db8a1b1.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.223556995 CET	1.1.1.1	192.168.2.16	0x5b9b	No error (0)	s2.getsitecontrol.com	gscstatic2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:27.223607063 CET	1.1.1.1	192.168.2.16	0xc98d	No error (0)	s2.getsitecontrol.com	gscstatic2.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:41:27.223607063 CET	1.1.1.1	192.168.2.16	0xc98d	No error (0)	gscstatic2.b-cdn.net		143.244.56.58	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.312419891 CET	1.1.1.1	192.168.2.16	0xc868	No error (0)	events.getsitectrl.com		44.209.154.24	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.312419891 CET	1.1.1.1	192.168.2.16	0xc868	No error (0)	events.getsitectrl.com		3.209.45.106	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:27.312419891 CET	1.1.1.1	192.168.2.16	0xc868	No error (0)	events.getsitectrl.com		3.229.172.235	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:29.724978924 CET	1.1.1.1	192.168.2.16	0x6c07	No error (0)	events.getsitectrl.com		44.209.154.24	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:29.724978924 CET	1.1.1.1	192.168.2.16	0x6c07	No error (0)	events.getsitectrl.com		3.229.172.235	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:29.724978924 CET	1.1.1.1	192.168.2.16	0x6c07	No error (0)	events.getsitectrl.com		3.209.45.106	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:30.610745907 CET	1.1.1.1	192.168.2.16	0x6e	No error (0)	8adbfcfb-4db8a1b1.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:35.375364065 CET	1.1.1.1	192.168.2.16	0x6a4a	No error (0)	8e1d6ffe-4db8a1b1.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:36.004914999 CET	1.1.1.1	192.168.2.16	0x45a5	No error (0)	87e039e4-4db8a1b1.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:40.266779900 CET	1.1.1.1	192.168.2.16	0x43cc	No error (0)	l1ve.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:41:45.121328115 CET	1.1.1.1	192.168.2.16	0x5cbc	No error (0)	65f66297-4db8a1b1.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:42:10.752403975 CET	1.1.1.1	192.168.2.16	0xbad5	No error (0)	1b9f8d12-4db8a1b1.twuseb.us		173.255.223.22	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49709	200.63.97.50	80	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:40:41.739324093 CET	428	OUT	GET / HTTP/1.1 Host: aselog24x7.cl Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 20, 2024 21:40:43.141258001 CET	565	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 20 Dec 2024 20:40:42 GMT Server: Apache Location: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Content-Length: 276 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 72 65 6d 69 75 6d 67 61 69 6e 2e 6e 69 6d 62 75 73 77 65 62 2e 6d 65 2f 73 68 61 72 65 2f 31 31 34 35 30 33 33 34 2f 6f 74 73 33 66 34 77 36 78 65 68 66 32 66 65 62 30 39 77 79 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49710	200.63.97.50	80	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:41:26.749876976 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49711	200.63.97.50	80	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:41:26.749883890 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49713	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:45 UTC	702	OUT	GET /share/11450334/ots3f4w6xehf2feb09wy HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:40:46 UTC	633	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 82051 Connection: close Date: Fri, 20 Dec 2024 20:40:46 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"14083-DKqNQJhq+9LLGlyTQUcHLjAgXec" Set-Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; Domain=.nimbusweb.me; Path=/; Secure; SameSite=None Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 e0bdf334d52930321c517cf8d37af32e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: qU8A-v_4SGF1Blw2KEf-UuoP6zSOsXtdhuWv0v7r4Sx16do2AJdeHQ==
2024-12-20 20:40:46 UTC	3655	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 42 49 41 20 2d 20 46 75 73 65 42 61 73 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6d 62 75 73 2c 20 4e 6f 74 65 2c 20 53 68 61 72 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6d 62 75 73 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>BIA - FuseBase</title> <meta charset="UTF-8"> <meta name="keywords" content="Nimbus, Note, Share"> <meta name="author" content="Nimbus"> <meta name="viewport" content="width=device-width, minimum-scal
2024-12-20 20:40:46 UTC	8261	IN	Data Raw: 6e 73 2d 77 72 61 70 70 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 32 5d 20 7b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 36 30 30 70 78 3b 0a 20 20 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 33 32 30 70 78 3b 0a 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 37 35 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 6d 65 6e 75 2d 74 72 69 67 67 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 Data Ascii: ns-wrapper[_ngcontent-sc2] { max-width:1600px; min-width:320px; min-height:56px; margin:0 auto; padding:0 10px; position:relative; box-sizing:border-box; z-index:75; } .nns-menu-trigger[_ngcontent-sc
2024-12-20 20:40:46 UTC	7294	IN	Data Raw: 20 20 20 20 20 2e 61 75 74 68 2d 66 6f 72 6d 2d 74 61 62 73 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 39 5d 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 61 75 74 68 2d 66 6f 72 6d 2d 74 61 62 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 39 5d 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 32 38 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: .auth-form-tabs[_ngcontent-sc9]{ display: flex; } .auth-form-tab[_ngcontent-sc9]{ padding: 12px 28px; font-size: 18px; line-height: 24px; border-bottom: 2px solid transparent; font-weight:
2024-12-20 20:40:46 UTC	12288	IN	Data Raw: 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 6e 6e 73 2d 68 65 61 64 65 72 2d 73 61 76 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 31 30 5d 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 Data Ascii: height: 36px; border-radius: 50%; background-color: transparent; padding: 0; display: flex; align-items: center; justify-content: center; } .nns-header-save[_ngcontent-sc10]{ margin-rig
2024-12-20 20:40:46 UTC	4994	IN	Data Raw: 36 5d 20 20 20 2e 6e 6e 73 2d 73 69 64 65 62 61 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 32 36 5d 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 35 32 42 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 66 75 6c 6c 77 69 64 74 68 5b 5f 6e 67 68 6f 73 74 2d 73 63 32 36 5d 20 20 20 2e 77 72 61 70 70 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 32 36 5d 2c 20 2e 6e 6e 73 2d 66 75 6c 6c 77 69 64 74 68 20 20 20 5b 5f 6e 67 68 6f 73 74 2d 73 63 32 36 5d 20 20 20 2e 77 72 61 70 70 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 32 36 5d 7b 0a 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 70 61 64 64 Data Ascii: 6] .nns-sidebar[_ngcontent-sc26]{ background-color: #20252B; } .nns-fullwidth[_nghost-sc26] .wrapper[_ngcontent-sc26], .nns-fullwidth [_nghost-sc26] .wrapper[_ngcontent-sc26]{ box-sizing: border-box; margin: 0; padd
2024-12-20 20:40:46 UTC	10492	IN	Data Raw: 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 65 6d 62 65 64 5f 5f 76 69 64 65 6f 5b 5f 6e 67 68 6f 73 74 2d 73 63 33 31 5d 2c 20 2e 6e 6e 73 2d 65 6d 62 65 64 5f 5f 76 69 64 65 6f 20 20 20 5b 5f 6e 67 68 6f 73 74 2d 73 63 33 31 5d 7b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 65 6d 62 65 64 5f 5f 76 69 64 65 6f 5b 5f 6e 67 68 6f 73 74 2d 73 63 33 31 5d 20 20 20 2e 77 72 61 70 70 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 33 31 5d 2c 20 2e 6e 6e 73 2d 65 6d 62 65 64 5f 5f 76 69 64 65 6f 20 20 20 5b 5f 6e 67 68 6f 73 74 2d 73 63 33 31 5d 20 20 20 2e 77 72 61 70 70 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 33 31 5d Data Ascii: padding-top: 20px; } .nns-embed__video[_nghost-sc31], .nns-embed__video [_nghost-sc31]{ padding: 0; } .nns-embed__video[_nghost-sc31] .wrapper[_ngcontent-sc31], .nns-embed__video [_nghost-sc31] .wrapper[_ngcontent-sc31]
2024-12-20 20:40:46 UTC	16384	IN	Data Raw: 20 30 20 34 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 74 6f 70 2d 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2e 6e 6e 73 2d 74 6f 70 2d 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2d 61 63 74 69 76 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 34 37 5d 20 20 20 2e 6e 6e 73 2d 74 6f 70 2d 61 63 74 69 6f 6e 2d 61 72 72 6f 77 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 34 37 5d 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 20 23 33 45 34 38 34 39 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 74 6f 70 2d 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 34 37 5d 20 20 20 6e 6e 73 2d 69 63 6f 6e 5b 5f 6e Data Ascii: 0 4px; } .nns-top-action-button.nns-top-action-button-active[_ngcontent-sc47] .nns-top-action-arrow[_ngcontent-sc47] { border-top:none; border-bottom:4px solid #3E4849; } .nns-top-action-button[_ngcontent-sc47] nns-icon[_n
2024-12-20 20:40:46 UTC	1796	IN	Data Raw: 77 36 78 65 68 66 32 66 65 62 30 39 77 79 2f 31 48 79 34 4f 66 69 36 31 32 67 69 54 55 57 4c 22 7d 7d 2c 22 73 68 61 72 65 73 22 3a 7b 22 31 31 34 35 30 33 33 34 22 3a 7b 22 69 64 22 3a 31 31 34 35 30 33 33 34 2c 22 73 65 63 75 72 69 74 79 4b 65 79 22 3a 22 6f 74 73 33 66 34 77 36 78 65 68 66 32 66 65 62 30 39 77 79 22 2c 22 64 61 74 65 55 70 64 61 74 65 64 22 3a 31 37 33 34 37 32 30 35 35 33 2c 22 70 61 73 73 77 6f 72 64 52 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 63 63 65 73 73 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 6e 6f 74 65 47 6c 6f 62 61 6c 49 64 22 3a 22 31 48 79 34 4f 66 69 36 31 32 67 69 54 55 57 4c 22 2c 22 75 73 65 72 49 64 22 3a 33 35 34 35 37 37 33 2c 22 6e 6f 74 65 22 3a 22 31 48 79 34 4f 66 69 36 31 32 67 69 54 55 57 4c 22 Data Ascii: w6xehf2feb09wy/1Hy4Ofi612giTUWL"}},"shares":{"11450334":{"id":11450334,"securityKey":"ots3f4w6xehf2feb09wy","dateUpdated":1734720553,"passwordRequired":false,"accessAllowed":true,"noteGlobalId":"1Hy4Ofi612giTUWL","userId":3545773,"note":"1Hy4Ofi612giTUWL"
2024-12-20 20:40:46 UTC	15486	IN	Data Raw: 44 75 70 6c 69 63 61 74 65 46 6f 6c 64 65 72 22 2c 22 63 61 6e 4d 46 41 22 2c 22 63 61 6e 47 65 6e 65 72 61 74 65 56 69 64 65 6f 50 72 65 76 69 65 77 22 2c 22 63 61 6e 54 72 61 6e 73 63 72 69 62 65 41 75 64 69 6f 22 2c 22 63 61 6e 43 68 61 6e 67 65 4f 72 67 4f 77 6e 65 72 22 2c 22 63 61 6e 49 6e 76 69 74 65 47 75 65 73 74 73 22 2c 22 63 61 6e 4d 61 6e 61 67 65 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 22 63 61 6e 41 63 63 65 73 73 42 6c 6f 74 4c 6f 63 6b 69 6e 67 22 2c 22 63 61 6e 41 63 63 65 73 73 4e 6f 74 65 52 65 76 69 73 69 6f 6e 73 22 2c 22 63 61 6e 42 61 63 6b 75 70 22 2c 22 63 61 6e 4d 61 6e 61 67 65 57 6f 72 6b 73 70 61 63 65 73 42 72 61 6e 64 69 6e 67 22 2c 22 63 61 6e 4d 61 6e 61 67 65 4f 72 67 4c 6f 67 6f 22 2c 22 63 61 6e 4d 61 6e 61 67 65 44 6f Data Ascii: DuplicateFolder","canMFA","canGenerateVideoPreview","canTranscribeAudio","canChangeOrgOwner","canInviteGuests","canManagePermissions","canAccessBlotLocking","canAccessNoteRevisions","canBackup","canManageWorkspacesBranding","canManageOrgLogo","canManageDo
2024-12-20 20:40:46 UTC	1401	IN	Data Raw: 6f 74 65 2d 74 69 74 6c 65 20 66 6f 6e 74 2d 6e 6f 72 6d 61 6c 20 6e 67 2d 73 74 61 72 2d 69 6e 73 65 72 74 65 64 22 20 63 6c 61 73 73 6e 61 6d 65 3d 22 6e 6f 74 65 2d 74 69 74 6c 65 20 66 6f 6e 74 2d 6e 6f 72 6d 61 6c 22 3e 42 49 41 3c 2f 68 31 3e 3c 21 2d 2d 2d 2d 3e 3c 21 2d 2d 2d 2d 3e 3c 21 2d 2d 2d 2d 3e 3c 2f 64 69 76 3e 3c 21 2d 2d 2d 2d 3e 3c 64 69 76 20 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 33 31 3d 22 22 20 63 6c 61 73 73 3d 22 6e 6f 74 65 2d 74 6f 70 2d 68 6f 6c 64 65 72 20 6e 67 2d 73 74 61 72 2d 69 6e 73 65 72 74 65 64 22 3e 3c 21 2d 2d 2d 2d 3e 3c 2f 64 69 76 3e 3c 21 2d 2d 2d 2d 3e 3c 64 69 76 20 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 33 31 3d 22 22 20 63 6c 61 73 73 3d 22 6e 6e 73 2d 6e 6f 74 65 2d 77 72 61 70 70 65 72 20 6e 67 2d 73 74 Data Ascii: ote-title font-normal ng-star-inserted" classname="note-title font-normal">BIA</h1>...-->...-->...--></div>...--><div _ngcontent-sc31="" class="note-top-holder ng-star-inserted">...--></div>...--><div _ngcontent-sc31="" class="nns-note-wrapper ng-st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49716	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:47 UTC	677	OUT	GET /share/dist/index.css?v=9.26.11-73fecd7b HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:48 UTC	751	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 2544418 Connection: close Date: Fri, 20 Dec 2024 20:40:48 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"26d322-19371fe4ec0" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 c5e5a9ddc16b995cc90319b13f316f58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: GuykyAu_AK68DKwz7_2_SMbi2tACcTMAtpBRPkkF-k-DvKeXbmZSGw==
2024-12-20 20:40:48 UTC	3537	IN	Data Raw: 5b 66 6c 65 78 5d 20 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 20 30 70 78 3b 66 6c 65 78 3a 31 20 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 0a 0a 5b 6c 61 79 6f 75 74 3d 22 72 6f 77 22 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 Data Ascii: [flex] {-webkit-box-flex:1;-ms-flex:1 1 0px;flex:1 1 0; -webkit-box-sizing:border-box; box-sizing:border-box}[layout="row"] { display: -webkit-box; display: -ms-flexbox; display: flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-d
2024-12-20 20:40:48 UTC	4165	IN	Data Raw: 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 65 6e 64 22 5d 2c 0a 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3d 22 73 74 61 72 74 20 65 6e 64 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 65 6e 64 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 65 6e 64 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 20 65 6e 64 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 0a 7d 0a 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 20 73 74 72 65 74 63 68 22 5d 2c 0a 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3d 22 65 6e 64 20 73 74 72 65 74 63 68 22 Data Ascii: space-between end"],[layout-align="start end"] { -webkit-box-align: end; -ms-flex-align: end; align-items: flex-end; -ms-flex-line-pack: end; align-content: flex-end}[layout-align="center stretch"],[layout-align="end stretch"
2024-12-20 20:40:48 UTC	4096	IN	Data Raw: 2c 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 73 74 61 72 74 20 63 65 6e 74 65 72 22 5d 20 3e 20 2a 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0a 20 20 7d 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 63 65 6e 74 65 72 20 65 6e 64 22 5d 2c 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 65 6e 64 20 65 6e 64 22 5d 2c 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 73 70 61 63 65 2d 61 72 6f 75 6e 64 20 65 6e 64 22 5d 2c 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 Data Ascii: , [layout-align-sm="start center"] > * { max-width: 100%; -webkit-box-sizing: border-box; box-sizing: border-box } [layout-align-sm="center end"], [layout-align-sm="end end"], [layout-align-sm="space-around end"], [layout-a
2024-12-20 20:40:48 UTC	4096	IN	Data Raw: 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 0a 20 20 7d 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 78 73 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 5d 20 3e 20 2a 2c 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 78 73 3d 22 65 6e 64 20 63 65 6e 74 65 72 22 5d 20 3e 20 2a 2c 0a 20 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 78 73 Data Ascii: nter; -ms-flex-align: center; align-items: center; -ms-flex-line-pack: center; align-content: center; max-width: 100% } [layout-align-xs="center center"] > , [layout-align-xs="end center"] > , [layout-align-xs
2024-12-20 20:40:48 UTC	4096	IN	Data Raw: 22 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 73 74 61 72 74 20 65 6e 64 22 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 73 74 61 72 74 20 73 74 61 72 74 22 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 73 74 61 72 74 20 73 74 72 65 74 63 68 22 5d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 73 74 61 72 74 3b 0a 20 20 7d 0a 20 20 2e 6e 6f 2d 66 6c 65 78 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 63 65 6e 74 65 72 22 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 20 5b 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2d 73 6d 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 Data Ascii: "], .no-flex [layout-align-sm="start end"], .no-flex [layout-align-sm="start start"], .no-flex [layout-align-sm="start stretch"] { -webkit-box-pack: start; } .no-flex [layout-align-sm="center"], .no-flex [layout-align-sm="center center"], .no-flex
2024-12-20 20:40:48 UTC	3198	IN	Data Raw: 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 2f 33 30 65 30 35 39 39 65 37 39 64 66 36 37 64 39 35 38 33 35 31 35 35 37 39 34 32 37 31 63 62 62 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 75 72 6c 28 66 2f 31 31 65 61 62 63 61 32 32 35 31 33 32 35 63 66 63 35 35 38 39 63 39 63 36 66 62 35 37 62 34 36 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 Data Ascii: weight: normal; font-style: normal;}@font-face { font-display: swap; font-family: 'Roboto'; src: url(f/30e0599e79df67d95835155794271cbb.woff) format('woff'), url(f/11eabca2251325cfc5589c9c6fb57b46.ttf) format('truetype'); font-weight: nor
2024-12-20 20:40:49 UTC	12792	IN	Data Raw: 65 72 69 66 3b 0a 20 20 63 6f 6c 6f 72 3a 23 36 30 36 30 36 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 0a 7d 0a 0a 61 2c 20 62 75 74 74 6f 6e 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 6e 6e 73 2d 61 70 70 20 7b 0a 20 20 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 20 30 2e 38 29 3b 0a 7d 0a 6e 6e 73 2d 61 70 70 20 61 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 3a 23 30 30 39 36 61 35 3b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 63 75 Data Ascii: erif; color:#606060; line-height:1.5; -webkit-font-smoothing:antialiased; -webkit-overflow-scrolling:touch;}a, button { cursor: pointer;}nns-app { color:rgba(0,0,0, 0.8);}nns-app a {text-decoration:none; color:#0096a5; outline:none; cu
2024-12-20 20:40:49 UTC	394	IN	Data Raw: 79 65 72 20 3e 20 69 6d 67 20 7b 0a 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 74 6f 70 3a 20 30 3b 0a 20 7d 0a 0a 20 2e 76 69 65 77 65 72 2d 74 6f 6f 6c 62 61 72 20 3e 20 75 6c 20 7b 0a 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 35 70 78 3b 0a 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 20 30 3b 0a 20 7d 0a 0a 20 2e 76 69 65 77 65 72 2d 74 6f 6f 6c 62 61 72 20 3e 20 75 6c 20 3e 20 6c 69 20 7b 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 0a 20 20 20 62 6f 72 Data Ascii: yer > img { left: 0; position: absolute; top: 0; } .viewer-toolbar > ul { display: inline-block; margin: 0 auto 5px; overflow: hidden; padding: 3px 0; } .viewer-toolbar > ul > li { background-color: rgba(0, 0, 0, 0.5); bor
2024-12-20 20:40:49 UTC	4096	IN	Data Raw: 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 3b 0a 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 7d 0a 0a 20 2e 76 69 65 77 65 72 2d 74 6f 6f 6c 62 61 72 20 3e 20 75 6c 20 3e 20 6c 69 3a 68 6f 76 65 72 20 7b 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 0a 20 7d 0a 0a 20 2e 76 69 65 77 65 72 2d 74 6f 6f 6c 62 61 72 20 3e 20 75 6c 20 3e 20 6c 69 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 6d 61 72 67 69 6e 3a 20 32 70 78 3b 0a 20 7d 0a 0a 20 2e 76 69 65 77 65 72 2d 74 6f 6f 6c 62 61 72 20 3e 20 75 6c 20 3e 20 6c 69 20 2b 20 6c 69 20 7b 0a 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 70 78 3b 0a 20 7d 0a 0a 20 Data Ascii: transition: background-color 0.15s; width: 24px; } .viewer-toolbar > ul > li:hover { background-color: rgba(0, 0, 0, 0.8); } .viewer-toolbar > ul > li::before { margin: 2px; } .viewer-toolbar > ul > li + li { margin-left: 1px; }
2024-12-20 20:40:49 UTC	4096	IN	Data Raw: 32 34 66 61 61 64 65 38 64 34 62 64 39 37 31 34 65 31 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 75 72 6c 28 66 2f 38 62 62 62 36 63 38 33 63 38 36 63 31 63 32 32 63 63 38 34 65 34 32 63 38 34 34 32 36 39 38 63 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 63 61 6c 69 62 72 69 27 3b 0a 20 20 73 72 63 3a 0a 20 20 20 20 6c 6f 63 61 6c 28 27 43 61 6c 69 62 72 69 20 42 6f 6c 64 20 49 74 61 6c 69 63 27 29 2c 0a Data Ascii: 24faade8d4bd9714e1.woff) format('woff'), url(f/8bbb6c83c86c1c22cc84e42c8442698c.ttf) format('truetype'); font-weight:bold; font-style:normal;}@font-face { font-display: swap; font-family: 'userbri'; src: local('userbri Bold Italic'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49718	3.160.185.95	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:48 UTC	576	OUT	GET /tasks-bundle.20241017.css HTTP/1.1 Host: d3hogio4d1txum.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:40:48 UTC	486	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 555075 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT Last-Modified: Thu, 17 Oct 2024 13:59:55 GMT ETag: "40e18f7bb11b8db06fc0638314b08e93" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6441aca3a2b5b58e29d8d3461ac1b20c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P5 X-Amz-Cf-Id: TRLzJzW34WyQow4Pt_3xBRL-t3kmxD8D3MynNYbOSCj-zuf5YLWBvQ==
2024-12-20 20:40:48 UTC	16384	IN	Data Raw: 2e 6e 69 6d 2d 63 68 61 74 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 33 38 30 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 2c 20 30 70 78 20 34 70 78 20 35 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 20 30 70 78 20 31 70 78 20 31 30 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 3b 0a 7d 0a 0a 2e 6e 69 6d 2d 63 68 61 74 2d 6c 6f 61 64 65 72 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 Data Ascii: .nim-chat-wrapper { display: block; width: 380px; overflow: hidden; border-radius: 4px; box-shadow: 0px 2px 4px -1px rgba(0, 0, 0, 0.2), 0px 4px 5px 0px rgba(0, 0, 0, 0.14), 0px 1px 10px 0px rgba(0, 0, 0, 0.12);}.nim-chat-loader-overlay { p
2024-12-20 20:40:48 UTC	608	IN	Data Raw: 39 2d 31 36 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 31 2d 31 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 66 6c 75 69 64 3a 6e 6f 74 28 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 29 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 31 36 2d 39 3a 6e 6f 74 28 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 29 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 34 2d 33 3a 6e 6f 74 28 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 29 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 39 2d 31 36 3a 6e 6f 74 28 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 29 2c 0a 2e 76 69 64 65 6f 2d 6a Data Ascii: 9-16,.video-js.vjs-1-1 { width: 100%; max-width: 100%;}.video-js.vjs-fluid:not(.vjs-audio-only-mode),.video-js.vjs-16-9:not(.vjs-audio-only-mode),.video-js.vjs-4-3:not(.vjs-audio-only-mode),.video-js.vjs-9-16:not(.vjs-audio-only-mode),.video-j
2024-12-20 20:40:49 UTC	8949	IN	Data Raw: 6f 2d 6a 73 2e 76 6a 73 2d 66 69 6c 6c 3a 6e 6f 74 28 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 29 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 74 65 63 68 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 20 2e 76 6a 73 2d 74 65 63 68 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 62 6f 64 79 2e 76 6a 73 2d 66 75 6c 6c 2d 77 69 6e 64 Data Ascii: o-js.vjs-fill:not(.vjs-audio-only-mode) { width: 100%; height: 100%;}.video-js .vjs-tech { position: absolute; top: 0; left: 0; width: 100%; height: 100%;}.video-js.vjs-audio-only-mode .vjs-tech { display: none;}body.vjs-full-wind
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 7b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 68 6f 6c 64 65 72 20 7b 0a 20 20 66 6c 65 78 3a 20 61 75 74 6f 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 3b 0a 20 20 68 65 69 67 68 74 3a 20 30 2e 33 65 6d 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 68 6f 6c 64 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 20 2e 76 6a 73 2d 70 72 6f 67 72 65 73 73 2d Data Ascii: rogress-control { width: auto;}.video-js .vjs-progress-holder { flex: auto; transition: all 0.2s; height: 0.3em;}.video-js .vjs-progress-control .vjs-progress-holder { margin: 0 10px;}.video-js .vjs-progress-control:hover .vjs-progress-
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 6f 4a 53 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 5c 66 31 31 64 22 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 6c 61 79 6f 75 74 2d 73 6d 61 6c 6c 20 2e 76 6a 73 2d 63 75 72 72 65 6e 74 2d 74 69 6d 65 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 6c 61 79 6f 75 74 2d 73 6d 61 6c 6c 20 2e 76 6a 73 2d 74 69 6d 65 2d 64 69 76 69 64 65 72 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 6c 61 79 6f 75 74 2d 73 6d 61 6c 6c 20 2e 76 6a 73 2d 64 75 72 61 74 69 6f 6e 2c 0a 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 6c 61 79 6f 75 74 2d 73 6d 61 6c 6c 20 2e 76 6a 73 2d 72 65 6d 61 69 6e 69 6e 67 2d 74 69 6d 65 2c 0a Data Ascii: oJS; content: " \f11d"; font-size: 1.5em; line-height: inherit;}.video-js.vjs-layout-small .vjs-current-time,.video-js.vjs-layout-small .vjs-time-divider,.video-js.vjs-layout-small .vjs-duration,.video-js.vjs-layout-small .vjs-remaining-time,
2024-12-20 20:40:49 UTC	10507	IN	Data Raw: 2d 6c 69 6e 65 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 2b 32 29 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6d 61 74 2d 6c 69 73 74 2d 62 61 73 65 20 2e 6d 61 74 2d 73 75 62 68 65 61 64 65 72 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4f 70 65 6e 20 53 61 6e 73 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 6d 61 74 2d 6c 69 73 74 2d 62 61 73 65 5b 64 65 6e 73 65 5d 20 2e 6d 61 74 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 7d 0a 2e 6d 61 74 2d 6c 69 73 74 2d 62 61 73 65 5b 64 65 6e 73 65 5d 20 2e 6d 61 74 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 6d Data Ascii: -line:nth-child(n+2) { font-size: 16px;}.mat-list-base .mat-subheader { font-family: Open Sans, sans-serif; font-size: 14px; font-weight: 400;}.mat-list-base[dense] .mat-list-item { font-size: 12px;}.mat-list-base[dense] .mat-list-item .m
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6e 69 6d 2d 70 74 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6e 69 6d 2d 70 72 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6e 69 6d 2d 70 62 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6e 69 6d 2d 70 6c 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6e 69 6d 2d 70 6c 72 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6e 69 6d 2d 70 74 62 2d 6c 67 20 7b 0a 20 20 70 61 64 Data Ascii: -lg { padding: 16px;}.nim-pt-lg { padding-top: 16px;}.nim-pr-lg { padding-right: 16px;}.nim-pb-lg { padding-bottom: 16px;}.nim-pl-lg { padding-left: 16px;}.nim-plr-lg { padding-left: 16px; padding-right: 16px;}.nim-ptb-lg { pad
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 20 23 62 64 62 64 62 64 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 33 61 33 61 33 3b 0a 7d 0a 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6e 69 6d 2d 62 61 64 67 65 2e 6d 2d 62 6f 72 64 65 72 65 64 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 34 30 30 20 31 32 70 78 20 2f 20 31 36 70 78 20 4f 70 65 6e 20 53 61 6e 73 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground: #bdbdbd; color: #a3a3a3;}.nim-theme-cyan-cyan.nim-theme-light .nim-badge.m-bordered .mat-badge-content { border-color: white !important;}.nim-theme-cyan-cyan.nim-theme-light .mat-badge-content { font: 400 12px / 16px Open Sans, sans-ser
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 2c 20 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6d 61 74 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 2c 20 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2e 6d 61 Data Ascii: -cyan.nim-theme-light .mat-raised-button.mat-warn, .nim-theme-cyan-cyan.nim-theme-light .mat-fab.mat-warn, .nim-theme-cyan-cyan.nim-theme-light .mat-mini-fab.mat-warn { color: white;}.nim-theme-cyan-cyan.nim-theme-light .mat-flat-button.mat-primary.ma
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 72 6e 20 63 69 72 63 6c 65 2c 20 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6d 61 74 2d 73 70 69 6e 6e 65 72 2e 6d 61 74 2d 77 61 72 6e 20 63 69 72 63 6c 65 20 7b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 65 66 34 34 34 34 3b 0a 7d 0a 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6e 69 6d 2d 63 68 61 74 2d 6c 6f 61 64 65 72 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 6d 2d 75 72 6c 20 2e 6e 69 6d 2d 74 68 65 6d 65 2d 63 79 61 6e 2d 63 79 61 6e 2e 6e 69 6d 2d 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6e 69 6d 2d 6d 65 73 73 61 67 65 2d 69 6e 73 65 72 74 2d 63 6f 6e 74 Data Ascii: rn circle, .nim-theme-cyan-cyan.nim-theme-light .mat-spinner.mat-warn circle { stroke: #ef4444;}.nim-theme-cyan-cyan.nim-theme-light .nim-chat-loader-overlay { background: white;}.m-url .nim-theme-cyan-cyan.nim-theme-light .nim-message-insert-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49717	3.160.185.95	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:48 UTC	561	OUT	GET /tasks-bundle.20241017.js HTTP/1.1 Host: d3hogio4d1txum.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:40:48 UTC	501	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4999359 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT Last-Modified: Thu, 17 Oct 2024 13:59:56 GMT ETag: "6e7a6d936de4fe50cf1c96953682cd89" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 642ac9646ca474c1d78254f0a36a8c5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P5 X-Amz-Cf-Id: SfMHAtTxTP9V3AME9rJXqjzn5cDbQ4yTgBteC1xAj1moC4WfEIoTug==
2024-12-20 20:40:48 UTC	15883	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 61 73 6b 73 2d 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 37 39 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: /! For license information please see tasks-bundle.js.LICENSE.txt /(()=>{var __webpack_modules__={7924:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n),Object.defineProperty(e,i,{enumerab
2024-12-20 20:40:48 UTC	1114	IN	Data Raw: 63 68 61 6e 67 65 22 2c 69 2e 54 61 73 6b 42 6f 61 72 64 54 61 73 6b 4d 6f 76 65 3d 22 74 61 73 6b 5f 62 6f 61 72 64 5f 74 61 73 6b 5f 6d 6f 76 65 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 43 6c 65 61 72 41 6c 6c 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 5f 63 6c 65 61 72 5f 61 6c 6c 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 4c 61 62 65 6c 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 5f 6c 61 62 65 6c 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 73 41 73 73 69 67 6e 65 65 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 73 5f 61 73 73 69 67 6e 65 65 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 73 41 73 73 69 67 6e 65 65 55 6e 61 73 73 69 67 6e 65 64 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 73 5f 61 73 73 69 67 6e 65 65 5f 75 6e 61 73 73 69 67 6e 65 64 22 2c 69 2e 54 61 73 6b 46 69 Data Ascii: change",i.TaskBoardTaskMove="task_board_task_move",i.TaskFilterClearAll="task_filter_clear_all",i.TaskFilterLabel="task_filter_label",i.TaskFiltersAssignee="task_filters_assignee",i.TaskFiltersAssigneeUnassigned="task_filters_assignee_unassigned",i.TaskFi
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 7d 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 29 2c 65 5b 69 5d 3d 74 5b 6e 5d 7d 29 2c 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 3d 3d 3d 6e 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 7c 7c 69 28 74 2c 65 2c 6e 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c Data Ascii: {enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,i){void 0===i&&(i=n),e[i]=t[n]}),r=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|i(t,e,n)};Object.defineProperty(t,"__esModule",
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 72 6f 72 28 60 41 53 53 45 52 54 49 4f 4e 20 45 52 52 4f 52 3a 20 24 7b 65 7d 60 2b 28 6e 75 6c 6c 3d 3d 69 3f 22 22 3a 60 20 5b 45 78 70 65 63 74 65 64 3d 3e 20 24 7b 6e 7d 20 24 7b 69 7d 20 24 7b 74 7d 20 3c 3d 41 63 74 75 61 6c 5d 60 29 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4e 6f 64 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 65 26 26 22 57 65 62 57 6f 72 6b 65 72 52 65 6e 64 65 72 4e 6f 64 65 22 3d 3d 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 7c 7c 46 28 60 54 68 65 20 70 72 6f 76 69 64 65 64 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 73 74 61 6e 63 65 Data Ascii: ror(`ASSERTION ERROR: ${e}`+(null==i?"":` [Expected=> ${n} ${i} ${t} <=Actual]`))}function V(e){"undefined"!=typeof Node&&e instanceof Node\|\|"object"==typeof e&&null!=e&&"WebWorkerRenderNode"===e.constructor.name\|\|F(`The provided value must be an instance
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 56 6e 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 6c 65 74 20 73 3d 30 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 2d 31 3d 3d 3d 74 29 61 3d 2d 31 3b 65 6c 73 65 20 66 6f 72 28 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 6e 3d 65 5b 73 2b 2b 5d 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 6e 3d 3d 3d 74 29 7b 61 3d 2d 31 3b 62 72 65 61 6b 7d 69 66 28 6e 3e 74 29 7b 61 3d 73 2d 31 3b 62 72 65 61 6b 7d 7d 7d 66 6f 72 28 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 73 5d 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 62 72 65 61 6b 3b 69 66 28 74 3d 3d 3d 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 69 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6e Data Ascii: function Vn(e,t,n,i,r){let s=0,a=e.length;if(-1===t)a=-1;else for(;s<e.length;){const n=e[s++];if("number"==typeof n){if(n===t){a=-1;break}if(n>t){a=s-1;break}}}for(;s<e.length;){const t=e[s];if("number"==typeof t)break;if(t===n){if(null===i)return void(n
2024-12-20 20:40:49 UTC	3072	IN	Data Raw: 63 6f 6e 73 74 20 73 3d 65 2e 73 74 79 6c 65 55 72 6c 73 2c 61 3d 65 2e 73 74 79 6c 65 73 7c 7c 28 65 2e 73 74 79 6c 65 73 3d 5b 5d 29 2c 6f 3d 65 2e 73 74 79 6c 65 73 2e 6c 65 6e 67 74 68 3b 73 26 26 73 2e 66 6f 72 45 61 63 68 28 28 28 74 2c 6e 29 3d 3e 7b 61 2e 70 75 73 68 28 22 22 29 2c 72 2e 70 75 73 68 28 69 28 74 29 2e 74 68 65 6e 28 28 69 3d 3e 7b 61 5b 6f 2b 6e 5d 3d 69 2c 73 2e 73 70 6c 69 63 65 28 73 2e 69 6e 64 65 78 4f 66 28 74 29 2c 31 29 2c 30 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 2e 73 74 79 6c 65 55 72 6c 73 3d 76 6f 69 64 20 30 29 7d 29 29 29 7d 29 29 3b 63 6f 6e 73 74 20 6c 3d 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 72 29 2e 74 68 65 6e 28 28 28 29 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 41 72 2e 64 65 6c 65 74 65 28 65 29 7d 28 6e 29 Data Ascii: const s=e.styleUrls,a=e.styles\|\|(e.styles=[]),o=e.styles.length;s&&s.forEach(((t,n)=>{a.push(""),r.push(i(t).then((i=>{a[o+n]=i,s.splice(s.indexOf(t),1),0==s.length&&(e.styleUrls=void 0)})))}));const l=Promise.all(r).then((()=>function(e){Ar.delete(e)}(n)
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 74 29 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 5f 72 28 65 29 2c 74 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 69 6e 65 72 74 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 64 79 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 5f 72 28 65 29 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 44 6f 63 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 26 26 74 68 69 73 2e 73 74 72 69 70 43 75 73 74 6f 6d 4e 73 41 74 74 72 73 28 6e 29 2c 6e 7d 73 74 72 69 70 43 75 73 74 6f 6d 4e 73 41 74 74 72 73 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 3b 66 6f 72 28 6c 65 74 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 6e 3b 6e 2d 2d 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 69 74 65 6d 28 6e 29 2e 6e 61 Data Ascii: t)return t.innerHTML=_r(e),t;const n=this.inertDocument.createElement("body");return n.innerHTML=_r(e),this.defaultDoc.documentMode&&this.stripCustomNsAttrs(n),n}stripCustomNsAttrs(e){const t=e.attributes;for(let n=t.length-1;0<n;n--){const i=t.item(n).na
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 65 6d 6f 76 65 4e 6f 64 65 2b 2b 3b 63 6f 6e 73 74 20 69 3d 44 61 28 65 2c 74 29 3b 69 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 77 74 28 65 29 3f 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 2c 6e 2c 69 29 3a 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 28 65 2c 69 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 65 2c 74 2c 6e 2c 69 2c 72 2c 73 2c 61 29 7b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 6e 3b 29 7b 6e 67 44 65 76 4d 6f 64 65 26 26 71 65 28 6e 2c 69 29 2c 6e 67 44 65 76 4d 6f 64 65 26 26 4c 6e 28 6e 2c 36 33 29 3b 63 6f 6e 73 74 20 6f 3d 69 5b 6e 2e 69 6e 64 65 78 5d 2c 6c 3d 6e 2e 74 79 70 65 3b 69 66 28 61 26 26 30 3d 3d 3d 74 26 26 28 6f 26 26 4c 73 28 5f 74 28 6f 29 2c 69 29 2c 6e 2e 66 6c 61 67 73 7c 3d 34 29 2c 36 34 Data Ascii: emoveNode++;const i=Da(e,t);i&&function(e,t,n,i){wt(e)?e.removeChild(t,n,i):t.removeChild(n)}(e,i,t,n)}function Na(e,t,n,i,r,s,a){for(;null!=n;){ngDevMode&&qe(n,i),ngDevMode&&Ln(n,63);const o=i[n.index],l=n.type;if(a&&0===t&&(o&&Ls(_t(o),i),n.flags\|=4),64
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 20 6c 3d 65 2e 76 69 65 77 51 75 65 72 79 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6c 26 26 4f 6c 28 32 2c 6c 2c 69 29 2c 21 73 29 69 66 28 61 29 7b 63 6f 6e 73 74 20 6e 3d 65 2e 76 69 65 77 43 68 65 63 6b 48 6f 6f 6b 73 3b 6e 75 6c 6c 21 3d 3d 6e 26 26 5f 6e 28 74 2c 6e 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 6e 3d 65 2e 76 69 65 77 48 6f 6f 6b 73 3b 6e 75 6c 6c 21 3d 3d 6e 26 26 6b 6e 28 74 2c 6e 2c 32 29 2c 49 6e 28 74 2c 32 29 7d 21 30 3d 3d 3d 65 2e 66 69 72 73 74 55 70 64 61 74 65 50 61 73 73 26 26 28 65 2e 66 69 72 73 74 55 70 64 61 74 65 50 61 73 73 3d 21 31 29 2c 73 7c 7c 28 74 5b 32 5d 26 3d 2d 37 33 29 2c 31 30 32 34 26 74 5b 32 5d 26 26 28 74 5b 32 5d 26 3d 2d 31 30 32 35 2c 52 74 28 74 5b 33 5d 2c 2d 31 29 29 7d 66 69 6e 61 6c 6c 79 7b 67 6e 28 29 7d Data Ascii: l=e.viewQuery;if(null!==l&&Ol(2,l,i),!s)if(a){const n=e.viewCheckHooks;null!==n&&_n(t,n)}else{const n=e.viewHooks;null!==n&&kn(t,n,2),In(t,2)}!0===e.firstUpdatePass&&(e.firstUpdatePass=!1),s\|\|(t[2]&=-73),1024&t[2]&&(t[2]&=-1025,Rt(t[3],-1))}finally{gn()}
2024-12-20 20:40:49 UTC	16384	IN	Data Raw: 3d 74 2e 76 61 6c 75 65 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6e 67 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 6f 6e 44 65 73 74 72 6f 79 2e 61 64 64 28 74 2e 76 61 6c 75 65 29 2c 74 2e 76 61 6c 75 65 7d 69 6e 6a 65 63 74 61 62 6c 65 44 65 66 49 6e 53 63 6f 70 65 28 65 29 7b 69 66 28 21 65 2e 70 72 6f 76 69 64 65 64 49 6e 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 6d 28 65 2e 70 72 6f 76 69 64 65 64 49 6e 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 22 61 6e 79 22 3d 3d 3d 74 7c 7c 74 3d 3d 3d 74 68 69 73 2e 73 63 6f 70 65 3a 74 68 69 73 2e 69 6e 6a 65 63 74 6f 72 44 65 66 54 79 70 65 73 2e 68 61 73 28 74 29 7d Data Ascii: =t.value)&&"object"==typeof n&&"function"==typeof n.ngOnDestroy&&this.onDestroy.add(t.value),t.value}injectableDefInScope(e){if(!e.providedIn)return!1;const t=m(e.providedIn);return"string"==typeof t?"any"===t\|\|t===this.scope:this.injectorDefTypes.has(t)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	18.66.161.15	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:48 UTC	605	OUT	GET /share/dist/common.js?v=9.26.11 HTTP/1.1 Host: nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:50 UTC	763	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 217666 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"35242-19371fe4ec0" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b3dbb97569270e51c273861ab047e104.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 8JJVbnwB-FLqBqUCSHPOwGt3si1dPv1_FXj59M9rxA0BvkXbBb7KGA==
2024-12-20 20:40:50 UTC	11786	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6d 6d 6f 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f Data Ascii: /! For license information please see common.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 7b 62 3a 69 2c 6f 3a 70 2c 6c 3a 73 2c 65 3a 75 2c 76 3a 6e 65 77 20 4b 28 69 29 7d 29 3b 66 3c 75 3b 29 45 28 65 2c 66 2b 2b 29 7d 29 29 2c 6b 3d 68 2e 70 72 6f 74 6f 74 79 70 65 3d 78 28 57 65 29 2c 64 28 6b 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 68 29 29 3a 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 31 29 7d 29 29 26 26 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 68 28 2d 31 29 7d 29 29 26 26 44 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 65 77 20 68 2c 6e 65 77 20 68 28 6e 75 6c 6c 29 2c 6e 65 77 20 68 28 31 2e 35 29 2c 6e 65 77 20 68 28 65 29 7d 29 2c 21 30 29 7c 7c 28 68 3d 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 20 6c 28 65 2c 68 2c 63 29 2c 62 28 6e 29 3f 6e 20 69 6e Data Ascii: {b:i,o:p,l:s,e:u,v:new K(i)});f<u;)E(e,f++)})),k=h.prototype=x(We),d(k,"constructor",h)):i((function(){h(1)}))&&i((function(){new h(-1)}))&&D((function(e){new h,new h(null),new h(1.5),new h(e)}),!0)\|\|(h=n((function(e,n,r,o){var i;return l(e,h,c),b(n)?n in
2024-12-20 20:40:50 UTC	8192	IN	Data Raw: 36 2c 75 2d 3d 38 29 3b 72 65 74 75 72 6e 20 73 5b 2d 2d 66 5d 7c 3d 31 32 38 2a 64 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 38 2a 6e 2d 74 2d 31 2c 69 3d 28 31 3c 3c 6f 29 2d 31 2c 73 3d 69 3e 3e 31 2c 75 3d 6f 2d 37 2c 61 3d 6e 2d 31 2c 63 3d 65 5b 61 2d 2d 5d 2c 6c 3d 31 32 37 26 63 3b 66 6f 72 28 63 3e 3e 3d 37 3b 75 3e 30 3b 6c 3d 32 35 36 2a 6c 2b 65 5b 61 5d 2c 61 2d 2d 2c 75 2d 3d 38 29 3b 66 6f 72 28 72 3d 6c 26 28 31 3c 3c 2d 75 29 2d 31 2c 6c 3e 3e 3d 2d 75 2c 75 2b 3d 74 3b 75 3e 30 3b 72 3d 32 35 36 2a 72 2b 65 5b 61 5d 2c 61 2d 2d 2c 75 2d 3d 38 29 3b 69 66 28 30 3d 3d 3d 6c 29 6c 3d 31 2d 73 3b 65 6c 73 65 7b 69 66 28 6c 3d 3d 3d 69 29 72 65 74 75 72 6e 20 72 3f 4e 61 4e 3a 63 3f 2d 77 3a 77 3b Data Ascii: 6,u-=8);return s[--f]\|=128d,s}function N(e,t,n){var r,o=8n-t-1,i=(1<<o)-1,s=i>>1,u=o-7,a=n-1,c=e[a--],l=127&c;for(c>>=7;u>0;l=256l+e[a],a--,u-=8);for(r=l&(1<<-u)-1,l>>=-u,u+=t;u>0;r=256r+e[a],a--,u-=8);if(0===l)l=1-s;else{if(l===i)return r?NaN:c?-w:w;
2024-12-20 20:40:50 UTC	4096	IN	Data Raw: 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 76 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 69 3f 69 2e 76 3d 6e 3a 28 65 2e 5f 6c 3d 69 3d 7b 69 3a 6f 3d 70 28 74 2c 21 30 29 2c 6b 3a 74 2c 76 3a 6e 2c 70 3a 72 3d 65 2e 5f 6c 2c 6e 3a 76 6f 69 64 20 30 2c 72 3a 21 31 7d 2c 65 2e 5f 66 7c 7c 28 65 2e 5f 66 3d 69 29 2c 72 26 26 28 72 2e 6e 3d 69 29 2c 65 5b 6d 5d 2b 2b 2c 22 46 22 21 3d 3d 6f 26 26 28 65 2e 5f 69 5b 6f 5d 3d 69 29 29 2c 65 7d 2c 67 65 74 45 6e 74 72 79 3a 76 2c 73 65 74 53 74 72 6f 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 68 69 73 2e 5f 74 3d 68 28 65 2c 74 29 2c 74 68 69 73 2e 5f 6b 3d 6e 2c 74 68 69 73 2e 5f 6c 3d 76 6f 69 64 20 30 7d 29 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: n){var r,o,i=v(e,t);return i?i.v=n:(e._l=i={i:o=p(t,!0),k:t,v:n,p:r=e._l,n:void 0,r:!1},e._f\|\|(e._f=i),r&&(r.n=i),e[m]++,"F"!==o&&(e._i[o]=i)),e},getEntry:v,setStrong:function(e,t,n){c(e,t,(function(e,n){this._t=h(e,t),this._k=n,this._l=void 0}),(function
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 2c 6e 28 31 35 34 29 2c 6e 28 31 35 35 29 2c 6e 28 31 35 36 29 2c 6e 28 31 35 37 29 2c 6e 28 31 35 38 29 2c 6e 28 31 35 39 29 2c 6e 28 31 36 30 29 2c 6e 28 31 36 31 29 2c 6e 28 31 36 32 29 2c 6e 28 31 36 33 29 2c 6e 28 31 36 34 29 2c 6e 28 31 36 35 29 2c 6e 28 31 36 36 29 2c 6e 28 31 36 37 29 2c 6e 28 31 36 38 29 2c 6e 28 31 36 39 29 2c 6e 28 31 37 30 29 2c 6e 28 31 37 31 29 2c 6e 28 31 37 32 29 2c 6e 28 31 37 33 29 2c 6e 28 31 37 34 29 2c 6e 28 31 37 35 29 2c 6e 28 31 37 36 29 2c 6e 28 31 37 37 29 2c 6e 28 31 37 38 29 2c 6e 28 31 37 39 29 2c 6e 28 31 38 30 29 2c 6e 28 31 38 31 29 2c 6e 28 31 38 32 29 2c 6e 28 31 38 33 29 2c 6e 28 31 38 34 29 2c 6e 28 31 38 35 29 2c 6e 28 31 38 36 29 2c 6e 28 31 38 37 29 2c 6e 28 31 38 38 29 2c 6e 28 31 38 39 29 2c 6e 28 Data Ascii: ,n(154),n(155),n(156),n(157),n(158),n(159),n(160),n(161),n(162),n(163),n(164),n(165),n(166),n(167),n(168),n(169),n(170),n(171),n(172),n(173),n(174),n(175),n(176),n(177),n(178),n(179),n(180),n(181),n(182),n(183),n(184),n(185),n(186),n(187),n(188),n(189),n(
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 61 72 20 65 3d 30 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 3f 74 68 69 73 3a 41 72 72 61 79 29 28 74 29 3b 74 3e 65 3b 29 6f 28 6e 2c 65 2c 61 72 67 75 6d 65 6e 74 73 5b 65 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3d 74 2c 6e 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 30 29 2c 6f 3d 6e 28 31 35 29 2c 69 3d 5b 5d 2e 6a 6f 69 6e 3b 72 28 72 2e 50 2b 72 2e 46 2a 28 6e 28 34 36 29 21 3d 4f 62 6a 65 63 74 7c 7c 21 6e 28 32 30 29 28 69 29 29 2c 22 41 72 72 61 79 22 2c 7b 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6f 28 74 68 69 73 29 2c 76 6f 69 Data Ascii: ar e=0,t=arguments.length,n=new("function"==typeof this?this:Array)(t);t>e;)o(n,e,arguments[e++]);return n.length=t,n}})},function(e,t,n){var r=n(0),o=n(15),i=[].join;r(r.P+r.F*(n(46)!=Object\|\|!n(20)(i)),"Array",{join:function(e){return i.call(o(this),voi
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 31 31 39 29 2c 69 3d 6e 28 35 38 29 3b 72 28 72 2e 50 2b 72 2e 46 2a 2f 56 65 72 73 69 6f 6e 5c 2f 31 30 5c 2e 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 20 53 61 66 61 72 69 5c 2f 2f 2e 74 65 73 74 28 69 29 2c 22 53 74 72 69 6e 67 22 2c 7b 70 61 64 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 21 31 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 34 33 29 28 22 74 72 69 6d 4c 65 66 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 31 29 7d 7d 29 2c 22 74 72 69 6d 53 74 61 72 74 22 29 Data Ascii: 119),i=n(58);r(r.P+r.F*/Version\/10\.\d+(\.\d+)? Safari\//.test(i),"String",{padEnd:function(e){return o(this,e,arguments.length>1?arguments[1]:void 0,!1)}})},function(e,t,n){n(43)("trimLeft",(function(e){return function(){return e(this,1)}}),"trimStart")
2024-12-20 20:40:50 UTC	110	IN	Data Raw: 2e 72 3d 21 30 2c 69 26 26 28 69 2e 6e 3d 6f 29 2c 6f 26 26 28 6f 2e 70 3d 69 29 2c 6e 2e 5f 66 3d 3d 72 26 26 28 6e 2e 5f 66 3d 6f 29 2c 6e 2e 5f 6c 3d 3d 72 26 26 28 6e 2e 5f 6c 3d 69 29 2c 6e 5b 6d 5d 2d 2d 7d 72 65 74 75 72 6e 21 21 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 28 74 68 69 73 2c 74 Data Ascii: .r=!0,i&&(i.n=o),o&&(o.p=i),n._f==r&&(n._f=o),n._l==r&&(n._l=i),n[m]--}return!!r},forEach:function(e){h(this,t
2024-12-20 20:40:50 UTC	392	IN	Data Raw: 29 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 73 28 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 33 29 3b 6e 3d 6e 3f 6e 2e 6e 3a 74 68 69 73 2e 5f 66 3b 29 66 6f 72 28 72 28 6e 2e 76 2c 6e 2e 6b 2c 74 68 69 73 29 3b 6e 26 26 6e 2e 72 3b 29 6e 3d 6e 2e 70 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 76 28 68 28 74 68 69 73 2c 74 29 2c 65 29 7d 7d 29 2c 64 26 26 72 28 6c 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 69 7a 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 28 74 68 69 73 2c 74 29 5b 6d 5d 7d 7d 29 2c 6c 7d 2c 64 65 66 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 76 28 65 2c 74 Data Ascii: );for(var n,r=s(e,arguments.length>1?arguments[1]:void 0,3);n=n?n.n:this._f;)for(r(n.v,n.k,this);n&&n.r;)n=n.p},has:function(e){return!!v(h(this,t),e)}}),d&&r(l.prototype,"size",{get:function(){return h(this,t)[m]}}),l},def:function(e,t,n){var r,o,i=v(e,t
2024-12-20 20:40:50 UTC	4096	IN	Data Raw: 76 2c 73 65 74 53 74 72 6f 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 68 69 73 2e 5f 74 3d 68 28 65 2c 74 29 2c 74 68 69 73 2e 5f 6b 3d 6e 2c 74 68 69 73 2e 5f 6c 3d 76 6f 69 64 20 30 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 5f 6b 2c 74 3d 74 68 69 73 2e 5f 6c 3b 74 26 26 74 2e 72 3b 29 74 3d 74 2e 70 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 26 26 28 74 68 69 73 2e 5f 6c 3d 74 3d 74 3f 74 2e 6e 3a 74 68 69 73 2e 5f 74 2e 5f 66 29 3f 6c 28 30 2c 22 6b 65 79 73 22 3d 3d 65 3f 74 2e 6b 3a 22 76 61 6c 75 65 73 22 3d 3d 65 3f 74 2e 76 3a 5b 74 2e 6b 2c 74 2e 76 5d 29 3a 28 74 68 69 73 2e 5f 74 3d 76 6f 69 64 20 30 2c 6c 28 31 29 Data Ascii: v,setStrong:function(e,t,n){c(e,t,(function(e,n){this._t=h(e,t),this._k=n,this._l=void 0}),(function(){for(var e=this._k,t=this._l;t&&t.r;)t=t.p;return this._t&&(this._l=t=t?t.n:this._t._f)?l(0,"keys"==e?t.k:"values"==e?t.v:[t.k,t.v]):(this._t=void 0,l(1)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49720	18.66.161.15	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:48 UTC	626	OUT	GET /share/dist/vendor/webcomponents-bundle.js?v=9.26.11 HTTP/1.1 Host: nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:50 UTC	763	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 102695 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"19127-19371fe4ec0" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 24377ef75edd4e6b9442a3a00a398438.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: SpIyeCGq8DwEVgKLeXnHbxEzpNzgPNDrJxM9-4RSNs5Q5RvJ2Cd7WA==
2024-12-20 20:40:50 UTC	11786	IN	Data Raw: 2f 2a 2a 0a 40 6c 69 63 65 6e 73 65 20 40 6e 6f 63 6f 6d 70 69 6c 65 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 Data Ascii: /**@license @nocompileCopyright (c) 2018 The Polymer Project Authors. All rights reserved.This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txtThe complete set of authors may be found at http://polymer.gi
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 74 68 69 73 2c 21 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 65 6c 73 65 20 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 22 74 65 6d 70 6c 61 74 65 22 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 6c 4e 61 6d 65 26 26 74 68 69 73 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 3f 63 3d 61 2e 62 28 74 68 69 73 2c 62 29 3a 63 3d 66 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 3b 62 26 26 50 61 28 63 2c 74 68 69 73 29 3b 72 65 74 75 72 6e 20 63 7d 2c 75 66 3d 44 6f 63 75 6d 65 Data Ascii: this,!0);else return this.ownerDocument.createDocumentFragment();else this.nodeType===Node.ELEMENT_NODE&&"template"===this.localName&&this.namespaceURI==document.documentElement.namespaceURI?c=a.b(this,b):c=f.call(this,b);b&&Pa(c,this);return c},uf=Docume
2024-12-20 20:40:50 UTC	4096	IN	Data Raw: 28 76 61 72 20 62 3d 7b 7d 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 61 5b 63 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 6b 63 3d 6a 63 28 22 61 72 65 61 20 62 61 73 65 20 62 72 20 63 6f 6c 20 63 6f 6d 6d 61 6e 64 20 65 6d 62 65 64 20 68 72 20 69 6d 67 20 69 6e 70 75 74 20 6b 65 79 67 65 6e 20 6c 69 6e 6b 20 6d 65 74 61 20 70 61 72 61 6d 20 73 6f 75 72 63 65 20 74 72 61 63 6b 20 77 62 72 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 6c 63 3d 6a 63 28 22 73 74 79 6c 65 20 73 63 72 69 70 74 20 78 6d 70 20 69 66 72 61 6d 65 20 6e 6f 65 6d 62 65 64 20 6e 6f 66 72 61 6d 65 73 20 70 6c 61 69 6e 74 65 78 74 20 6e 6f 73 63 72 69 70 74 22 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 6d 63 28 61 2c 62 29 7b Data Ascii: (var b={},c=0;c<a.length;c++)b[a[c]]=!0;return b}var kc=jc("area base br col command embed hr img input keygen link meta param source track wbr".split(" ")),lc=jc("style script xmp iframe noembed noframes plaintext noscript".split(" "));function mc(a,b){
2024-12-20 20:40:50 UTC	8192	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 49 2e 69 6e 6e 65 72 48 54 4d 4c 2e 67 65 74 2e 63 61 6c 6c 28 61 29 7d 2c 74 65 78 74 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 49 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 67 65 74 2e 63 61 6c 6c 28 61 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 46 52 41 47 4d 45 4e 54 5f 4e 4f 44 45 3a 72 65 74 75 72 6e 20 71 63 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 2e 63 61 6c 6c 28 61 29 3b 63 61 73 65 20 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 4e 4f 44 45 3a 72 65 74 75 72 6e 20 72 63 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 2e 63 61 6c Data Ascii: unction(a){return I.innerHTML.get.call(a)},textContent:function(a){return I.textContent.get.call(a)},children:function(a){switch(a.nodeType){case Node.DOCUMENT_FRAGMENT_NODE:return qc.children.get.call(a);case Node.DOCUMENT_NODE:return rc.children.get.cal
2024-12-20 20:40:50 UTC	4096	IN	Data Raw: 28 65 2e 72 6f 6f 74 29 3b 76 61 72 20 66 3d 21 30 7d 69 66 28 54 63 28 29 26 26 21 63 26 26 64 29 7b 76 61 72 20 67 3d 52 63 28 62 29 3b 57 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 55 63 28 61 2c 67 29 7d 29 7d 62 64 28 62 29 3b 69 66 28 64 29 7b 76 61 72 20 68 3d 61 26 26 22 73 6c 6f 74 22 3d 3d 3d 61 2e 6c 6f 63 61 6c 4e 61 6d 65 3b 68 26 26 28 66 3d 21 30 29 3b 28 28 63 3d 63 64 28 64 2c 62 29 29 7c 7c 68 29 26 26 59 63 28 64 29 7d 66 7c 7c 28 66 3d 42 28 61 29 3f 61 2e 68 6f 73 74 3a 61 2c 28 21 65 2e 72 6f 6f 74 26 26 22 73 6c 6f 74 22 21 3d 3d 62 2e 6c 6f 63 61 6c 4e 61 6d 65 7c 7c 66 3d 3d 3d 4f 63 28 62 29 29 26 26 43 2e 72 65 6d 6f 76 65 43 68 69 6c 64 2e 63 61 6c 6c 28 66 2c 62 29 29 3b 61 64 28 61 2c 6e 75 6c 6c 2c 62 29 3b 72 65 74 75 Data Ascii: (e.root);var f=!0}if(Tc()&&!c&&d){var g=Rc(b);Wc(b,function(a){Uc(a,g)})}bd(b);if(d){var h=a&&"slot"===a.localName;h&&(f=!0);((c=cd(d,b))\|\|h)&&Yc(d)}f\|\|(f=B(a)?a.host:a,(!e.root&&"slot"!==b.localName\|\|f===Oc(b))&&C.removeChild.call(f,b));ad(a,null,b);retu
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 2e 5f 5f 74 61 72 67 65 74 2c 74 68 69 73 2e 63 6f 6d 70 6f 73 65 64 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 7d 2c 67 65 74 20 74 61 72 67 65 74 28 29 7b 72 65 74 75 72 6e 20 74 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 7c 7c 74 68 69 73 2e 5f 5f 70 72 65 76 69 6f 75 73 43 75 72 72 65 6e 74 54 61 72 67 65 74 2c 74 68 69 73 2e 63 6f 6d 70 6f 73 65 64 50 61 74 68 28 29 29 7d 2c 67 65 74 20 72 65 6c 61 74 65 64 54 61 72 67 65 74 28 29 7b 69 66 28 21 74 68 69 73 2e 6c 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 69 73 2e 76 61 7c 7c 28 74 68 69 73 2e 76 61 3d 73 64 28 74 68 69 73 2e 6c 61 2c 21 30 29 29 3b 72 65 74 75 72 6e 20 74 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 7c 7c 74 68 69 73 2e 5f 5f 70 72 65 76 Data Ascii: .__target,this.composed));return this.ta},get target(){return td(this.currentTarget\|\|this.__previousCurrentTarget,this.composedPath())},get relatedTarget(){if(!this.la)return null;this.va\|\|(this.va=sd(this.la,!0));return td(this.currentTarget\|\|this.__prev
2024-12-20 20:40:50 UTC	16384	IN	Data Raw: 69 66 28 21 63 2e 5f 5f 43 45 5f 64 6f 63 75 6d 65 6e 74 4c 6f 61 64 48 61 6e 64 6c 65 64 29 7b 63 2e 5f 5f 43 45 5f 64 6f 63 75 6d 65 6e 74 4c 6f 61 64 48 61 6e 64 6c 65 64 3d 21 30 3b 76 61 72 20 66 3d 6e 65 77 20 53 65 74 28 64 29 3b 66 2e 64 65 6c 65 74 65 28 63 29 3b 51 28 61 2c 63 2c 7b 66 62 3a 66 2c 69 61 3a 65 7d 29 7d 7d 29 7d 65 6c 73 65 20 66 2e 70 75 73 68 28 62 29 7d 2c 64 29 3b 0a 69 66 28 61 2e 63 29 66 6f 72 28 62 3d 30 3b 62 3c 66 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 61 2e 62 28 66 5b 62 5d 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 66 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 65 28 66 5b 62 5d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 75 65 28 61 2c 62 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 62 2e 5f 5f 43 45 5f 73 74 61 74 65 29 7b 76 61 72 20 63 3d 62 Data Ascii: if(!c.__CE_documentLoadHandled){c.__CE_documentLoadHandled=!0;var f=new Set(d);f.delete(c);Q(a,c,{fb:f,ia:e})}})}else f.push(b)},d);if(a.c)for(b=0;b<f.length;b++)a.b(f[b]);for(b=0;b<f.length;b++)e(f[b])}function ue(a,b){if(void 0===b.__CE_state){var c=b
2024-12-20 20:40:50 UTC	10208	IN	Data Raw: 29 2e 6d 61 74 63 68 65 73 7c 7c 28 65 3d 21 30 29 29 7d 66 3d 3d 3d 43 66 3f 62 28 61 29 3a 63 26 26 66 3d 3d 3d 41 66 3f 63 28 61 29 3a 66 3d 3d 3d 42 66 26 26 28 65 3d 21 30 29 3b 69 66 28 28 61 3d 61 2e 72 75 6c 65 73 29 26 26 21 65 29 66 6f 72 28 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 2c 67 3d 76 6f 69 64 20 30 3b 65 3c 66 26 26 28 67 3d 61 5b 65 5d 29 3b 65 2b 2b 29 53 66 28 67 2c 62 2c 63 2c 64 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 66 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 62 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 6f 70 65 22 2c 62 29 3b 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 3b 57 66 28 65 2c 63 2c 64 29 3b 72 Data Ascii: ).matches\|\|(e=!0))}f===Cf?b(a):c&&f===Af?c(a):f===Bf&&(e=!0);if((a=a.rules)&&!e)for(e=0,f=a.length,g=void 0;e<f&&(g=a[e]);e++)Sf(g,b,c,d)}}function Vf(a,b,c,d){var e=document.createElement("style");b&&e.setAttribute("scope",b);e.textContent=a;Wf(e,c,d);r
2024-12-20 20:40:50 UTC	8192	IN	Data Raw: 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 68 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 0a 61 29 7d 65 6c 73 65 20 6e 68 28 29 7d 29 7d 68 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 68 28 6c 68 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 7d 7d 76 61 72 20 6f 68 3d 68 68 3b 76 61 72 20 70 68 3d 7b 7d 3b 76 61 72 20 71 68 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 72 68 28 61 29 7b 69 66 28 61 3d Data Ascii: cument.readyState){var a=function(){nh();document.removeEventListener("readystatechange",a)};document.addEventListener("readystatechange",a)}else nh()})}hh=function(){kh(lh.takeRecords())}}var oh=hh;var ph={};var qh=Promise.resolve();function rh(a){if(a=
2024-12-20 20:40:50 UTC	6973	IN	Data Raw: 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 69 6e 20 73 63 68 65 6d 65 3a 20 22 2b 6d 29 3b 62 72 65 61 6b 20 61 7d 65 6c 73 65 7b 71 3d 22 22 3b 77 3d 30 3b 6b 3d 22 6e 6f 20 73 63 68 65 6d 65 22 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 3b 63 61 73 65 20 22 73 63 68 65 6d 65 20 64 61 74 61 22 3a 22 3f 22 3d 3d 6d 3f 28 74 68 69 73 2e 75 3d 22 3f 22 2c 0a 6b 3d 22 71 75 65 72 79 22 29 3a 22 23 22 3d 3d 6d 3f 28 74 68 69 73 2e 43 3d 22 23 22 2c 6b 3d 22 66 72 61 67 6d 65 6e 74 22 29 3a 76 6f 69 64 20 30 21 3d 6d 26 26 22 5c 74 22 21 3d 6d 26 26 22 5c 6e 22 21 3d 6d 26 26 22 5c 72 22 21 3d 6d 26 26 28 74 68 69 73 2e 70 61 2b 3d 63 28 6d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 6f 20 73 63 68 65 6d 65 22 3a 69 66 28 67 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: not allowed in scheme: "+m);break a}else{q="";w=0;k="no scheme";continue}break;case "scheme data":"?"==m?(this.u="?",k="query"):"#"==m?(this.C="#",k="fragment"):void 0!=m&&"\t"!=m&&"\n"!=m&&"\r"!=m&&(this.pa+=c(m));break;case "no scheme":if(g&&void 0!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49723	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:52 UTC	715	OUT	GET /share/dist/assets/loader-32.png HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:53 UTC	710	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 42487 Connection: close Date: Fri, 20 Dec 2024 20:40:53 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"a5f7-19371fe4ec0" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 65276759ad449c7bd056011d5cc53b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: Q7XvzgQuSgcwQzmEBVvt0vqys3p6IBqrdyo0dpw-syIisrrsloB9PA==
2024-12-20 20:40:53 UTC	3578	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 a2 f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR szziTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://
2024-12-20 20:40:53 UTC	69	IN	Data Raw: 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 31 32 38 30 36 36 34 30 30 30 30 30 30 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e Data Ascii: toPart="time:0d1280664000000f254016000000" stRef:maskMarkers="N
2024-12-20 20:40:53 UTC	7294	IN	Data Raw: 6f 6e 65 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 50 61 6e 74 72 79 3e 0a 20 20 20 20 3c 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 0a 20 20 20 20 20 20 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 0a 20 20 20 20 20 20 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 30 2d 30 36 2d 31 38 54 30 37 3a 32 36 3a 32 32 2b 30 35 3a 30 Data Ascii: one"/> </rdf:Bag> </xmpMM:Ingredients> <xmpMM:Pantry> <rdf:Bag> <rdf:li> <rdf:Description dc:format="application/pdf" xmp:CreatorTool="Adobe Illustrator 24.1 (Windows)" xmp:CreateDate="2020-06-18T07:26:22+05:0
2024-12-20 20:40:53 UTC	898	IN	Data Raw: 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 26 23 78 41 3b 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 26 23 78 41 3b 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 26 23 78 41 3b 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 Data Ascii: dirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirs VdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsV dirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVd irsVdirsVdirsVdirsVdirsVdirsVdirsV
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 31 4c 70 79 2f 55 78 50 4e 61 39 49 37 46 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 57 57 2b 53 64 47 53 52 26 23 78 41 3b 6a 71 55 36 31 43 48 6a 62 67 2f 7a 44 71 33 30 64 42 6d 64 6f 38 4e 2b 6f 75 69 37 59 31 5a 48 37 75 50 58 6e 2b 70 6d 65 62 46 35 31 32 4b 75 78 56 32 4b 73 57 38 36 36 4d 6b 6c 76 2b 6b 6f 56 70 4c 46 51 54 30 2f 61 51 37 41 26 23 78 41 3b 2f 4e 66 31 5a 67 36 7a 46 59 34 67 37 7a 73 66 56 6b 53 38 4d 38 6a 79 39 37 43 4d 31 7a 30 62 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 65 4b 76 57 62 61 42 59 4c 61 4b 42 66 73 78 49 71 44 35 4b 4b 5a 30 6b 49 30 41 4f 35 26 23 78 41 3b 38 32 79 35 44 4f 5a 6b 65 70 74 55 79 54 57 37 46 58 59 71 37 46 55 46 72 63 43 7a 36 52 65 52 74 33 69 5a 68 38 31 48 49 Data Ascii: 1Lpy/UxPNa9I7FXYq7FXYq7FXYq7FXYq7FXYq7FWW+SdGSR jqU61CHjbg/zDq30dBmdo8N+oui7Y1ZH7uPXn+pmebF512KuxV2KsW866Mklv+koVpLFQT0/aQ7A /Nf1Zg6zFY4g7zsfVkS8M8jy97CM1z0bsVdirsVdirsVdireKvWbaBYLaKBfsxIqD5KKZ0kI0AO5 82y5DOZkeptUyTW7FXYq7FUFrcCz6ReRt3iZh81HI
2024-12-20 20:40:53 UTC	8192	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 54 50 67 3a 53 77 61 74 63 68 47 72 6f 75 70 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 34 39 39 61 37 30 39 2d Data Ascii: scription> </rdf:li> </rdf:Seq> </xmpTPg:SwatchGroups> </rdf:Description> </rdf:li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:1499a709-
2024-12-20 20:40:53 UTC	4096	IN	Data Raw: 74 69 6d 65 3a 30 64 31 32 38 30 36 36 34 30 30 30 30 30 30 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 31 32 38 30 36 36 34 30 30 30 30 30 30 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 41 6c 6c 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 Data Ascii: time:0d1280664000000f254016000000" stRef:toPart="time:0d1280664000000f254016000000" stRef:maskMarkers="All"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rdf:li> <rdf:li> <rdf:Description
2024-12-20 20:40:53 UTC	1976	IN	Data Raw: 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 39 61 38 37 31 34 65 2d 64 34 31 32 2d 31 32 34 62 2d 62 35 64 37 2d 31 37 64 33 34 66 38 30 66 36 35 33 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 Data Ascii: </rdf:Description> </rdf:li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:e9a8714e-d412-124b-b5d7-17d34f80f653"> <dc:title> <rdf:Alt> <rdf:li x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49724	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:52 UTC	648	OUT	GET /share/dist/hammer.min.js HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:53 UTC	761	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 20765 Connection: close Date: Fri, 20 Dec 2024 20:40:53 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"511d-19371fe4ec0" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 9e5f1a91c47416623ea43cb662694d38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: JA5bFr6h1bwNsr99y_5K_dCwhGVaWh619TAMmInwuAU6DlF9etgcrQ==
2024-12-20 20:40:53 UTC	3527	IN	Data Raw: 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 37 20 2d 20 32 30 31 36 2d 30 34 2d 32 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 6a 28 61 2c 63 29 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 Data Ascii: /! Hammer.JS - v2.0.7 - 2016-04-22 http://hammerjs.github.io/ * * Copyright (c) 2016 Jorik Tangelder; * Licensed under the MIT license */!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.i
2024-12-20 20:40:53 UTC	6396	IN	Data Raw: 6c 61 73 74 49 6e 74 65 72 76 61 6c 7c 7c 62 2c 69 3d 62 2e 74 69 6d 65 53 74 61 6d 70 2d 68 2e 74 69 6d 65 53 74 61 6d 70 3b 69 66 28 62 2e 65 76 65 6e 74 54 79 70 65 21 3d 48 61 26 26 28 69 3e 44 61 7c 7c 68 2e 76 65 6c 6f 63 69 74 79 3d 3d 3d 64 29 29 7b 76 61 72 20 6a 3d 62 2e 64 65 6c 74 61 58 2d 68 2e 64 65 6c 74 61 58 2c 6b 3d 62 2e 64 65 6c 74 61 59 2d 68 2e 64 65 6c 74 61 59 2c 6c 3d 46 28 69 2c 6a 2c 6b 29 3b 65 3d 6c 2e 78 2c 66 3d 6c 2e 79 2c 63 3d 71 61 28 6c 2e 78 29 3e 71 61 28 6c 2e 79 29 3f 6c 2e 78 3a 6c 2e 79 2c 67 3d 47 28 6a 2c 6b 29 2c 61 2e 6c 61 73 74 49 6e 74 65 72 76 61 6c 3d 62 7d 65 6c 73 65 20 63 3d 68 2e 76 65 6c 6f 63 69 74 79 2c 65 3d 68 2e 76 65 6c 6f 63 69 74 79 58 2c 66 3d 68 2e 76 65 6c 6f 63 69 74 79 59 2c 67 3d 68 2e Data Ascii: lastInterval\|\|b,i=b.timeStamp-h.timeStamp;if(b.eventType!=Ha&&(i>Da\|\|h.velocity===d)){var j=b.deltaX-h.deltaX,k=b.deltaY-h.deltaY,l=F(i,j,k);e=l.x,f=l.y,c=qa(l.x)>qa(l.y)?l.x:l.y,g=G(j,k),a.lastInterval=b}else c=h.velocity,e=h.velocityX,f=h.velocityY,g=h.
2024-12-20 20:40:53 UTC	1865	IN	Data Raw: 61 7d 2c 57 61 3d 7b 32 3a 7a 61 2c 33 3a 41 61 2c 34 3a 42 61 2c 35 3a 43 61 7d 2c 58 61 3d 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 2c 59 61 3d 22 70 6f 69 6e 74 65 72 6d 6f 76 65 20 70 6f 69 6e 74 65 72 75 70 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 3b 61 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 21 61 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 28 58 61 3d 22 4d 53 50 6f 69 6e 74 65 72 44 6f 77 6e 22 2c 59 61 3d 22 4d 53 50 6f 69 6e 74 65 72 4d 6f 76 65 20 4d 53 50 6f 69 6e 74 65 72 55 70 20 4d 53 50 6f 69 6e 74 65 72 43 61 6e 63 65 6c 22 29 2c 69 28 4d 2c 78 2c 7b 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 73 74 6f 72 65 2c 63 3d 21 31 2c 64 3d 61 2e 74 79 70 65 2e 74 6f 4c 6f 77 65 72 43 Data Ascii: a},Wa={2:za,3:Aa,4:Ba,5:Ca},Xa="pointerdown",Ya="pointermove pointerup pointercancel";a.MSPointerEvent&&!a.PointerEvent&&(Xa="MSPointerDown",Ya="MSPointerMove MSPointerUp MSPointerCancel"),i(M,x,{handler:function(a){var b=this.store,c=!1,d=a.type.toLowerC
2024-12-20 20:40:53 UTC	7294	IN	Data Raw: 63 74 69 6f 6e 29 7d 2c 63 6f 6d 70 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 67 28 74 68 69 73 2e 6d 61 6e 61 67 65 72 2e 72 65 63 6f 67 6e 69 7a 65 72 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 6b 28 62 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 2c 5b 62 5d 29 26 26 28 61 3d 61 2e 63 6f 6e 63 61 74 28 62 2e 67 65 74 54 6f 75 63 68 41 63 74 69 6f 6e 28 29 29 29 7d 29 2c 57 28 61 2e 6a 6f 69 6e 28 22 20 22 29 29 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 72 63 45 76 65 6e 74 2c 63 3d 61 2e 6f 66 66 73 65 74 44 69 72 65 63 74 69 6f 6e 3b 69 66 28 74 68 69 73 2e 6d 61 6e 61 67 65 72 2e 73 65 73 73 69 6f 6e 2e 70 72 65 76 65 6e 74 65 Data Ascii: ction)},compute:function(){var a=[];return g(this.manager.recognizers,function(b){k(b.options.enable,[b])&&(a=a.concat(b.getTouchAction()))}),W(a.join(" "))},preventDefaults:function(a){var b=a.srcEvent,c=a.offsetDirection;if(this.manager.session.prevente
2024-12-20 20:40:53 UTC	1683	IN	Data Raw: 6e 61 67 65 72 3d 74 68 69 73 2c 74 68 69 73 2e 74 6f 75 63 68 41 63 74 69 6f 6e 2e 75 70 64 61 74 65 28 29 2c 61 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 28 61 2c 22 72 65 6d 6f 76 65 22 2c 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 3d 74 68 69 73 2e 67 65 74 28 61 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 72 65 63 6f 67 6e 69 7a 65 72 73 2c 63 3d 72 28 62 2c 61 29 3b 2d 31 21 3d 3d 63 26 26 28 62 2e 73 70 6c 69 63 65 28 63 2c 31 29 2c 74 68 69 73 2e 74 6f 75 63 68 41 63 74 69 6f 6e 2e 75 70 64 61 74 65 28 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 21 3d 3d 64 26 26 62 21 3d 3d 64 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 68 61 6e 64 Data Ascii: nager=this,this.touchAction.update(),a},remove:function(a){if(f(a,"remove",this))return this;if(a=this.get(a)){var b=this.recognizers,c=r(b,a);-1!==c&&(b.splice(c,1),this.touchAction.update())}return this},on:function(a,b){if(a!==d&&b!==d){var c=this.hand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49725	18.66.161.15	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:52 UTC	443	OUT	GET /share/dist/vendor/webcomponents-bundle.js?v=9.26.11 HTTP/1.1 Host: nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:53 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 102695 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"19127-19371fe4ec0" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c3ae0fb6fa0fe401f27d2841c609ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 9vrRJqBn3jm-28m0Md8mwYblcXKzykDGOMd0--gEcSHIkJPeZOwfbQ== Age: 4
2024-12-20 20:40:53 UTC	15614	IN	Data Raw: 2f 2a 2a 0a 40 6c 69 63 65 6e 73 65 20 40 6e 6f 63 6f 6d 70 69 6c 65 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 Data Ascii: /**@license @nocompileCopyright (c) 2018 The Polymer Project Authors. All rights reserved.This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txtThe complete set of authors may be found at http://polymer.gi
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 61 3d 59 61 2e 6c 65 6e 67 74 68 2c 62 3d 30 3b 62 3c 61 3b 62 2b 2b 29 59 61 5b 62 5d 28 29 3b 59 61 2e 73 70 6c 69 63 65 28 30 2c 61 29 7d 29 29 2e 6f 62 73 65 72 76 65 28 58 61 2c 7b 63 68 61 72 61 63 74 65 72 44 61 74 61 3a 21 30 7d 29 3b 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 59 61 2e 70 75 73 68 28 61 29 3b 58 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 30 3c 58 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 3f 22 22 3a 22 61 22 7d 7d 3b 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 35 20 62 79 20 57 65 62 52 65 66 6c 65 63 74 69 6f 6e 0a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e Data Ascii: a=Ya.length,b=0;b<a;b++)Ya[b]();Ya.splice(0,a)})).observe(Xa,{characterData:!0});Ka=function(a){Ya.push(a);Xa.textContent=0<Xa.textContent.length?"":"a"}};/* Copyright (C) 2015 by WebReflectionPermission is hereby granted, free of charge, to any person
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 49 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 67 65 74 2e 63 61 6c 6c 28 61 29 29 7d 2c 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 49 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 2e 63 61 6c 6c 28 61 29 7d 2c 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 49 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2e 67 65 74 2e 63 61 6c 6c 28 61 29 7d 2c 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 49 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2e 67 65 74 2e 63 61 6c 6c 28 61 29 7d Data Ascii: ype.slice.call(I.childNodes.get.call(a))},parentElement:function(a){return I.parentElement.get.call(a)},previousElementSibling:function(a){return I.previousElementSibling.get.call(a)},nextElementSibling:function(a){return I.nextElementSibling.get.call(a)}
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 6f 74 6f 74 79 70 65 2c 22 69 73 54 72 75 73 74 65 64 22 29 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 4d 6f 75 73 65 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 29 3b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 61 29 7d 3b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 69 63 6b 3f 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 69 63 6b 3d 61 3a 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 69 63 6b 26 26 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 69 63 6b 3d 61 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 64 Data Ascii: ototype,"isTrusted")){var a=function(){var a=new MouseEvent("click",{bubbles:!0,cancelable:!0,composed:!0});this.dispatchEvent(a)};Element.prototype.click?Element.prototype.click=a:HTMLElement.prototype.click&&(HTMLElement.prototype.click=a)}};function Jd
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 61 7d 29 26 26 62 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 72 65 74 75 72 6e 20 62 2e 62 7d 3b 72 2e 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 65 28 74 68 69 73 2e 66 61 29 3b 76 61 72 20 62 3d 74 68 69 73 2e 66 3b 74 68 69 73 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 28 63 29 7d 29 7d 7d 3b 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 52 65 67 69 73 74 72 79 3d 53 3b 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 69 6e 65 3d 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 69 6e 65 3b 0a 53 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 67 72 61 64 65 3d 53 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3b 53 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 53 2e Data Ascii: a})&&b.resolve(void 0);return b.b};r.Ya=function(a){we(this.fa);var b=this.f;this.f=function(c){return a(function(){return b(c)})}};window.CustomElementRegistry=S;S.prototype.define=S.prototype.define;S.prototype.upgrade=S.prototype.ia;S.prototype.get=S.
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 21 31 3b 30 3c 3d 65 26 26 28 62 3d 22 22 2c 63 3d 21 30 29 3b 69 66 28 63 29 7b 76 61 72 20 66 3d 21 30 3b 63 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 44 67 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 20 3e 20 22 2b 62 7d 29 29 7d 61 3d 61 2e 72 65 70 6c 61 63 65 28 45 67 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 27 5b 64 69 72 3d 22 27 2b 63 2b 27 22 5d 20 27 2b 62 2b 22 2c 20 22 2b 62 2b 27 5b 64 69 72 3d 22 27 2b 63 2b 27 22 5d 27 7d 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 61 2c 4f 61 3a 62 2c 73 74 6f 70 3a 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 67 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 46 67 29 3b 61 5b 30 5d 2b 3d 62 3b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 46 67 29 7d 0a 66 75 Data Ascii: !1;0<=e&&(b="",c=!0);if(c){var f=!0;c&&(a=a.replace(Dg,function(a,b){return" > "+b}))}a=a.replace(Eg,function(a,b,c){return'[dir="'+c+'"] '+b+", "+b+'[dir="'+c+'"]'});return{value:a,Oa:b,stop:f}}function Cg(a,b){a=a.split(Fg);a[0]+=b;return a.join(Fg)}fu
2024-12-20 20:40:53 UTC	5161	IN	Data Raw: 64 79 20 73 65 65 6e 2e 22 29 2c 71 2b 3d 22 25 34 30 22 29 3b 75 3d 21 30 3b 66 6f 72 28 6d 3d 30 3b 6d 3c 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 79 3d 71 5b 6d 5d 2c 22 5c 74 22 3d 3d 79 7c 7c 22 5c 6e 22 3d 3d 79 7c 7c 22 5c 72 22 3d 3d 79 3f 68 28 22 49 6e 76 61 6c 69 64 20 77 68 69 74 65 73 70 61 63 65 20 69 6e 20 61 75 74 68 6f 72 69 74 79 2e 22 29 3a 22 3a 22 3d 3d 79 26 26 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 67 3f 74 68 69 73 2e 67 3d 22 22 3a 28 79 3d 63 28 79 29 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 67 3f 74 68 69 73 2e 67 2b 3d 79 3a 74 68 69 73 2e 76 2b 3d 79 29 3b 71 3d 22 22 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 3d 3d 6d 7c 7c 22 2f 22 3d 3d 6d 7c 7c 22 5c 5c 22 3d 3d 6d 7c 7c 22 3f 22 3d 3d 6d 7c 7c 22 23 22 3d 3d 6d 29 7b 77 2d 3d Data Ascii: dy seen."),q+="%40");u=!0;for(m=0;m<q.length;m++)y=q[m],"\t"==y\|\|"\n"==y\|\|"\r"==y?h("Invalid whitespace in authority."):":"==y&&null===this.g?this.g="":(y=c(y),null!==this.g?this.g+=y:this.v+=y);q=""}else if(void 0==m\|\|"/"==m\|\|"\\"==m\|\|"?"==m\|\|"#"==m){w-=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49726	18.66.161.15	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:52 UTC	422	OUT	GET /share/dist/common.js?v=9.26.11 HTTP/1.1 Host: nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:53 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 217666 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"35242-19371fe4ec0" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 edd0b6250cdc635d6c9fac34e62bc31c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 8t2Sj6C8_FiDhA5k5KjmNIf4uChDQLM9KrLz-cdKCmwwPDzbv3ZiAQ== Age: 4
2024-12-20 20:40:53 UTC	15249	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6d 6d 6f 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f Data Ascii: /! For license information please see common.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 3a 6e 3d 61 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 3a 6f 28 6e 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 32 29 2c 6f 3d 6e 28 36 37 29 2e 63 6f 6e 63 61 74 28 22 6c 65 6e 67 74 68 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 29 3b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 6f 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 29 2c 6f 3d 6e 28 37 29 2c 69 3d 6e 28 36 29 2c 73 3d 6e 28 35 29 28 22 73 70 65 63 69 65 73 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 5b 65 5d 3b 69 26 26 74 26 26 21 74 5b Data Ascii: :n=a(),void 0===t?n:o(n,t)}},function(e,t,n){var r=n(92),o=n(67).concat("length","prototype");t.f=Object.getOwnPropertyNames\|\|function(e){return r(e,o)}},function(e,t,n){var r=n(2),o=n(7),i=n(6),s=n(5)("species");e.exports=function(e){var t=r[e];i&&t&&!t[
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 3b 65 2e 65 78 70 6f 72 74 73 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 69 2e 63 61 6c 6c 28 65 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6f 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 73 6c 69 63 65 28 29 7d 7d 28 65 29 3a 6f 28 72 28 65 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 34 29 2c 6f 3d 6e 28 35 31 29 2c 69 3d 6e 28 34 37 29 2c 73 3d 6e 28 39 29 2c 75 3d 6e 28 34 36 29 2c 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3b 65 2e 65 78 70 6f 72 74 73 3d 21 61 7c 7c 6e 28 33 29 28 28 Data Ascii: OwnPropertyNames(window):[];e.exports.f=function(e){return s&&"[object Window]"==i.call(e)?function(e){try{return o(e)}catch(e){return s.slice()}}(e):o(r(e))}},function(e,t,n){var r=n(34),o=n(51),i=n(47),s=n(9),u=n(46),a=Object.assign;e.exports=!a\|\|n(3)((
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 2e 63 61 6c 6c 28 6e 29 7d 29 29 3a 22 4e 75 6d 62 65 72 22 21 3d 69 28 6e 29 29 3f 73 28 6e 65 77 20 68 28 67 28 74 29 29 2c 6e 2c 70 29 3a 67 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 79 2c 6a 3d 6e 28 36 29 3f 63 28 68 29 3a 22 4d 41 58 5f 56 41 4c 55 45 2c 4d 49 4e 5f 56 41 4c 55 45 2c 4e 61 4e 2c 4e 45 47 41 54 49 56 45 5f 49 4e 46 49 4e 49 54 59 2c 50 4f 53 49 54 49 56 45 5f 49 4e 46 49 4e 49 54 59 2c 45 50 53 49 4c 4f 4e 2c 69 73 46 69 6e 69 74 65 2c 69 73 49 6e 74 65 67 65 72 2c 69 73 4e 61 4e 2c 69 73 53 61 66 65 49 6e 74 65 67 65 72 2c 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 4d 49 4e 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 70 61 72 73 65 46 6c 6f 61 74 2c 70 61 72 73 65 49 6e 74 2c 69 73 49 6e 74 65 67 65 72 22 2e 73 70 6c 69 74 28 22 Data Ascii: .call(n)})):"Number"!=i(n))?s(new h(g(t)),n,p):g(t)};for(var y,j=n(6)?c(h):"MAX_VALUE,MIN_VALUE,NaN,NEGATIVE_INFINITY,POSITIVE_INFINITY,EPSILON,isFinite,isInteger,isNaN,isSafeInteger,MAX_SAFE_INTEGER,MIN_SAFE_INTEGER,parseFloat,parseInt,isInteger".split("
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 72 20 72 3d 7b 5f 77 3a 6e 2c 5f 64 3a 21 31 7d 3b 74 72 79 7b 74 2e 63 61 6c 6c 28 65 2c 63 28 4c 2c 72 2c 31 29 2c 63 28 43 2c 72 2c 31 29 29 7d 63 61 74 63 68 28 65 29 7b 43 2e 63 61 6c 6c 28 72 2c 65 29 7d 7d 29 29 3a 28 6e 2e 5f 76 3d 65 2c 6e 2e 5f 73 3d 31 2c 4e 28 6e 2c 21 31 29 29 7d 63 61 74 63 68 28 65 29 7b 43 2e 63 61 6c 6c 28 7b 5f 77 3a 6e 2c 5f 64 3a 21 31 7d 2c 65 29 7d 7d 7d 3b 41 7c 7c 28 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 28 74 68 69 73 2c 45 2c 22 50 72 6f 6d 69 73 65 22 2c 22 5f 68 22 29 2c 70 28 65 29 2c 72 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 72 79 7b 65 28 63 28 4c 2c 74 68 69 73 2c 31 29 2c 63 28 43 2c 74 68 69 73 2c 31 29 29 7d 63 61 74 63 68 28 65 29 7b 43 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 2c 28 72 3d 66 Data Ascii: r r={_w:n,_d:!1};try{t.call(e,c(L,r,1),c(C,r,1))}catch(e){C.call(r,e)}})):(n._v=e,n._s=1,N(n,!1))}catch(e){C.call({_w:n,_d:!1},e)}}};A\|\|(E=function(e){h(this,E,"Promise","_h"),p(e),r.call(this);try{e(c(L,this,1),c(C,this,1))}catch(e){C.call(this,e)}},(r=f
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 73 65 29 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 61 28 65 29 3b 76 61 72 20 6f 3d 74 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 28 65 29 2c 6f 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 2c 65 72 72 6f 72 3a 72 2c 63 6f 6d 70 6c 65 74 65 3a 6e 7d 29 7d 29 29 7d 7d 29 2c 66 28 62 2c 7b 66 72 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 3f 74 68 69 73 3a 62 2c 6e 3d 6d 28 63 28 65 29 5b 75 5d 29 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 63 28 6e 2e 63 61 6c 6c 28 65 29 29 3b 72 65 74 75 72 6e 20 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d Data Ascii: se)((function(n,r){a(e);var o=t.subscribe({next:function(t){try{return e(t)}catch(e){r(e),o.unsubscribe()}},error:r,complete:n})}))}}),f(b,{from:function(e){var t="function"==typeof this?this:b,n=m(c(e)[u]);if(n){var r=c(n.call(e));return r.constructor===
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 29 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 65 78 70 6f 72 74 73 3d 72 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 69 65 38 2d 64 6f 6d 2d 64 65 66 69 6e 65 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 21 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 64 65 73 63 72 69 70 74 6f 72 73 2e 6a 73 22 29 26 26 21 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 66 61 69 6c 73 2e 6a 73 22 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: ).document;e.exports=r&&r.documentElement},"./node_modules/core-js/modules/_ie8-dom-define.js":function(e,t,n){e.exports=!n("./node_modules/core-js/modules/_descriptors.js")&&!n("./node_modules/core-js/modules/_fails.js")((function(){return 7!=Object.defi
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 6f 72 2d 6d 65 74 68 6f 64 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 63 6c 61 73 73 6f 66 2e 6a 73 22 29 2c 6f 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 77 6b 73 2e 6a 73 22 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 69 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 69 74 65 72 61 74 6f 72 73 2e 6a 73 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 5f 63 6f 72 65 2e 6a 73 22 29 2e 67 65 74 49 74 65 Data Ascii: or-method.js":function(e,t,n){var r=n("./node_modules/core-js/modules/_classof.js"),o=n("./node_modules/core-js/modules/_wks.js")("iterator"),i=n("./node_modules/core-js/modules/_iterators.js");e.exports=n("./node_modules/core-js/modules/_core.js").getIte
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 4d 61 74 68 2e 61 62 73 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 64 75 72 61 74 69 6f 6e 7c 7c 30 3d 3d 3d 65 2e 69 74 65 72 61 74 69 6f 6e 73 3f 30 3a 65 2e 64 75 72 61 74 69 6f 6e 2a 65 2e 69 74 65 72 61 74 69 6f 6e 73 7d 28 65 29 2f 65 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 29 7d 2c 65 2e 63 61 6c 63 75 6c 61 74 65 49 74 65 72 61 74 69 6f 6e 50 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 63 28 65 2c 74 2c 6e 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 77 3a 72 65 74 75 72 6e 22 62 61 63 6b 77 61 72 64 73 22 3d 3d 74 7c 7c 22 62 6f 74 68 22 3d 3d 74 3f 30 3a 6e 75 6c 6c 3b 63 61 73 Data Ascii: eturn Math.abs(function(e){return 0===e.duration\|\|0===e.iterations?0:e.duration*e.iterations}(e)/e.playbackRate)},e.calculateIterationProgress=function(e,t,n){var r=c(e,t,n),o=function(e,t,n,r,o){switch(r){case w:return"backwards"==t\|\|"both"==t?0:null;cas
2024-12-20 20:40:53 UTC	16384	IN	Data Raw: 61 79 62 61 63 6b 52 61 74 65 7c 7c 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 54 69 6d 65 50 65 6e 64 69 6e 67 3f 22 70 65 6e 64 69 6e 67 22 3a 74 68 69 73 2e 5f 70 61 75 73 65 64 3f 22 70 61 75 73 65 64 22 3a 74 68 69 73 2e 5f 69 73 46 69 6e 69 73 68 65 64 3f 22 66 69 6e 69 73 68 65 64 22 3a 22 72 75 6e 6e 69 6e 67 22 7d 2c 5f 72 65 77 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3e 3d 30 29 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 54 69 6d 65 3d 30 3b 65 6c 73 65 7b 69 66 28 21 28 74 68 69 73 2e 5f 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 3c 31 2f 30 29 29 74 68 72 6f 77 20 6e 65 77 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 28 22 55 6e 61 62 6c 65 20 74 6f 20 72 65 77 69 6e 64 20 6e 65 67 61 74 69 76 Data Ascii: aybackRate\|\|this._currentTimePending?"pending":this._paused?"paused":this._isFinished?"finished":"running"},_rewind:function(){if(this._playbackRate>=0)this._currentTime=0;else{if(!(this._totalDuration<1/0))throw new DOMException("Unable to rewind negativ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49727	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:55 UTC	662	OUT	GET /share/dist/index.js?v=9.26.11-73fecd7b HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:55 UTC	766	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 11070984 Connection: close Date: Fri, 20 Dec 2024 20:40:55 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"a8ee08-19371fe4ec0" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 d3dc7fce70a4cf01f01f6bf06755098c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: _AUDqW6ylg4L4c-8fHOG__YurzrcdIyhy2eSxN1ku6tmOaPo2gNVBQ==
2024-12-20 20:40:55 UTC	3522	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 69 6e 64 65 78 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 Data Ascii: /! For license information please see index.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(
2024-12-20 20:40:55 UTC	8261	IN	Data Raw: 73 53 74 61 72 74 65 64 28 29 7c 7c 28 74 68 69 73 2e 5f 6f 6e 53 74 61 72 74 28 29 2c 74 68 69 73 2e 74 72 69 67 67 65 72 4d 69 63 72 6f 74 61 73 6b 28 29 29 2c 74 68 69 73 2e 5f 73 74 61 72 74 65 64 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4d 69 63 72 6f 74 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 62 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6f 6e 46 69 6e 69 73 68 28 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 6e 53 74 61 72 74 46 6e 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 74 68 69 73 2e 5f 6f 6e 53 Data Ascii: sStarted()\|\|(this._onStart(),this.triggerMicrotask()),this._started=!0},e.prototype.triggerMicrotask=function(){var e=this;b((function(){return e._onFinish()}))},e.prototype._onStart=function(){this._onStartFns.forEach((function(e){return e()})),this._onS
2024-12-20 20:40:55 UTC	7294	IN	Data Raw: 29 2c 63 3d 21 30 29 2c 6f 3c 30 26 26 28 74 2e 70 75 73 68 28 22 44 65 6c 61 79 20 76 61 6c 75 65 73 20 62 65 6c 6f 77 20 30 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 61 6e 69 6d 61 74 69 6f 6e 20 73 74 65 70 2e 22 29 2c 63 3d 21 30 29 2c 63 26 26 74 2e 73 70 6c 69 63 65 28 75 2c 30 2c 27 54 68 65 20 70 72 6f 76 69 64 65 64 20 74 69 6d 69 6e 67 20 76 61 6c 75 65 20 22 27 2b 65 2b 27 22 20 69 73 20 69 6e 76 61 6c 69 64 2e 27 29 7d 72 65 74 75 72 6e 7b 64 75 72 61 74 69 6f 6e 3a 72 2c 64 65 6c 61 79 3a 6f 2c 65 61 73 69 6e 67 3a 69 7d 7d 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: ),c=!0),o<0&&(t.push("Delay values below 0 are not allowed for this animation step."),c=!0),c&&t.splice(u,0,'The provided timing value "'+e+'" is invalid.')}return{duration:r,delay:o,easing:i}}(e,t,n)}function I(e,t){return void 0===t&&(t={}),Object.keys(
2024-12-20 20:40:56 UTC	4994	IN	Data Raw: 72 65 6e 74 41 6e 69 6d 61 74 65 54 69 6d 69 6e 67 73 2c 6f 3d 74 2e 63 75 72 72 65 6e 74 54 69 6d 65 2c 69 3d 74 2e 63 75 72 72 65 6e 74 54 69 6d 65 3b 72 26 26 69 3e 30 26 26 28 69 2d 3d 72 2e 64 75 72 61 74 69 6f 6e 2b 72 2e 64 65 6c 61 79 29 2c 65 2e 73 74 79 6c 65 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 6e 2e 5f 64 72 69 76 65 72 2e 76 61 6c 69 64 61 74 65 53 74 79 6c 65 50 72 6f 70 65 72 74 79 28 72 29 29 7b 76 61 72 20 61 2c 73 2c 6c 2c 63 2c 75 2c 64 3d 74 2e 63 6f 6c 6c 65 63 74 65 64 53 74 79 6c 65 73 5b 74 2e 63 75 72 72 65 6e 74 51 75 65 72 Data Ascii: rentAnimateTimings,o=t.currentTime,i=t.currentTime;r&&i>0&&(i-=r.duration+r.delay),e.styles.forEach((function(e){"string"!=typeof e&&Object.keys(e).forEach((function(r){if(n._driver.validateStyleProperty(r)){var a,s,l,c,u,d=t.collectedStyles[t.currentQuer
2024-12-20 20:40:56 UTC	3198	IN	Data Raw: 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 70 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 70 2e 61 6c 6c 6f 77 4f 6e 6c 79 54 69 6d 65 6c 69 6e 65 53 74 79 6c 65 73 28 29 7c 7c 70 2e 73 65 74 53 74 79 6c 65 73 28 5b 61 5d 2c 6e 75 6c 6c 2c 75 2e 65 72 72 6f 72 73 2c 73 29 7d 72 65 74 75 72 6e 20 64 2e 6c 65 6e 67 74 68 3f 64 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 75 69 6c 64 4b 65 79 66 72 61 6d 65 73 28 29 7d 29 29 3a 5b 73 65 28 74 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 30 2c 30 2c 22 22 2c 21 31 29 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 73 69 74 54 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 73 69 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: .length){var p=d[d.length-1];p.allowOnlyTimelineStyles()\|\|p.setStyles([a],null,u.errors,s)}return d.length?d.map((function(e){return e.buildKeyframes()})):[se(t,[],[],[],0,0,"",!1)]},e.prototype.visitTrigger=function(e,t){},e.prototype.visitState=function
2024-12-20 20:40:56 UTC	8192	IN	Data Raw: 66 72 61 6d 65 28 29 7d 29 29 2c 74 2e 63 75 72 72 65 6e 74 54 69 6d 65 6c 69 6e 65 2e 6d 65 72 67 65 54 69 6d 65 6c 69 6e 65 43 6f 6c 6c 65 63 74 65 64 53 74 79 6c 65 73 28 69 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 49 6e 74 6f 4e 65 77 54 69 6d 65 6c 69 6e 65 28 72 2b 6f 29 2c 74 2e 70 72 65 76 69 6f 75 73 4e 6f 64 65 3d 65 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 73 69 74 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 74 2e 63 75 72 72 65 6e 74 54 69 6d 65 6c 69 6e 65 2e 63 75 72 72 65 6e 74 54 69 6d 65 2c 6f 3d 65 2e 6f 70 74 69 6f 6e 73 7c 7c 7b 7d 2c 69 3d 6f 2e 64 65 6c 61 79 3f 41 28 6f 2e 64 65 6c 61 79 29 3a 30 3b 69 26 26 28 36 3d 3d 3d 74 2e 70 72 65 76 69 6f 75 73 4e 6f 64 65 2e 74 79 Data Ascii: frame()})),t.currentTimeline.mergeTimelineCollectedStyles(i),t.transformIntoNewTimeline(r+o),t.previousNode=e},e.prototype.visitQuery=function(e,t){var n=this,r=t.currentTimeline.currentTime,o=e.options\|\|{},i=o.delay?A(o.delay):0;i&&(6===t.previousNode.ty
2024-12-20 20:40:56 UTC	898	IN	Data Raw: 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 73 54 6f 4b 65 79 66 72 61 6d 65 28 29 3b 76 61 72 20 74 3d 6e 65 77 20 53 65 74 2c 6e 3d 6e 65 77 20 53 65 74 2c 72 3d 31 3d 3d 3d 74 68 69 73 2e 5f 6b 65 79 66 72 61 6d 65 73 2e 73 69 7a 65 26 26 30 3d 3d 3d 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 69 3d 5b 5d 3b 74 68 69 73 2e 5f 6b 65 79 66 72 61 6d 65 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 2c 73 29 7b 76 61 72 20 6c 3d 4e 28 61 2c 21 30 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6c 5b 65 5d 3b 72 3d 3d 6f 5b 22 c9 b5 50 52 45 5f 53 54 59 4c 45 22 5d 3f 74 2e 61 64 64 Data Ascii: mes=function(){var e=this;this.applyStylesToKeyframe();var t=new Set,n=new Set,r=1===this._keyframes.size&&0===this.duration,i=[];this._keyframes.forEach((function(a,s){var l=N(a,!0);Object.keys(l).forEach((function(e){var r=l[e];r==o["PRE_STYLE"]?t.add
2024-12-20 20:40:56 UTC	4096	IN	Data Raw: 6c 64 4b 65 79 66 72 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6b 65 79 66 72 61 6d 65 73 2c 74 3d 74 68 69 73 2e 74 69 6d 69 6e 67 73 2c 6e 3d 74 2e 64 65 6c 61 79 2c 72 3d 74 2e 64 75 72 61 74 69 6f 6e 2c 6f 3d 74 2e 65 61 73 69 6e 67 3b 69 66 28 74 68 69 73 2e 5f 73 74 72 65 74 63 68 53 74 61 72 74 69 6e 67 4b 65 79 66 72 61 6d 65 26 26 6e 29 7b 76 61 72 20 69 3d 5b 5d 2c 61 3d 72 2b 6e 2c 73 3d 6e 2f 61 2c 6c 3d 4e 28 65 5b 30 5d 2c 21 31 29 3b 6c 2e 6f 66 66 73 65 74 3d 30 2c 69 2e 70 75 73 68 28 6c 29 3b 76 61 72 20 63 3d 4e 28 65 5b 30 5d 2c 21 31 29 3b 63 2e 6f 66 66 73 65 74 3d 79 65 28 73 29 2c 69 2e 70 75 73 68 28 63 29 3b 66 6f 72 28 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 64 3d 31 3b 64 3c 3d Data Ascii: ldKeyframes=function(){var e=this.keyframes,t=this.timings,n=t.delay,r=t.duration,o=t.easing;if(this._stretchStartingKeyframe&&n){var i=[],a=r+n,s=n/a,l=N(e[0],!1);l.offset=0,i.push(l);var c=N(e[0],!1);c.offset=ye(s),i.push(c);for(var u=e.length-1,d=1;d<=
2024-12-20 20:40:56 UTC	4096	IN	Data Raw: 61 63 6b 54 72 61 6e 73 69 74 69 6f 6e 3d 28 6e 3d 65 2c 72 3d 74 68 69 73 2e 73 74 61 74 65 73 2c 6e 65 77 20 4f 65 28 6e 2c 7b 74 79 70 65 3a 31 2c 61 6e 69 6d 61 74 69 6f 6e 3a 7b 74 79 70 65 3a 32 2c 73 74 65 70 73 3a 5b 5d 2c 6f 70 74 69 6f 6e 73 3a 6e 75 6c 6c 7d 2c 6d 61 74 63 68 65 72 73 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 30 7d 5d 2c 6f 70 74 69 6f 6e 73 3a 6e 75 6c 6c 2c 71 75 65 72 79 43 6f 75 6e 74 3a 30 2c 64 65 70 43 6f 75 6e 74 3a 30 7d 2c 72 29 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6e 74 61 69 6e 73 51 75 65 72 69 65 73 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ackTransition=(n=e,r=this.states,new Oe(n,{type:1,animation:{type:2,steps:[],options:null},matchers:[function(e,t){return!0}],options:null,queryCount:0,depCount:0},r))}return Object.defineProperty(e.prototype,"containsQueries",{get:function(){return this.
2024-12-20 20:40:56 UTC	4096	IN	Data Raw: 20 65 76 65 6e 74 20 69 73 20 75 6e 64 65 66 69 6e 65 64 21 27 29 3b 69 66 28 22 73 74 61 72 74 22 21 3d 28 6f 3d 6e 29 26 26 22 64 6f 6e 65 22 21 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 54 68 65 20 70 72 6f 76 69 64 65 64 20 61 6e 69 6d 61 74 69 6f 6e 20 74 72 69 67 67 65 72 20 65 76 65 6e 74 20 22 27 2b 6e 2b 27 22 20 66 6f 72 20 74 68 65 20 61 6e 69 6d 61 74 69 6f 6e 20 74 72 69 67 67 65 72 20 22 27 2b 74 2b 27 22 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 21 27 29 3b 76 61 72 20 61 3d 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 4c 69 73 74 65 6e 65 72 73 2c 65 2c 5b 5d 29 2c 73 3d 7b 6e 61 6d 65 3a 74 2c 70 68 61 73 65 3a 6e 2c 63 61 6c 6c 62 61 63 6b 3a 72 7d 3b 61 2e 70 75 73 68 28 73 29 3b 76 61 72 20 6c 3d 70 28 74 68 Data Ascii: event is undefined!');if("start"!=(o=n)&&"done"!=o)throw new Error('The provided animation trigger event "'+n+'" for the animation trigger "'+t+'" is not supported!');var a=p(this._elementListeners,e,[]),s={name:t,phase:n,callback:r};a.push(s);var l=p(th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49729	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:55 UTC	428	OUT	GET /share/dist/hammer.min.js HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:55 UTC	761	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 20765 Connection: close Date: Fri, 20 Dec 2024 20:40:55 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"511d-19371fe4ec0" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 c6acedd7ff5b228fcdfba22cb8fb153c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: 6SN872rSjZiIFDWyWiEUmaIaHBvAp8E6VxakC_hGbOtZV_zCNjXeKQ==
2024-12-20 20:40:55 UTC	6725	IN	Data Raw: 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 37 20 2d 20 32 30 31 36 2d 30 34 2d 32 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 6a 28 61 2c 63 29 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 Data Ascii: /! Hammer.JS - v2.0.7 - 2016-04-22 http://hammerjs.github.io/ * * Copyright (c) 2016 Jorik Tangelder; * Licensed under the MIT license */!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(j(a,c),b)}function f(a,b,c){return Array.i
2024-12-20 20:40:55 UTC	5063	IN	Data Raw: 73 2e 73 69 6d 75 6c 74 61 6e 65 6f 75 73 3d 7b 7d 2c 74 68 69 73 2e 72 65 71 75 69 72 65 46 61 69 6c 3d 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 61 29 7b 72 65 74 75 72 6e 20 61 26 73 62 3f 22 63 61 6e 63 65 6c 22 3a 61 26 71 62 3f 22 65 6e 64 22 3a 61 26 70 62 3f 22 6d 6f 76 65 22 3a 61 26 6f 62 3f 22 73 74 61 72 74 22 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 24 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 4d 61 3f 22 64 6f 77 6e 22 3a 61 3d 3d 4c 61 3f 22 75 70 22 3a 61 3d 3d 4a 61 3f 22 6c 65 66 74 22 3a 61 3d 3d 4b 61 3f 22 72 69 67 68 74 22 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 6d 61 6e 61 67 65 72 3b 72 65 74 75 72 6e 20 63 3f 63 2e 67 65 74 28 61 29 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 61 61 28 29 7b 59 2e Data Ascii: s.simultaneous={},this.requireFail=[]}function Z(a){return a&sb?"cancel":a&qb?"end":a&pb?"move":a&ob?"start":""}function $(a){return a==Ma?"down":a==La?"up":a==Ja?"left":a==Ka?"right":""}function _(a,b){var c=b.manager;return c?c.get(a):a}function aa(){Y.
2024-12-20 20:40:56 UTC	4096	IN	Data Raw: 63 74 69 6f 6e 29 7d 2c 63 6f 6d 70 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 67 28 74 68 69 73 2e 6d 61 6e 61 67 65 72 2e 72 65 63 6f 67 6e 69 7a 65 72 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 6b 28 62 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 2c 5b 62 5d 29 26 26 28 61 3d 61 2e 63 6f 6e 63 61 74 28 62 2e 67 65 74 54 6f 75 63 68 41 63 74 69 6f 6e 28 29 29 29 7d 29 2c 57 28 61 2e 6a 6f 69 6e 28 22 20 22 29 29 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 72 63 45 76 65 6e 74 2c 63 3d 61 2e 6f 66 66 73 65 74 44 69 72 65 63 74 69 6f 6e 3b 69 66 28 74 68 69 73 2e 6d 61 6e 61 67 65 72 2e 73 65 73 73 69 6f 6e 2e 70 72 65 76 65 6e 74 65 Data Ascii: ction)},compute:function(){var a=[];return g(this.manager.recognizers,function(b){k(b.options.enable,[b])&&(a=a.concat(b.getTouchAction()))}),W(a.join(" "))},preventDefaults:function(a){var b=a.srcEvent,c=a.offsetDirection;if(this.manager.session.prevente
2024-12-20 20:40:56 UTC	4881	IN	Data Raw: 2e 65 76 65 6e 74 2b 22 75 70 22 2c 61 29 3a 28 74 68 69 73 2e 5f 69 6e 70 75 74 2e 74 69 6d 65 53 74 61 6d 70 3d 72 61 28 29 2c 74 68 69 73 2e 6d 61 6e 61 67 65 72 2e 65 6d 69 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 2c 74 68 69 73 2e 5f 69 6e 70 75 74 29 29 29 7d 7d 29 2c 69 28 65 61 2c 61 61 2c 7b 64 65 66 61 75 6c 74 73 3a 7b 65 76 65 6e 74 3a 22 72 6f 74 61 74 65 22 2c 74 68 72 65 73 68 6f 6c 64 3a 30 2c 70 6f 69 6e 74 65 72 73 3a 32 7d 2c 67 65 74 54 6f 75 63 68 41 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 6a 62 5d 7d 2c 61 74 74 72 54 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 65 72 2e 61 74 74 72 54 65 73 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 Data Ascii: .event+"up",a):(this._input.timeStamp=ra(),this.manager.emit(this.options.event,this._input)))}}),i(ea,aa,{defaults:{event:"rotate",threshold:0,pointers:2},getTouchAction:function(){return[jb]},attrTest:function(a){return this._super.attrTest.call(this,a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49728	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:55 UTC	435	OUT	GET /share/dist/assets/loader-32.png HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:55 UTC	710	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 42487 Connection: close Date: Fri, 20 Dec 2024 20:40:55 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"a5f7-19371fe4ec0" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 2f60289312992373b517623785f072a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: kZ3eIYeohRFFIDau2VkHq5bYLANHy8Ce0ys5MIac50X2IqrFta0XGw==
2024-12-20 20:40:55 UTC	3578	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 a2 f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR szziTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://
2024-12-20 20:40:55 UTC	8261	IN	Data Raw: 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 31 32 38 30 36 36 34 30 30 30 30 30 30 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 50 61 6e 74 72 79 3e 0a 20 20 20 20 3c 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 0a 20 20 20 20 20 20 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 49 6c 6c 75 73 74 Data Ascii: toPart="time:0d1280664000000f254016000000" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients> <xmpMM:Pantry> <rdf:Bag> <rdf:li> <rdf:Description dc:format="application/pdf" xmp:CreatorTool="Adobe Illust
2024-12-20 20:40:56 UTC	8192	IN	Data Raw: 31 4c 70 79 2f 55 78 50 4e 61 39 49 37 46 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 57 57 2b 53 64 47 53 52 26 23 78 41 3b 6a 71 55 36 31 43 48 6a 62 67 2f 7a 44 71 33 30 64 42 6d 64 6f 38 4e 2b 6f 75 69 37 59 31 5a 48 37 75 50 58 6e 2b 70 6d 65 62 46 35 31 32 4b 75 78 56 32 4b 73 57 38 36 36 4d 6b 6c 76 2b 6b 6f 56 70 4c 46 51 54 30 2f 61 51 37 41 26 23 78 41 3b 2f 4e 66 31 5a 67 36 7a 46 59 34 67 37 7a 73 66 56 6b 53 38 4d 38 6a 79 39 37 43 4d 31 7a 30 62 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 65 4b 76 57 62 61 42 59 4c 61 4b 42 66 73 78 49 71 44 35 4b 4b 5a 30 6b 49 30 41 4f 35 26 23 78 41 3b 38 32 79 35 44 4f 5a 6b 65 70 74 55 79 54 57 37 46 58 59 71 37 46 55 46 72 63 43 7a 36 52 65 52 74 33 69 5a 68 38 31 48 49 Data Ascii: 1Lpy/UxPNa9I7FXYq7FXYq7FXYq7FXYq7FXYq7FWW+SdGSR jqU61CHjbg/zDq30dBmdo8N+oui7Y1ZH7uPXn+pmebF512KuxV2KsW866Mklv+koVpLFQT0/aQ7A /Nf1Zg6zFY4g7zsfVkS8M8jy97CM1z0bsVdirsVdirsVdireKvWbaBYLaKBfsxIqD5KKZ0kI0AO5 82y5DOZkeptUyTW7FXYq7FUFrcCz6ReRt3iZh81HI
2024-12-20 20:40:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 67 72 65 65 6e 3d 22 31 36 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 62 6c 75 65 3d 22 31 35 37 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 52 3d 34 31 20 47 3d 31 37 31 20 42 3d 32 32 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 52 47 42 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 72 65 64 3d 22 34 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 47 3a 67 72 65 65 6e 3d 22 31 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 70 Data Ascii: xmpG:green="169" xmpG:blue="157"/> <rdf:li xmpG:swatchName="R=41 G=171 B=226" xmpG:mode="RGB" xmpG:type="PROCESS" xmpG:red="41" xmpG:green="171" xmp
2024-12-20 20:40:56 UTC	4096	IN	Data Raw: 74 69 6d 65 3a 30 64 31 32 38 30 36 36 34 30 30 30 30 30 30 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 31 32 38 30 36 36 34 30 30 30 30 30 30 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 41 6c 6c 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 Data Ascii: time:0d1280664000000f254016000000" stRef:toPart="time:0d1280664000000f254016000000" stRef:maskMarkers="All"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rdf:li> <rdf:li> <rdf:Description
2024-12-20 20:40:56 UTC	1976	IN	Data Raw: 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 39 61 38 37 31 34 65 2d 64 34 31 32 2d 31 32 34 62 2d 62 35 64 37 2d 31 37 64 33 34 66 38 30 66 36 35 33 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 Data Ascii: </rdf:Description> </rdf:li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:e9a8714e-d412-124b-b5d7-17d34f80f653"> <dc:title> <rdf:Alt> <rdf:li x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49730	3.160.185.95	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:58 UTC	377	OUT	GET /tasks-bundle.20241017.js HTTP/1.1 Host: d3hogio4d1txum.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:40:59 UTC	509	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4999359 Connection: close Date: Fri, 20 Dec 2024 20:40:49 GMT Last-Modified: Thu, 17 Oct 2024 13:59:56 GMT ETag: "6e7a6d936de4fe50cf1c96953682cd89" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 392060e737ac00b4ceaf733942c6b428.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P5 X-Amz-Cf-Id: vxsdvrx0oKIckZrsp_-AZQEECDtg3RDJ_L6cBwxoOzJv0ExLJYi7Yw== Age: 11
2024-12-20 20:40:59 UTC	15875	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 61 73 6b 73 2d 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 37 39 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: /! For license information please see tasks-bundle.js.LICENSE.txt /(()=>{var __webpack_modules__={7924:function(e,t,n){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(e,t,n,i){void 0===i&&(i=n),Object.defineProperty(e,i,{enumerab
2024-12-20 20:40:59 UTC	2023	IN	Data Raw: 64 5f 6f 72 64 65 72 5f 63 68 61 6e 67 65 22 2c 69 2e 54 61 73 6b 42 6f 61 72 64 54 61 73 6b 4d 6f 76 65 3d 22 74 61 73 6b 5f 62 6f 61 72 64 5f 74 61 73 6b 5f 6d 6f 76 65 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 43 6c 65 61 72 41 6c 6c 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 5f 63 6c 65 61 72 5f 61 6c 6c 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 4c 61 62 65 6c 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 5f 6c 61 62 65 6c 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 73 41 73 73 69 67 6e 65 65 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 73 5f 61 73 73 69 67 6e 65 65 22 2c 69 2e 54 61 73 6b 46 69 6c 74 65 72 73 41 73 73 69 67 6e 65 65 55 6e 61 73 73 69 67 6e 65 64 3d 22 74 61 73 6b 5f 66 69 6c 74 65 72 73 5f 61 73 73 69 67 6e 65 65 5f 75 6e 61 73 73 69 67 6e 65 64 22 2c Data Ascii: d_order_change",i.TaskBoardTaskMove="task_board_task_move",i.TaskFilterClearAll="task_filter_clear_all",i.TaskFilterLabel="task_filter_label",i.TaskFiltersAssignee="task_filters_assignee",i.TaskFiltersAssigneeUnassigned="task_filters_assignee_unassigned",
2024-12-20 20:40:59 UTC	16384	IN	Data Raw: 63 68 44 65 76 69 63 65 44 65 74 65 63 74 69 6e 67 44 6f 6e 65 3d 21 31 2c 74 68 69 73 2e 5f 69 73 54 6f 75 63 68 44 65 76 69 63 65 3d 21 31 7d 69 73 54 6f 75 63 68 44 65 76 69 63 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 73 54 6f 75 63 68 44 65 76 69 63 65 44 65 74 65 63 74 69 6e 67 44 6f 6e 65 7c 7c 28 74 68 69 73 2e 63 68 65 63 6b 42 72 6f 77 73 65 72 49 73 54 6f 75 63 68 28 29 2c 74 68 69 73 2e 5f 69 73 54 6f 75 63 68 44 65 76 69 63 65 44 65 74 65 63 74 69 6e 67 44 6f 6e 65 3d 21 30 29 2c 74 68 69 73 2e 5f 69 73 54 6f 75 63 68 44 65 76 69 63 65 7d 63 68 65 63 6b 42 72 6f 77 73 65 72 49 73 54 6f 75 63 68 28 29 7b 63 6f 6e 73 74 20 65 3d 22 20 2d 77 65 62 6b 69 74 2d 20 2d 6d 6f 7a 2d 20 2d 6f 2d 20 2d 6d 73 2d 20 22 2e 73 70 6c 69 74 28 22 Data Ascii: chDeviceDetectingDone=!1,this._isTouchDevice=!1}isTouchDevice(){return this._isTouchDeviceDetectingDone\|\|(this.checkBrowserIsTouch(),this._isTouchDeviceDetectingDone=!0),this._isTouchDevice}checkBrowserIsTouch(){const e=" -webkit- -moz- -o- -ms- ".split("
2024-12-20 20:40:59 UTC	16384	IN	Data Raw: 3d 6c 28 7b c9 b5 70 72 6f 76 3a 6c 7d 29 2c 5a 3d 6c 28 7b c9 b5 69 6e 6a 3a 6c 7d 29 2c 57 3d 6c 28 7b 6e 67 49 6e 6a 65 63 74 61 62 6c 65 44 65 66 3a 6c 7d 29 2c 51 3d 6c 28 7b 6e 67 49 6e 6a 65 63 74 6f 72 44 65 66 3a 6c 7d 29 3b 76 61 72 20 4b 3b 6c 65 74 20 59 3b 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 72 65 74 75 72 6e 20 59 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 63 6f 6e 73 74 20 74 3d 59 3b 72 65 74 75 72 6e 20 59 3d 65 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 69 3d 24 28 65 29 3b 72 65 74 75 72 6e 20 69 26 26 22 72 6f 6f 74 22 3d 3d 69 2e 70 72 6f 76 69 64 65 64 49 6e 3f 76 6f 69 64 20 30 3d 3d 3d 69 2e 76 61 6c 75 65 3f 69 2e 76 61 6c 75 65 3d 69 2e 66 61 63 74 6f 72 79 28 29 3a 69 2e 76 61 6c 75 Data Ascii: =l({prov:l}),Z=l({inj:l}),W=l({ngInjectableDef:l}),Q=l({ngInjectorDef:l});var K;let Y;function X(){return Y}function J(e){const t=Y;return Y=e,t}function ee(e,t,n){const i=$(e);return i&&"root"==i.providedIn?void 0===i.value?i.value=i.factory():i.valu
2024-12-20 20:40:59 UTC	16384	IN	Data Raw: 64 61 74 61 2c 65 29 2c 71 6e 28 74 2c 6e 75 6c 6c 29 2c 71 6e 28 69 2e 62 6c 75 65 70 72 69 6e 74 2c 6e 75 6c 6c 29 29 3b 63 6f 6e 73 74 20 72 3d 5a 6e 28 65 2c 74 29 2c 73 3d 65 2e 69 6e 6a 65 63 74 6f 72 49 6e 64 65 78 3b 69 66 28 42 6e 28 72 29 29 7b 63 6f 6e 73 74 20 65 3d 4e 6e 28 72 29 2c 6e 3d 6a 6e 28 72 2c 74 29 2c 69 3d 6e 5b 31 5d 2e 64 61 74 61 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 74 5b 73 2b 72 5d 3d 6e 5b 65 2b 72 5d 7c 69 5b 65 2b 72 5d 7d 72 65 74 75 72 6e 20 74 5b 73 2b 38 5d 3d 72 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 71 6e 28 65 2c 74 29 7b 65 2e 70 75 73 68 28 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 47 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 65 2e 69 6e Data Ascii: data,e),qn(t,null),qn(i.blueprint,null));const r=Zn(e,t),s=e.injectorIndex;if(Bn(r)){const e=Nn(r),n=jn(r,t),i=n[1].data;for(let r=0;r<8;r++)t[s+r]=n[e+r]\|i[e+r]}return t[s+8]=r,s}function qn(e,t){e.push(0,0,0,0,0,0,0,0,t)}function Gn(e,t){return-1===e.in
2024-12-20 20:40:59 UTC	13491	IN	Data Raw: 28 22 61 6e 67 75 6c 61 72 23 75 6e 73 61 66 65 2d 62 79 70 61 73 73 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 65 3d 3e 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 65 3d 3e 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 65 3d 3e 65 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 77 72 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 6b 72 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 72 65 61 74 65 48 54 4d 4c 28 65 29 29 7c 7c 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 6b 72 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 72 65 61 Data Ascii: ("angular#unsafe-bypass",{createHTML:e=>e,createScript:e=>e,createScriptURL:e=>e})}catch(e){}return wr}function Ir(e){var t;return(null===(t=kr())\|\|void 0===t?void 0:t.createHTML(e))\|\|e}function Sr(e){var t;return(null===(t=kr())\|\|void 0===t?void 0:t.crea
2024-12-20 20:40:59 UTC	16384	IN	Data Raw: 29 2c 74 7d 28 65 29 3b 72 65 74 75 72 6e 20 6e 67 44 65 76 4d 6f 64 65 26 26 50 28 74 5b 38 5d 2c 22 52 6f 6f 74 56 69 65 77 20 68 61 73 20 6e 6f 20 63 6f 6e 74 65 78 74 2e 20 50 65 72 68 61 70 73 20 69 74 20 69 73 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 3f 22 29 2c 74 5b 38 5d 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 65 29 7b 72 65 74 75 72 6e 20 68 61 28 65 5b 31 33 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 65 29 7b 72 65 74 75 72 6e 20 68 61 28 65 5b 34 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 65 29 7b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 65 26 26 21 6a 65 28 65 29 3b 29 65 3d 65 5b 34 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 69 66 28 6e 75 6c 6c 21 3d 69 29 7b 6c 65 74 20 73 2c 61 3d 21 Data Ascii: ),t}(e);return ngDevMode&&P(t[8],"RootView has no context. Perhaps it is disconnected?"),t[8]}function ua(e){return ha(e[13])}function pa(e){return ha(e[4])}function ha(e){for(;null!==e&&!je(e);)e=e[4];return e}function ma(e,t,n,i,r){if(null!=i){let s,a=!
2024-12-20 20:40:59 UTC	1514	IN	Data Raw: 30 21 3d 3d 69 26 26 52 28 69 2c 46 65 2c 22 54 4e 6f 64 65 73 20 63 61 6e 27 74 20 62 65 20 69 6e 20 74 68 65 20 4c 56 69 65 77 20 68 65 61 64 65 72 2e 22 29 2c 6e 67 44 65 76 4d 6f 64 65 26 26 54 28 73 2c 76 6f 69 64 20 30 2c 22 27 75 6e 64 65 66 69 6e 65 64 27 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 76 61 6c 75 65 20 66 6f 72 20 27 61 74 74 72 73 27 22 29 2c 6e 67 44 65 76 4d 6f 64 65 26 26 6e 67 44 65 76 4d 6f 64 65 2e 74 4e 6f 64 65 2b 2b 2c 6e 67 44 65 76 4d 6f 64 65 26 26 74 26 26 47 65 28 74 2c 65 29 3b 6c 65 74 20 61 3d 74 3f 74 2e 69 6e 6a 65 63 74 6f 72 49 6e 64 65 78 3a 2d 31 3b 63 6f 6e 73 74 20 6f 3d 6e 67 44 65 76 4d 6f 64 65 3f 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 2c 69 2c 72 2c 73 2c 61 2c 6f Data Ascii: 0!==i&&R(i,Fe,"TNodes can't be in the LView header."),ngDevMode&&T(s,void 0,"'undefined' is not valid value for 'attrs'"),ngDevMode&&ngDevMode.tNode++,ngDevMode&&t&&Ge(t,e);let a=t?t.injectorIndex:-1;const o=ngDevMode?new class{constructor(e,t,n,i,r,s,a,o
2024-12-20 20:40:59 UTC	16384	IN	Data Raw: 44 69 72 65 63 74 69 76 65 48 6f 73 74 22 29 2c 36 34 26 74 68 69 73 2e 66 6c 61 67 73 26 26 65 2e 70 75 73 68 28 22 54 4e 6f 64 65 46 6c 61 67 73 2e 69 73 44 65 74 61 63 68 65 64 22 29 2c 34 26 74 68 69 73 2e 66 6c 61 67 73 26 26 65 2e 70 75 73 68 28 22 54 4e 6f 64 65 46 6c 61 67 73 2e 69 73 50 72 6f 6a 65 63 74 65 64 22 29 2c 65 2e 6a 6f 69 6e 28 22 7c 22 29 7d 67 65 74 20 74 65 6d 70 6c 61 74 65 5f 28 29 7b 69 66 28 31 26 74 68 69 73 2e 74 79 70 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 3b 63 6f 6e 73 74 20 65 3d 5b 5d 2c 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 76 61 6c 75 65 26 26 74 68 69 73 2e 76 61 6c 75 65 7c 7c 74 68 69 73 2e 74 79 70 65 5f 3b 69 66 28 65 2e 70 75 73 68 28 22 3c 22 2c 74 29 2c 74 68 Data Ascii: DirectiveHost"),64&this.flags&&e.push("TNodeFlags.isDetached"),4&this.flags&&e.push("TNodeFlags.isProjected"),e.join("\|")}get template_(){if(1&this.type)return this.value;const e=[],t="string"==typeof this.value&&this.value\|\|this.type_;if(e.push("<",t),th
2024-12-20 20:40:59 UTC	16384	IN	Data Raw: 20 7a 6c 28 65 29 7b 6e 67 44 65 76 4d 6f 64 65 26 26 50 28 65 2c 22 63 6f 6d 70 6f 6e 65 6e 74 22 29 3b 63 6f 6e 73 74 20 74 3d 45 6c 28 4d 73 28 65 29 29 3b 6e 67 44 65 76 4d 6f 64 65 26 26 50 28 74 5b 38 5d 2c 22 72 6f 6f 74 43 6f 6e 74 65 78 74 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 30 3d 3d 3d 65 2e 66 6c 61 67 73 26 26 65 2e 63 6c 65 61 6e 3d 3d 24 6f 29 7b 6c 65 74 20 74 3b 65 2e 66 6c 61 67 73 7c 3d 31 2c 65 2e 63 6c 65 61 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 74 3d 65 29 29 2c 65 2e 73 63 68 65 64 75 6c 65 72 28 28 28 29 3d 3e 7b 69 66 28 31 26 65 2e 66 6c 61 67 73 26 26 28 65 2e 66 6c 61 67 73 26 3d 2d 32 2c 54 6c 28 65 29 29 2c 32 26 65 2e 66 6c 61 67 73 Data Ascii: zl(e){ngDevMode&&P(e,"component");const t=El(Ms(e));ngDevMode&&P(t[8],"rootContext should be defined"),function(e,t){if(0===e.flags&&e.clean==$o){let t;e.flags\|=1,e.clean=new Promise((e=>t=e)),e.scheduler((()=>{if(1&e.flags&&(e.flags&=-2,Tl(e)),2&e.flags

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49731	172.217.19.164	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:58 UTC	631	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:40:59 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 20 Dec 2024 20:40:59 GMT Date: Fri, 20 Dec 2024 20:40:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 20:40:59 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-20 20:40:59 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-12-20 20:40:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49734	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:59 UTC	715	OUT	GET /share/dist/f/6d82fd0d97bd44e9484816a35c937ef9.woff HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://premiumgain.nimbusweb.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://premiumgain.nimbusweb.me/share/dist/index.css?v=9.26.11-73fecd7b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:40:59 UTC	712	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 245192 Connection: close Date: Fri, 20 Dec 2024 20:40:59 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"3bdc8-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 33c6e91bdc193e34e8dcc80edc466018.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: SZY1x72-vkoljfafZbgzK9BEICYsEccR0y1IYs19vo-rrxs8t58bKA==
2024-12-20 20:40:59 UTC	3576	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 03 bd c8 00 12 00 00 00 07 92 c8 00 01 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 03 bd ac 00 00 00 1b 00 00 00 1c 72 7a 10 7b 47 44 45 46 00 03 14 3c 00 00 02 32 00 00 03 0a 17 18 18 56 47 50 4f 53 00 03 44 bc 00 00 78 ee 00 01 2f ea 94 a5 8f e3 47 53 55 42 00 03 16 70 00 00 2e 49 00 00 9d 24 f9 b2 25 43 4f 53 2f 32 00 00 02 0c 00 00 00 60 00 00 00 60 79 02 9c b8 63 6d 61 70 00 00 16 c4 00 00 08 a7 00 00 0b c6 cb 9e 06 89 63 76 74 20 00 00 26 48 00 00 00 c2 00 00 01 12 27 08 27 d0 66 70 67 6d 00 00 1f 6c 00 00 04 88 00 00 07 b4 36 0b 16 0c 67 61 73 70 00 03 14 2c 00 00 00 10 00 00 00 10 00 11 00 23 67 6c 79 66 00 00 45 1c 00 02 92 ed 00 04 98 a0 9f af 00 6f 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFFFTMrz{GDEF<2VGPOSDx/GSUBp.I$%COS/2``ycmapcvt &H''fpgml6gasp,#glyfEohead
2024-12-20 20:40:59 UTC	4165	IN	Data Raw: 93 9d 9c 67 ba f0 3b 5d de 74 da 5d a2 4d 25 3c 53 aa e0 5b f8 3e df cb a7 dd 4d 59 87 ff db c5 1c 67 38 57 99 7b 31 ed b7 71 5e 79 5f 5a f0 d5 ad 8c 29 98 d8 0e e7 0c 7d 69 7b da 65 da bc 2e bb e2 36 ec 75 9c 43 c3 6d e6 3c 55 14 1e 49 0e 85 c7 38 1f 1d d3 3a ce e7 db dc 8a 70 ab 7b 33 fc cc dd 1c f6 72 66 f3 8c ff 9f 2f cf c2 a3 82 d4 a0 9e 95 cd 39 53 f3 82 42 bc a2 3e 4e 32 39 dd 22 fc f2 61 e4 15 e5 7d db e2 bc af be e7 2c d9 66 ce f7 33 c2 93 e6 4c 88 5f 32 67 c2 28 97 9c c9 23 67 ce be 57 a5 c1 9c 87 a2 7c de 49 93 23 d0 78 6f 10 de 2e 24 76 59 03 7a 64 a5 5b 23 35 b4 5b 9a e8 0f f7 bb e7 a9 bb 2c 9d 09 f6 71 a7 5d 3a f1 27 d5 8a c4 8d b0 37 71 9d fa eb e1 75 e7 13 f8 dd 07 0e c2 cb cb ac f3 32 fc 5a 02 9f 7a 4d 2e bc 89 33 61 13 ed 3f 73 3a 38 1f Data Ascii: g;]t]M%<S[>MYg8W{1q^y_Z)}i{e.6uCm<UI8:p{3rf/9SB>N29"a},f3L_2g(#gW\|I#xo.$vYzd[#5[,q]:'7qu2ZzM.3a?s:8
2024-12-20 20:40:59 UTC	4096	IN	Data Raw: 08 5c 24 a1 28 8a a1 38 4a a0 24 92 51 0a a5 51 06 65 51 0e e5 51 01 15 f1 04 2a e1 49 3c 85 ca a8 82 aa a8 86 a7 51 1d cf a0 06 9e 45 4d 3c 87 5a a8 8d e7 51 07 75 f1 02 ea a1 3e 1a a0 21 1a a1 31 9a e0 45 bc 84 a6 68 86 e6 78 19 2d d0 12 ad f0 0a 5a a3 0d da a2 1d da a3 03 3a a2 13 3a fb bf ff 81 30 93 7d 5d 66 f9 8e 2c f0 d5 58 e2 bb b1 d4 97 63 99 af c6 2a df 8d 07 6a ac f6 dd 78 a0 c6 3a 5f 8c f5 be 19 9b 7c 35 b6 f9 62 f8 5e 58 b9 7d cb 1e 48 d7 c3 4a f0 25 5b ec eb d6 cb 6a e9 bb d6 d3 1a e6 cb 35 d7 f2 a5 b3 46 58 23 7d 07 87 59 3d ad 3e 56 6f 33 d0 1a e2 5b 38 ca b4 f1 65 da e2 5b d7 05 7d ad 01 6c 6e 0d b5 7a f9 42 8e b6 f2 fa ef 74 bc 6f df 9c 07 13 de b2 ac 80 95 dd ca 61 65 b6 b2 60 b3 b5 09 3b 58 d5 2a 6a d5 b1 12 ad 22 d6 35 eb ba 95 07 23 Data Ascii: \$(8J$QQeQQI<QEM<ZQu>!1Ehx-Z::0}]f,Xcjx:_\|5b^X}HJ%[j5FX#}Y=>Vo3[8e[}lnzBtoae`;X*j"5#
2024-12-20 20:40:59 UTC	4096	IN	Data Raw: 0a 5c 63 78 11 a3 7f 0c af 63 f8 14 83 57 0c 9f 62 e4 3c 1a 2b e8 75 37 0d 3d aa 2e 27 0d ee a8 a1 9c 30 73 ea 97 2b 8b 28 27 fc ce 45 73 2e 35 b9 f9 92 9b c6 dc 34 e6 a6 29 b7 f3 dc e6 93 c7 ac f2 e0 91 07 4e 5e 38 79 69 cd 6b 96 79 e5 e5 e5 67 5e 5e e4 35 eb 7c 30 dd 67 43 f9 e8 cd 87 73 3e f9 f9 f9 9b 9f 2f f9 e1 e6 d7 e3 31 be 3e 86 63 01 e7 05 f4 2b 00 ab 80 e7 05 e0 15 d0 a3 80 ba 02 f0 0a c0 2b 48 67 41 1a 0a aa 7b 9c 37 4f e8 55 88 af 85 f0 2e cc c7 c2 bc 2e cc a7 c2 9e 17 31 8b 22 fa 16 91 53 54 8f a2 ea 8a f2 a6 a8 df 4f d9 85 a7 f8 fb 34 1d 4f d7 17 b8 3c cd cf 67 fc 7e 86 77 ee c2 a1 62 30 8b 2d 16 fa 3e 0b f7 59 df 9f a3 f5 39 9c 9e bb 1d 84 9e e7 d3 f3 30 8a f3 b5 b8 9e c5 3d 2f ae 6f 89 52 c2 8c 4b a8 29 61 26 25 9c 97 e0 db 0b 78 be 40 cb Data Ascii: \cxcWb<+u7=.'0s+('Es.54)N^8yikyg^^5\|0gCs>/1>c++HgA{7OU..1"STO4O<g~wb0->Y90=/oRK)a&%x@
2024-12-20 20:41:00 UTC	16384	IN	Data Raw: 3c 9f c7 cb 79 b0 e6 f9 1b 33 cf fe cc a7 7f 3e ef e7 eb 9b ac c6 3d 3e 92 ec 1d 5f a0 66 01 4f 17 f8 be 50 bf 85 b8 2d 34 57 77 f6 c8 22 7a 17 a9 5f cc af c5 76 61 31 4e 8b 79 f6 1d 3d ee e7 11 f7 f3 c8 12 f5 4b f8 ba c4 fb b8 d4 1e 2c b5 db 4b 71 5b 8a db 32 3e 2d a3 6d 99 fe cb f5 5c ae 66 b9 79 ba 83 47 dc bf 23 2b 7c 5f 69 37 56 d2 b6 52 9f 55 66 ea ae 1d 59 c5 c3 d5 7a ae c6 79 b5 9a d5 b4 7d cf e7 ef d5 7c af e7 1a ef e8 1a da d6 98 e5 5a de ac 55 b3 56 fd 3a 35 eb 70 5e a7 ff 3a 7e ae c7 73 bd 9a f5 fa fc a0 fe 07 58 3f f8 1b b1 01 cf 0d 3c dc a0 cf 46 3b bf 51 fd 46 f5 1b 79 b3 c9 be 6c e2 a7 7b 74 64 b3 3d da ac 66 b3 9a 2d 7a 6e d1 73 8b 9e 5b f5 dc aa 66 ab fd db aa 66 1b 9e db 78 bb 4d cd 76 3d b7 ab d9 ce a7 1d ea 77 78 67 77 98 e1 4e 7d 76 Data Ascii: <y3>=>_fOP-4Ww"z_va1Ny=K,Kq[2>-m\fyG#+\|_i7VRUfYzy}\|ZUV:5p^:~sX?<F;QFyl{td=f-zns[ffxMv=wxgwN}v
2024-12-20 20:41:00 UTC	4096	IN	Data Raw: 8b d3 a9 f7 a9 7e d6 83 74 ff e7 4b 4e ab 42 ab 06 5d 83 59 2f 2f 25 e3 b3 b3 c5 e5 d2 65 ab 4e 29 e5 d3 4c 79 0c d1 71 1d 50 a2 c6 ec df aa 7c 25 0e 9f 4e 9f 0d 9d cf 14 d9 7d 35 fc 15 d3 2d 70 49 85 7f 33 46 43 5b 8b f2 09 4e c3 41 aa ab 46 71 be 96 2a ba 0a 6d 8d c1 6d 6f 71 d9 95 3c 37 d3 29 72 1f 76 ef 8c c2 8d 62 7c d5 95 2d 54 a1 5a 5a 3c 4e 83 a8 2e 80 7a 3f 8d f2 ca c2 b2 9f 44 14 6d 26 b3 85 e8 74 fc 92 9a d5 16 bf a4 16 bb a2 d6 b5 ad 8a 27 16 8e 75 ba a4 66 01 38 b5 1e 7a c3 20 79 08 9c 91 77 c8 6f 34 33 5e 13 82 07 ef 81 b9 32 8a 6e 87 3d 13 e5 7d 42 bd dc fa d4 18 d5 f6 d6 70 5e 95 a9 79 90 57 55 5e a5 4a 66 a0 0a d8 dc d9 cf a6 34 e3 0b 1a 26 db a3 55 f8 9b e0 3e 76 1e 0c ed 9f 86 75 02 4f b0 18 71 c7 79 30 e5 19 eb e1 a2 e2 a7 bc 18 a6 f2 Data Ascii: ~tKNB]Y//%eN)LyqP\|%N}5-pI3FC[NAFq*mmoq<7)rvb\|-TZZ<N.z?Dm&t'uf8z ywo43^2n=}Bp^yWU^Jf4&U>vuOqy0
2024-12-20 20:41:00 UTC	7294	IN	Data Raw: 1c 78 2e e1 09 1f 98 d7 ee 05 79 5f 9e 0c d6 03 19 32 cd a9 7a 6c 12 3c 9e 64 93 5e f0 67 26 3b 34 c8 4c 34 e9 73 23 9a 40 bc b5 59 a2 30 97 ab 3d d3 ed ae d8 2d d9 4a 88 b5 34 27 bc a3 0c 2b b7 27 17 a0 26 fa f3 fa 27 ee b9 67 f3 f0 be b2 11 6a 2e 3a 2b 8c 8e be 76 6f b6 3f 3b 63 d0 60 f1 c0 e5 c1 f2 97 cf ae 7a 72 eb 7d 33 5a ef 16 0e 44 57 96 be 18 1a fe 4c 5e 1b 2e 5e 5f 33 e8 ee a2 9b 95 b5 a0 3e b1 66 04 d5 ef 99 4c bb a7 78 5d 2e 37 32 eb 24 c9 ec 26 81 ac 14 77 ba 07 69 2c 6e 57 ba ad 2e 92 6e 35 10 6a fd 13 eb 3d 6b 6c 5d 3a 0d 74 ba 7b 6f f5 67 50 05 df 5d 17 d8 07 27 4f 9b 3e 05 ca 64 bd fc eb 77 7b 17 cd 55 db c1 36 fe e5 4f 6f c2 57 f7 de 71 ef 16 3c 31 7a 9f 4c fe fe e3 99 9f f7 bd d6 d1 1b f6 6f ef a8 bd ed 49 36 b7 9f 34 4e d4 00 18 0c 26 Data Ascii: x.y_2zl<d^g&;4L4s#@Y0=-J4'+'&'gj.:+vo?;c`zr}3ZDWL^.^_3>fLx].72$&wi,nW.n5j=kl]:t{ogP]'O>dw{U6OoWq<1zLoI64N&
2024-12-20 20:41:00 UTC	13186	IN	Data Raw: a6 24 31 5c d8 98 0a 07 3a 48 4d 50 67 2e b7 e1 47 cd ee 66 18 0c d5 ea a5 88 5a bd a4 d2 1c b2 b1 a8 76 d4 c1 b4 1e 7a e9 ee db 5f 7b ea ec 90 67 06 8d fb 3b 34 7d f8 cb cd 77 3c f8 e8 26 e5 cc 8b e7 5e 4a 7d 3e 7d eb 2e 71 ed 92 7f 4d 9e 7e a0 28 f2 f1 c4 bf 3e b5 6e 67 a1 cd fb fa f6 bb be 5c 3c 02 f2 a5 b5 6b ce 5f 88 d5 b9 0e 6c cf c2 53 bd 20 07 a8 61 75 92 58 e9 12 ed fa 7a 1c 2b 51 ce 13 1c 2c c1 b0 27 0b a9 93 fa c5 d8 7f 9c 86 fd 47 99 74 d0 da 4c 26 33 ad 17 74 db cc 92 05 99 1d 30 26 71 a4 3f 54 e7 3b bc 00 d8 4a 2b 0d cd c1 b4 e2 a6 29 6f 2e 5d b5 fb 5e ea 37 f6 fb f2 a6 2f ff 83 9f b1 fa ee 7b de ff a1 f5 37 ee c0 73 53 67 b7 7d 93 f6 db b9 61 bc ec e0 19 1f f5 65 67 e3 f5 dc 42 cf 9d a2 a0 21 59 86 c2 f6 40 c0 22 4b c0 cb 85 c3 5e c9 c2 c6 Data Ascii: $1\:HMPg.GfZvz_{g;4}w<&^J}>}.qM~(>ng\<k_lS auXz+Q,'GtL&3t0&q?T;J+)o.]^7/{7sSg}aegB!Y@"K^
2024-12-20 20:41:00 UTC	4096	IN	Data Raw: 76 31 9d 02 30 36 90 bc 76 85 ba 94 25 6d 35 d5 e9 25 c6 89 34 4a 41 2c 3a b6 b1 4f a2 d7 c2 ef b6 8f bd 61 c5 8a 1b 3c 8e 16 fb 32 b4 ac b5 79 f5 2d dc c6 39 73 e6 ab e3 67 3e 64 4f e0 9b 47 92 82 4d ab dc b0 34 e0 61 03 3c ec 6a ac 49 eb d3 d1 32 d4 63 28 32 c9 44 fb 33 6b 6a 82 a2 bf 7c c1 f2 ef 0e c4 cc 9d 6f 64 4f f0 1f f0 f3 a6 28 0d 68 c0 cd 83 2f 53 f3 e8 55 70 31 33 9b 7d 1b df 3f 96 94 d2 f5 37 56 53 83 15 3f 61 34 7d 82 23 53 79 e3 8c 6a 09 3d 3c 06 5a 11 b3 b2 3a df e9 ad 58 b0 fc fb a7 62 d6 ce 6b e1 62 fa 00 b8 a7 f5 99 0d 43 2e a5 f7 2f 03 1e 64 c7 f7 f7 83 ae c9 b0 33 68 f1 d8 71 10 cb a1 40 10 20 ab 08 5c a2 2b e9 1a e1 62 5d d6 06 23 1a 4d 5e 63 45 63 3b bb 87 87 45 eb 61 d2 cf 95 b3 56 3a 5c 52 b6 72 68 75 be 83 8e 71 58 a7 f2 ca 89 4a Data Ascii: v106v%m5%4JA,:Oa<2y-9sg>dOGM4a<jI2c(2D3kj\|odO(h/SUp13}?7VS?a4}#Syj=<Z:XbkbC./d3hq@ \+b]#M^cEc;EaV:\RrhuqXJ
2024-12-20 20:41:00 UTC	3198	IN	Data Raw: c7 50 d7 b2 cc 01 8d 03 ee 04 eb 8c 2d 6c 0b 93 1c 3c f5 b4 04 61 33 68 13 7e 76 13 a9 89 15 c6 71 db 03 60 81 c2 b0 f7 55 2d 28 d3 66 2a 54 33 80 22 8f 43 0d 5a 0d e2 45 1f 53 ff 16 04 69 ac e6 a2 5a 7a 82 88 d6 07 53 c5 22 ca 07 42 27 37 dd be 69 d3 ed e4 d0 b2 0d 1b 96 ad 5f 1f b7 13 3d 8a af 6d bb 21 66 27 7a 07 59 c2 3a 44 4d 44 f3 d1 6b 34 0f a8 a5 56 cd d3 47 fa c0 b8 21 34 0b c6 cd bc 1f e4 63 c2 b5 bf 28 79 6b 9c 6e b2 90 d3 e3 46 f4 2c 09 f5 24 f7 12 bb f7 43 6b 59 05 e6 08 79 8e 61 5d 8a 87 de 8e d5 21 20 a5 63 1d 39 ac b8 aa f8 63 cf 1d eb 49 c2 e5 1f 3b 09 89 39 fb e3 d6 53 64 0c c9 6e 5b 4e e7 bd 85 cb 88 8d 3b dd 21 88 19 3a 5a 4f 3d f9 64 f5 98 27 c9 b9 cd 9b 87 8e a4 7c 98 5c 8f 23 6d 2b 2c 8c 0f ff 7e 13 48 49 13 34 84 02 d4 0c 00 a8 db Data Ascii: P-l<a3h~vq`U-(f*T3"CZESiZzS"B'7i_=m!f'zY:DMDk4VG!4c(yknF,$CkYya]! c9cI;9Sdn[N;!:ZO=d'\|\#m+,~HI4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49732	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:59 UTC	715	OUT	GET /share/dist/f/12365dee78645ac21eaec216a048746c.woff HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://premiumgain.nimbusweb.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://premiumgain.nimbusweb.me/share/dist/index.css?v=9.26.11-73fecd7b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:00 UTC	712	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 246368 Connection: close Date: Fri, 20 Dec 2024 20:40:59 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"3c260-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 d5395aef0c58da123cbcc801b71e308c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: Hh6LI6B6tZLHY393nAbhVIc-FrmhTYrig53NDZ6EZgfqwWxF7AGVlQ==
2024-12-20 20:41:00 UTC	6774	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 03 c2 60 00 12 00 00 00 07 8e 34 00 01 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 03 c2 44 00 00 00 1b 00 00 00 1c 72 7a 0f db 47 44 45 46 00 03 1b 94 00 00 02 29 00 00 03 04 0a 90 0b d9 47 50 4f 53 00 03 4a 48 00 00 77 fa 00 01 2f 32 0e fc 67 1c 47 53 55 42 00 03 1d c0 00 00 2c 87 00 00 8e 8a 83 e8 2b 22 4f 53 2f 32 00 00 02 0c 00 00 00 60 00 00 00 60 77 d6 99 76 63 6d 61 70 00 00 16 f0 00 00 08 a7 00 00 0b c6 cb 9e 06 89 63 76 74 20 00 00 25 ec 00 00 00 98 00 00 00 fe 19 af 1a c5 66 70 67 6d 00 00 1f 98 00 00 04 88 00 00 07 b4 36 0b 16 0c 67 61 73 70 00 03 1b 84 00 00 00 10 00 00 00 10 00 16 00 23 67 6c 79 66 00 00 44 94 00 02 9b 06 00 04 a4 90 68 8e f4 7e 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF`4FFTMDrzGDEF)GPOSJHw/2gGSUB,+"OS/2``wvcmapcvt %fpgm6gasp#glyfDh~head
2024-12-20 20:41:00 UTC	5063	IN	Data Raw: f0 3d 76 e2 07 ec c2 8f f8 09 3f 63 37 f6 60 2f 7e c1 3e ec c7 01 fc 8a 83 38 84 c3 38 82 a3 38 86 e3 38 81 93 38 85 d3 38 83 df 70 16 bf e3 0f 84 11 c1 9f 38 87 28 3c c4 70 1e 17 f0 17 fe c6 45 5c c2 65 5c c1 55 5c c3 75 dc c0 4d ff bf 71 1b 77 70 17 ff 20 c5 9f 95 f7 91 8a 38 41 52 34 4c c3 b4 4c c7 f4 b4 18 60 06 66 64 26 66 66 16 66 65 36 66 67 0e e6 64 2e e6 66 1e 26 30 2f f3 31 3f 0b b0 20 0b b1 30 6d 3a 0c 32 c4 44 16 a1 cb 24 16 65 31 16 67 09 96 64 32 4b b1 34 cb b0 2c cb b1 3c 2b b0 22 9f 60 25 3e c9 a7 58 99 55 58 95 d5 f8 34 ab f3 19 d6 e0 b3 ac c9 e7 58 8b b5 f9 3c eb b0 2e 5f 60 3d d6 67 03 36 64 23 36 66 13 be c8 97 d8 94 cd d8 9c 2f b3 05 5b b2 15 5f 61 6b b6 61 5b b6 63 7b 76 60 47 76 62 67 76 61 57 76 e3 ab 7c 8d dd d9 83 3d d9 8b bd d9 Data Ascii: =v?c7`/~>888888p8(<pE\e\U\uMqwp 8AR4LL`fd&fffe6fgd.f&0/1? 0m:2D$e1gd2K4,<+"`%>XUX4X<._`=g6d#6f/[_aka[c{v`GvbgvaWv\|=
2024-12-20 20:41:00 UTC	4096	IN	Data Raw: 82 d0 e3 be e7 d3 27 bf 7e f9 71 ca 8f 6f 01 39 05 f8 5b 60 6a 10 8a e1 7d 0c 9d 31 78 c5 e8 5f 10 76 41 73 2a 68 4e 05 5d 17 32 9f c2 6a 0b f3 ab 30 ed 85 69 2d 4c 7f 11 18 45 7c 2f 82 df 93 ce 8b d2 5e 14 4e 51 67 4f f1 f3 29 df 9f e2 49 31 3d 8b e1 51 9c ae e2 bc 2f ee 7e 09 5c 4b f0 ae 84 ba 12 78 96 a0 a3 84 dc 92 b8 94 e4 5d 49 1c 4b c9 2f c5 b3 52 f6 a2 14 ae a5 e8 2c a5 57 69 5e 96 86 59 1a 56 69 1c 4b f3 a8 b4 59 97 81 59 46 df 32 fc 2f 43 6f 19 f8 65 71 2a 0b a7 2c ff ca d2 55 96 ae b2 6a ca e9 53 4e 9f 72 ce ca 39 2b af ae bc ba f2 ea 2a f0 b0 82 fb 15 60 56 d4 a3 22 6e 15 e9 f5 73 10 aa e4 bc 92 de 95 ec 49 25 bc 2b f3 b6 8a 9d aa 22 a7 aa dc 6a ee 55 bb 16 84 aa 9b 5d ac fe b1 72 62 dd 8b a3 23 8e 8e 38 fb 5d 83 9f 35 7c d6 d4 ab e6 e6 20 54 Data Ascii: '~qo9[`j}1x_vAshN]2j0i-LE\|/^NQgO)I1=Q/~\Kx]IK/R,Wi^YViKYYF2/Coeq,UjSNr9+*`V"nsI%+"jU]rb#8]5\| T
2024-12-20 20:41:00 UTC	10492	IN	Data Raw: 69 fb d2 ae 7c a9 e6 2b 3d bf e2 fd 57 b4 7d cd fb af 79 f3 b5 1a ef d1 91 e5 6a 96 e3 bc 42 ff 15 f6 6f 05 9e 2b d4 7c a3 cf 37 ea bf 81 b5 d2 b3 b3 12 cf 95 3c 5c a5 cf 2a cf c5 2a f5 ab d5 af e6 cd 6a 7b b9 9a 9f df 7a 9e bf b5 0f de 9d 23 6b d4 ac d1 73 8d 9e 6b f5 5c ab a7 77 e5 c8 3a bb b4 4e cd 3a 3c bf e3 ed 77 6a be d3 f3 3b 35 eb f9 b4 5e fd 7a cf 6c aa bd 4d d5 27 95 37 1b cc 70 83 fa 0d be 7b 27 8e 6c 54 bf 91 37 9b d4 6f c2 79 93 fe 9b 70 de 6c 86 9b cd 70 b3 9e 5b ec c2 16 35 5b 70 de aa 66 2b 3f b7 ca db 6a 86 db 78 b3 cd 0c b6 99 9b f7 da c8 76 da b6 ab d9 6e 56 3b 5c ef 80 b9 03 8e f7 d9 c8 0e 39 3b fd 8e ec 84 bd 13 c6 4e de ef 34 a3 9d e6 b7 0b ae f7 d9 c8 2e 73 df e5 59 d9 c5 47 ef b3 91 34 be a4 f1 2f cd 6c d2 78 98 46 77 1a 7d bb ed Data Ascii: i\|+=W}yjBo+\|7<\**j{z#ksk\w:N:<wj;5^zlM'7p{'lT7oyplp[5[pf+?jxvnV;\9;N4.sYG4/lxFw}
2024-12-20 20:41:00 UTC	9090	IN	Data Raw: c2 ba 71 c3 cb 46 bf 7f 72 d2 b6 9a c2 9b 57 95 2d 98 7d fb ce c6 6d 0f 6f bb f4 e1 87 ab c6 1f 1d 71 ef ea 99 bb 4f ad df 51 b0 e8 b1 e5 6b 1b fb 8e c6 d9 e3 57 76 ca 9a 37 66 f1 ba e4 ce 75 81 e4 de c5 3d c7 14 f6 7f 78 56 c3 a4 91 1b 1e dc d9 7f 47 a0 6b d9 e0 e2 1b 8a 87 6e 5d 11 1c 36 a8 64 f8 dc 51 b3 7b 59 a6 12 7a 76 e7 f5 78 3e 7f 9e 9d 99 75 0b 7b 04 60 d1 03 b2 2d 4d 18 db cf 6a 20 20 0b 46 dd 34 f7 52 11 a1 47 be 4a 91 7b dc 93 4d 88 6b 33 12 c3 eb ee 3d b3 02 bd 7a 05 b2 7a c2 65 3d 33 e9 a7 cc 9e fc 82 50 5e 5e 28 94 9f 1f 52 de 01 ab f1 98 d6 72 49 18 40 74 9a 03 64 82 02 30 3c 9c 1b 70 62 93 37 2f cf a6 31 39 f9 42 12 90 5b 44 cb 3c cb bd 16 ce 62 49 12 4c 7a af 7e a9 7e bd 9e d3 eb fd 84 1b 39 7e 6b fc 38 9a 16 dd 54 04 db 78 1b 30 9e 7f Data Ascii: qFrW-}moqOQkWv7fu=xVGkn]6dQ{Yzvx>u{`-Mj F4RGJ{Mk3=zze=3P^^(RrI@td0<pb7/19B[D<bILz~~9~k8Tx0
2024-12-20 20:41:00 UTC	898	IN	Data Raw: b4 d3 91 ed 1b 0a 9a af eb 28 28 5f 9c 4c 6c 24 49 62 1a 34 52 e9 14 89 16 d3 be 91 5f c6 db 48 46 c7 e1 ca 65 f1 56 91 cb 36 3d d1 a6 93 a4 77 1b c5 7b 2e c1 7b 3a 3b d7 eb 0c fa 87 d3 81 a8 f1 3a b0 98 9c 91 21 3a 70 4e 17 90 8e bd 56 d1 e1 ce aa 88 b8 81 60 48 0c 69 64 d3 d5 ee 96 12 a1 a3 52 b8 9c 19 28 4c 68 a6 c0 ca 0b 89 9e 44 89 4f 75 43 2f af ba e3 e4 c1 19 47 ef 2d 1f 7e 70 c6 e8 aa d9 8f 9f 3b 08 8d 57 be 82 96 7f 44 1f 5d bc f2 b5 e3 4f 6d d8 7d 00 4d 1c 51 3f f5 fe 1d b9 e1 75 39 c5 c3 fb 0e ac b9 69 e1 2f 8f 5c 82 ba df 3f 7c a1 05 c0 55 f7 34 0c ec fa f1 a3 ab 9f 7c 51 de 77 8b 89 e1 3e c8 7a ff de 18 ee a6 d2 d1 96 f6 58 87 f5 06 da 7a f9 6f 1c ec c5 41 0d 47 44 84 ab e7 88 88 70 9c 4e ad 56 55 47 68 b1 76 f5 9f 88 48 3c 7e a4 8f 76 0c 29 Data Ascii: ((_Ll$Ib4R_HFeV6=w{.{:;:!:pNV`HidR(LhDOuC/G-~p;WD]Om}MQ?u9i/\?\|U4\|Qw>zXzoAGDpNVUGhvH<~v)
2024-12-20 20:41:00 UTC	4096	IN	Data Raw: 94 f5 a9 eb b0 b1 2a d1 df 29 75 8b 1a de ff fa 8b 73 35 b4 5f 66 83 56 9f ff f4 d4 97 5f 5b b2 6c d3 6e b4 3d 3a e5 fb 8f 4f bf 03 fb 3e b0 fc 95 73 b1 6e ab 63 c7 be fe a1 74 74 c5 72 b9 1f 3c 6a 60 f9 30 6f d8 08 8d 46 b5 68 36 61 1d 47 34 97 b5 dd 33 28 94 c6 79 b1 6e 2b 66 38 b7 ec c6 2e 95 a9 9e 79 3d f7 6d e5 1b af ed 9a 3a c5 a8 d9 ae b7 3d f9 0c 77 3b 81 3b 88 30 6f 2e ab 49 99 10 ee c2 6b 88 c6 34 5a 2c 2a ac 17 69 0c 64 27 51 25 d9 b3 46 41 80 5a bd 46 ab 99 13 d1 62 6b 87 cf 05 49 d8 43 31 9b 1a 27 0d 7b 4c 08 bd 52 27 3f 2a 84 d6 a0 c8 8f 0b 69 6a a2 0f 0c 39 72 e4 e0 cc 00 32 ec 81 5f d3 a7 86 48 9e 3d d1 9f 03 b2 3e 97 9f f3 71 82 ec 55 e2 95 38 20 4c a1 3d 42 35 20 39 45 2f 00 ac 52 69 b4 18 69 2c 56 57 0d 71 02 13 9a cf 39 db f7 7f d0 40 Data Ascii: )us5_fV_[ln=:O>sncttr<j`0oFh6aG43(yn+f8.y=m:=w;;0o.Ik4Z,id'Q%FAZFbkIC1'{LR'?*ij9r2_H=>qU8 L=B5 9E/Rii,VWq9@
2024-12-20 20:41:00 UTC	4096	IN	Data Raw: 1f f8 cb b9 4f ef 3b b8 ff a1 7b 26 3f 38 71 30 cd 1d 21 1a fc cb 03 fa 88 b5 1b 66 28 7d 89 7a 8d aa c8 7d 20 e9 13 18 81 e4 a9 19 71 88 5e 11 3f ee 93 81 51 92 45 b7 87 31 e3 16 71 5e 0d ba 6c 1a c1 cc 37 a6 00 64 5d 9b ea 02 49 f9 88 7c 12 29 46 53 9e 01 94 2c 17 38 09 77 b6 ba f5 c3 37 fe f2 92 f4 f4 ff 40 23 cc 79 64 c9 c6 95 92 8d ab d8 b4 ef e7 8f 5f 92 2e bc 60 6a 09 43 d7 27 6b f7 b4 9d 26 ba 2d 3c 89 ec a1 09 9d 7b aa 79 55 35 87 78 2c 6a c2 8e 1d 92 4d 8b 7d 94 c7 10 1f b9 99 b3 09 d9 70 a9 f4 1b b2 f1 34 70 29 86 c0 24 e7 64 19 fa b7 6d a4 47 64 53 a4 d4 ca 33 5a a3 11 5a 4c 9c 5e 6f e2 69 9b 1d 09 0b eb ac 28 03 d0 75 b4 d3 06 5e 2b f0 c2 ac e8 09 dc d0 01 f0 26 0a 98 bc f1 56 20 8d f2 26 61 98 9e 4e 37 32 29 e1 2c 65 96 50 6a e7 86 65 b0 d7 Data Ascii: O;{&?8q0!f(}z} q^?QE1q^l7d]I\|)FS,8w7@#yd_.`jC'k&-<{yU5x,jM}p4p)$dmGdS3ZZL^oi(u^+&V &aN72),ePje
2024-12-20 20:41:00 UTC	3198	IN	Data Raw: cd b1 03 91 7d 9a 01 66 47 7a 68 fd d0 e5 f2 70 fa 70 d8 c3 fb 3d fe cc 2c bd c7 18 b6 87 9c a2 31 84 a6 6b 0c 18 d1 74 8d 22 cd 70 11 a0 e3 74 cd 51 8e 17 bd cd c9 a2 6a 0b 20 31 ef b2 ff b2 77 c9 0d 4c a6 ae fe fe 46 be 1c cf 61 95 27 8c f7 33 67 c5 90 51 b0 87 32 4b fa 38 09 85 4b 40 d9 54 34 db 77 67 1c 57 66 87 6b 72 d6 49 36 82 75 6b c2 35 7c 94 41 ab 35 f3 3a 5e 5d 8d aa 24 b1 a9 ab 60 31 67 2f 6c 8a 0c e8 37 6c 70 db e3 04 1e f1 c6 d1 cc 2f 57 45 92 a6 40 fa 7a 5c d6 34 a0 73 ed 03 d9 a0 0c 8c 8a 14 94 d0 7c 56 96 31 df a2 73 06 83 ba 7c 9a e9 5e ae 13 d3 68 c0 99 40 b8 1b d7 ad 31 6a e3 04 7f 0e c8 41 da 0c 46 1f 28 95 f3 41 12 85 0e ce 4e 05 dd 9d d1 e7 09 41 09 b4 89 70 90 a6 32 83 ca f1 10 42 09 e0 09 9b 83 6a f8 fe 0a a9 42 67 74 0a 00 45 ec Data Ascii: }fGzhpp=,1kt"ptQj 1wLFa'3gQ2K8K@T4wgWfkrI6uk5\|A5:^]$`1g/l7lp/WE@z\4s\|V1s\|^h@1jAF(ANAp2BjBgtE
2024-12-20 20:41:00 UTC	7294	IN	Data Raw: a5 8d 36 9d 99 36 fb 03 3a 1e 70 68 2f ec 9c 0b 8b 2c 60 49 45 fa 54 f7 f7 2c eb e4 85 a9 2c eb ba f1 1f f6 b7 68 7d eb 30 06 e0 5b 0a 22 a0 2d 81 f8 b7 f6 ea e1 96 a7 37 26 c0 00 09 ed cf 61 4c 57 a6 c9 c2 53 36 e6 32 53 af d0 ce 25 68 97 31 5f 03 88 f2 3c 8c 92 65 f2 78 7c d6 9c 1c d6 47 e7 17 78 4c 0e c1 67 a7 34 13 a3 14 14 fc 04 cb 21 f3 7f c3 72 20 9d ae cb 92 60 0e 49 37 92 82 01 0b d5 d0 af 07 7e 1d 40 70 1c 64 ef 51 02 04 16 7e a7 c0 bf 26 e0 8e e6 c5 3d 46 0a 12 2c 7d 2a 89 01 2b d7 f1 4c 25 f7 34 27 62 33 3a 45 d6 c9 ba dc bc 76 62 94 17 ec d4 c4 a8 3d 99 20 9c a8 e1 ac 4c c6 4c 64 db 40 ce 10 ce 6e 58 bd ea a9 2d 3b 77 55 3e 58 5a 59 b2 b3 e9 ef e8 68 ff eb 1f bb e6 9d 8a 5c 38 fb d6 87 3e f7 26 77 ba f4 b9 f4 b3 f4 37 e9 d3 6a b4 76 93 3a b6 Data Ascii: 66:ph/,`IET,,h}0["-7&aLWS62S%h1_<ex\|GxLg4!r `I7~@pdQ~&=F,}*+L%4'b3:Evb= LLd@nX-;wU>XZYh\8>&w7jv:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49733	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:40:59 UTC	737	OUT	GET /share/dist/i/fb0c3c85d07caa53ebf54b3a58b8d30e.png HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://premiumgain.nimbusweb.me/share/dist/index.css?v=9.26.11-73fecd7b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:00 UTC	710	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 54782 Connection: close Date: Fri, 20 Dec 2024 20:41:00 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"d5fe-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 c5c1467e47aa14975ca9a42cf837f5ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: ywjjABUstPSgB3izb5_-EokZ2ZxwP8xs786xZoKyCZgyA4pJb5rZ7Q==
2024-12-20 20:41:00 UTC	3578	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 66 00 00 01 5a 08 06 00 00 00 2d 9e f7 c0 00 00 80 00 49 44 41 54 78 01 ec c1 79 78 9c f5 81 e0 f9 ef ef ad fb 52 95 a4 2a 5d 55 92 65 63 cb c2 9c 21 04 12 d2 1d 43 48 9a d8 21 38 c0 46 c1 a1 83 11 cc b1 ec ec 3e dd bd 4f cf 3c bb fb 3c 33 16 3b 7f cd 33 fb 6c ba 9f 67 b7 c9 74 37 36 24 6b 8b 98 40 1a a7 83 21 09 87 09 49 43 42 08 37 b2 64 49 25 d5 5d ba 4a aa 2a d5 f9 be bf ad 17 ac 89 a2 48 46 d6 61 cb 56 7d 3e 82 aa aa aa aa 4b cc a3 47 8e dc 0f e2 3b 80 87 55 93 0f 3f 78 ef bd 3d 9c 47 46 aa aa aa aa 2e 31 42 88 83 df b8 e3 0e 8f d3 e1 60 35 32 d9 2c cf fe fc 85 83 8f 1e 39 c2 83 f7 de db c3 79 a2 50 55 55 55 75 89 91 92 76 a7 c3 c1 6a 39 1d 0e f6 7e e9 56 9c 0e e7 c1 47 8f 1c e9 e1 3c 51 a8 aa Data Ascii: PNGIHDRfZ-IDATxyxR]Uec!CH!8F>O<<3;3lgt76$k@!ICB7dI%]JHFaV}>KG;U?x=GF.1B`52,9yPUUUuvj9~VG<Q
2024-12-20 20:41:00 UTC	8261	IN	Data Raw: 9e 7b de e6 12 70 e7 9e db 1e fe d1 89 e7 31 40 cf 93 27 4e f0 8d 3d 7b 7a a8 78 ea c4 89 1e 81 38 28 11 3d 77 ef b9 ed 61 e6 31 b2 12 42 ba 90 e0 74 38 b8 18 58 2c 16 ae dc b5 cb 1e 8a 84 67 4a a5 d2 7d c7 8e 1d fb 0f 5d 5d 5d 45 aa 2e 28 c5 62 19 d1 66 73 76 2a 3e f7 99 1b 68 f0 f9 5c ac 82 aa aa 24 c7 c7 88 c6 e3 c4 93 49 ca a5 12 73 1c 76 3b fe a6 26 fc 2d cd b4 34 35 61 31 9b a9 fa 63 ee 1a 17 ee 1a 17 9d 3b b6 23 a5 64 6c 62 82 70 34 4a 38 1a 67 62 6a 92 b1 89 71 c6 26 c6 79 e7 fd f7 a8 ab ad a5 a5 a9 99 e6 a6 46 ec 36 3b 2b 21 84 a0 a5 b9 99 96 e6 66 57 72 6c 8c 7f f9 cd af 41 4a bb 62 b1 8e 70 09 b9 73 cf 6d 0f ff e8 c4 f3 18 a0 e7 c9 13 27 50 00 81 38 28 11 3d 77 ef b9 ed 61 16 30 b2 22 42 82 e4 62 b3 a5 ad cd 38 30 38 58 93 d5 b4 db 81 a7 a9 ba Data Ascii: {p1@'N={zx8(=wa1Bt8X,gJ}]]]E.(bfsv*>h\$Isv;&-45a1c;#dlbp4J8gbjq&yF6;+!fWrlAJbpsm'P8(=wa0"Bb808X
2024-12-20 20:41:00 UTC	4096	IN	Data Raw: 47 be fb 4e 3f df f9 c2 f5 2c 57 5b 8d 83 39 23 33 b3 6c 06 9a a6 99 40 a6 d9 00 14 45 7c 4f d3 e4 2d c3 23 23 33 5b 02 ad 35 2c a2 cd 1f e0 83 fe 53 f4 0f 0e 11 68 6e 66 b5 da 02 01 7e fb f6 3b c4 12 09 ae be e2 4a 36 92 58 22 81 ae 2d e0 67 b5 62 89 04 d9 d9 59 ec 36 3b f5 75 75 2c 65 78 74 64 06 a8 51 14 f1 3d 36 a8 ae 7d 77 30 5f d7 be 3b 98 af 6b df 1d cc d7 b5 ef 0e d6 c8 6e 20 0f 3c 0e a4 58 06 85 2a 5c 26 13 0f 5e b9 9d 39 af 44 92 bc 3f 99 62 b9 da 9c 0e e6 a4 4b 25 d2 a5 12 97 3a 4d d3 cc 48 91 66 03 a8 b3 db 9f 02 31 3b 33 33 e3 9a cd cd b2 98 80 df 8f 6e 34 1c a6 50 2c b2 5a b5 6e 37 2e a7 93 7c 3e cf 54 2a c5 46 31 95 4a 91 cf e7 71 39 9d d4 ba dd ac 56 df e9 41 74 ad 81 00 4b 99 cd cd 32 33 33 e3 02 31 5b 67 b7 3f 45 d5 42 56 20 0f ec 03 ae Data Ascii: GN?,W[9#3l@E\|O-##3[5,Shnf~;J6X"-gbY6;uu,extdQ=6}w0_;kn <X\&^9D?bK%:MHf1;33n4P,Zn7.\|>TF1Jq9VAtK2331[g?EBV
2024-12-20 20:41:00 UTC	7294	IN	Data Raw: d5 73 92 89 d4 eb 09 29 3b d5 ce 0f 2b 8e f2 54 65 35 26 55 c7 b7 6e 4e e7 3b b7 2d e4 8e a9 71 08 46 3a d9 c9 28 92 f7 e0 83 ef 0a c1 5b c1 60 d0 74 cc 6e 0f d0 8f 39 b3 66 11 52 7e b0 0a 4d d3 18 ab 0e 1e 3e 8c df ef 67 62 6c 2c e3 62 62 e8 cf 31 bb 3d 10 0c 06 4d 42 88 37 f3 1e 7c f0 5d 46 1e 07 03 78 a9 f9 34 5b aa ea d9 93 9d 49 a2 d5 c4 92 e2 32 96 c7 c7 b2 21 35 89 9d f5 ad 6c a9 aa 67 4f 76 26 d1 06 95 25 c5 65 ec ac 6f 65 10 1c 0c 33 95 eb 94 45 d5 d3 9b 51 a7 70 a5 74 f9 fc ec 38 7c 8c b2 b6 76 3e 3b 67 06 9f 4f 9d 49 8f 0e 9f 9f df d4 37 d1 e9 f5 73 53 dc 04 be 9c 3e 9b d1 48 42 27 a3 8c 80 7f 97 b0 a7 ba ae 36 38 3d 31 51 55 f5 7a 2e 34 25 6e 32 d1 51 51 74 74 76 52 75 f4 28 0b e6 ce 65 ac 71 bb dd 1c 3c 7c 84 90 39 b3 52 e8 4f c0 ef a7 ba ae Data Ascii: s);+Te5&UnN;-qF:([`tn9fR~M>gbl,bb1=MB7\|]Fx4[I2!5lgOv&%eoe3EQpt8\|v>;gOI7sS>HB'68=1QUz.4%n2QQttvRu(eq<\|9RO
2024-12-20 20:41:00 UTC	3198	IN	Data Raw: 48 e5 32 34 38 3d 3c f8 4e 15 d1 7a 95 a2 ac 74 06 f2 d1 df ef 27 a4 28 2b 9d 68 bd ca 48 36 7f 76 3c fd 39 db e1 62 c3 77 5f a0 ac aa 91 ab 21 fa 53 f7 60 9e 9f 86 0c 06 e9 7a e3 75 2e e4 ad 3e 82 63 f7 af 18 97 fb 10 21 e3 56 7e 16 c7 ee 5f 71 b5 45 19 f5 3c b1 f8 46 84 10 84 9c 71 7b 58 f9 52 31 d5 ed 1d 84 b4 7b bc ac 7a e9 75 9e 5d 7e 07 b3 c7 db 08 f9 9b 8c 39 9c 76 7b f8 9f f2 23 8c 44 ea 0d ab e8 21 fd 6e dc 3f 59 8e 76 ea 28 3d 02 07 76 a3 9d 3c 82 e5 1f df 44 e8 cd 84 a8 37 ac c2 57 bc 95 91 e0 e1 a4 38 1e 4e 9c c4 40 7e 69 6f e5 cd 36 07 57 c9 bd 40 31 90 0a bc 2e a5 cc 16 42 b4 71 19 84 10 59 52 4a fa e2 f0 05 d8 52 65 67 4f 76 26 89 56 13 17 93 68 35 51 78 eb 02 96 94 94 f1 70 f2 64 6c 7a 95 be e8 74 ba 15 40 09 17 91 9c 9c 9c e2 f7 fb a7 30 Data Ascii: H248=<Nzt'(+hH6v<9bw_!S`zu.>c!V~_qE<Fq{XR1{zu]~9v{#D!n?Yv(=v<D7W8N@~io6W@1.BqYRJRegOv&Vh5Qxpdlzt@0
2024-12-20 20:41:00 UTC	8192	IN	Data Raw: 28 9b 0c 06 83 9d ab 40 65 90 a6 59 4d 14 65 a5 93 53 5a 41 83 d3 43 4e 69 25 45 59 69 24 5a 4c 0c 45 83 d3 43 4e 69 05 8d 2e 2f 69 36 2b 45 59 e9 44 eb 55 ae 05 af 2f c0 e9 76 27 17 8a b4 1a 31 1a 55 fa e2 e8 74 13 08 68 f4 16 d4 34 da da bb 18 2e d6 1b 3f ca f8 87 f3 30 cf 4f c7 5b 57 83 ab b2 0c 5f d3 71 ce ec fc 39 ea 84 58 26 ac 79 04 c5 62 21 64 dc 03 0f e3 3f d9 ca d9 e7 9f 61 24 5b 34 39 96 1e 3f fa f0 10 77 26 4e 61 f6 78 1b 65 27 cf d0 e9 f5 13 52 e7 e8 62 e5 4b af f3 ec f2 3b 98 60 31 21 84 e0 db d9 37 b2 78 d7 ef 18 6e 81 aa df 11 78 e2 6d f4 37 3e 84 e1 e6 3c 94 89 29 0c 44 3b 55 8d ef dd ed f8 df fb 25 b8 cf 72 b5 24 5a 4d 84 fc b6 f9 34 4f 45 5b 89 d6 eb e8 71 5b 6c 34 d3 ac 66 06 d2 e8 f4 f0 66 9b 83 90 5f da 5b e9 f0 07 79 b3 ad 83 10 9b Data Ascii: (@eYMeSZACNi%EYi$ZLECNi./i6+EYDU/v'1Uth4.?0O[W_q9X&yb!d?a$[49?w&Naxe'RbK;`1!7xnxm7><)D;U%r$ZM4OE[q[l4ff_[y
2024-12-20 20:41:00 UTC	1796	IN	Data Raw: 28 29 29 a1 35 ad c9 2b a4 3e 1d 2f 69 cb 8d 7d 7b 10 20 22 d4 a7 c6 34 09 88 8d b6 32 fa e6 6b a8 4f 4d 8d c9 ff b7 32 8f aa ea 5a 9a d3 91 aa 6a 82 39 da 44 13 b0 76 ef 97 04 1b da b9 03 c1 f6 94 56 10 cc d1 26 9a 6f cd a0 96 60 62 cc c1 4f b5 1b 3b 0f dc cd 37 a8 05 3f d1 1a 9a 93 f2 2a f5 51 49 24 20 23 a9 0a d5 2f f0 53 22 a8 ad 19 49 80 c5 f2 3c 60 a2 1c 21 c0 94 8b 40 bf c7 d8 41 ff 8b b0 0f 3f 91 dd 8c b9 79 37 c8 77 09 50 5e 25 40 79 95 06 69 22 01 ed ec fb 08 50 6d 4f d1 a1 9b 09 30 8c 67 f1 33 8c 23 9c 12 47 43 94 57 09 b3 01 4e e0 0e c0 41 08 06 a1 74 4d e6 98 0d f3 e1 9a a1 30 36 07 56 67 c1 ff 0c 83 72 2f a7 89 77 d0 a8 18 3b c4 d8 39 4d 51 3e 3c 96 c6 31 8f e6 41 8c 1d 3e 58 07 b1 76 88 ef 4a 4b ca ce ce 66 eb d6 ad f8 4d 9e 3c 99 9e 3d 7b Data Ascii: ())5+>/i}{ "42kOM2Zj9DvV&o`bO;7?*QI$ #/S"I<`!@A?y7wP^%@yi"PmO0g3#GCWNAtM06Vgr/w;9MQ><1A>XvJKfM<={
2024-12-20 20:41:00 UTC	12288	IN	Data Raw: 3e a4 39 b5 8d 8d 62 d6 bd 43 e8 d0 be 2d 67 4c 59 4b 13 78 ab 6a 08 76 71 a4 85 60 6b f7 7e 49 b0 69 3d bb 62 b7 5a 48 6e d7 96 60 ee d2 0a 9a c0 cd f8 5b 0a 09 45 b5 2b a1 dc 9f f1 47 0c b9 07 a4 12 f4 4e 20 05 a4 18 35 1e a2 3e aa 06 4f af 1c c2 e2 57 fe 87 f2 ea b1 44 5a de 62 e2 a8 a9 4c 1a f9 5f 4c 1a b9 0a e7 9d 87 68 cc 90 2b 2b 89 b6 0d 43 d8 c7 29 51 a8 f9 10 a6 f9 df a0 91 d4 47 35 15 35 e7 a0 fc 14 b4 13 c7 c8 76 0c 63 18 96 c8 51 f8 a9 be 03 6a 07 6d 8b c8 47 14 ef 7e 8b 65 1b c6 51 9f 21 57 56 12 6d 1b 86 b0 8f 6f d0 76 a0 8f a1 fc 94 50 54 ef 40 f5 09 54 c7 a2 5c 4c 7d 84 7d 44 db 86 31 e4 ca 4a ce 91 eb 06 a7 c7 9b 5a 9a a7 90 24 4a a9 28 a5 0a 49 a6 96 e6 5d 37 38 3d 9e 73 c3 0b f8 00 2f 21 18 34 66 4f 21 5c 33 94 06 15 15 40 b9 97 06 15 Data Ascii: >9bC-gLYKxjvq`k~Ii=bZHn`[E+GN 5>OWDZbL_Lh++C)QG55vcQjmG~eQ!WVmovPT@T\L}}D1JZ$J(I]78=s/!4fO!\3@
2024-12-20 20:41:00 UTC	6079	IN	Data Raw: 3e 13 91 0b 38 79 24 73 2c 8a 03 58 40 96 d3 c3 0a 73 03 c2 54 10 1b 2f 14 9c c3 ed e9 9f 23 52 0a ca 51 04 3b 01 4c cb 9e b7 17 b0 d3 c2 bd 3c 77 51 22 bd 20 65 6c da ab 8a a6 e3 25 22 af 96 98 85 37 d0 0b b6 bf ff c1 5e 54 ed 34 53 dc 23 2f 1d 91 48 ef b8 96 16 cb e8 bc 0d c0 74 e0 1a 42 a0 c4 cc 2f 4f 71 65 3a 55 2b 8b 80 24 d5 ca a2 14 57 a6 b3 c4 cc 2f e7 38 8b e4 18 4c 33 bf dc e5 ca 74 56 6b 65 91 42 12 5e 02 65 fd 24 ce 69 9a f9 e5 84 4e 05 90 0b 64 03 f1 b4 a8 00 72 81 0a 7a 89 08 85 aa a4 e1 87 aa 28 9d a0 aa 1f d3 22 57 44 56 02 23 38 b6 1f e2 a5 aa 53 80 6c bc 44 e4 fb 74 81 aa ee 06 86 e2 87 7a d1 e2 33 11 b9 80 9e 59 06 3c 46 70 cb 38 b9 d8 38 16 c1 41 9e e9 20 cb 55 8c b2 12 61 2a cd 2c b1 03 9f 63 e9 21 0c fc b1 13 98 9d 36 76 7c a6 65 cf Data Ascii: >8y$s,X@sT/#RQ;L<wQ" el%"7^T4S#/HtB/Oqe:U+$W/8L3tVkeB^e$iNdrz("WDV#8SlDtz3Y<Fp88A Ua*,c!6v\|e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49735	172.217.19.164	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:01 UTC	447	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:02 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 20 Dec 2024 20:41:02 GMT Date: Fri, 20 Dec 2024 20:41:02 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 20:41:02 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-20 20:41:02 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-12-20 20:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49736	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:02 UTC	453	OUT	GET /share/dist/i/fb0c3c85d07caa53ebf54b3a58b8d30e.png HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:02 UTC	710	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 54782 Connection: close Date: Fri, 20 Dec 2024 20:41:02 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"d5fe-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 9e5f1a91c47416623ea43cb662694d38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: j8pQzWpnZxhNV3ZQSRRqbF_aTmrbSZNKW9us6shZpdhbIGJMm3lRdA==
2024-12-20 20:41:02 UTC	3578	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 66 00 00 01 5a 08 06 00 00 00 2d 9e f7 c0 00 00 80 00 49 44 41 54 78 01 ec c1 79 78 9c f5 81 e0 f9 ef ef ad fb 52 95 a4 2a 5d 55 92 65 63 cb c2 9c 21 04 12 d2 1d 43 48 9a d8 21 38 c0 46 c1 a1 83 11 cc b1 ec ec 3e dd bd 4f cf 3c bb fb 3c 33 16 3b 7f cd 33 fb 6c ba 9f 67 b7 c9 74 37 36 24 6b 8b 98 40 1a a7 83 21 09 87 09 49 43 42 08 37 b2 64 49 25 d5 5d ba 4a aa 2a d5 f9 be bf ad 17 ac 89 a2 48 46 d6 61 cb 56 7d 3e 82 aa aa aa aa 4b cc a3 47 8e dc 0f e2 3b 80 87 55 93 0f 3f 78 ef bd 3d 9c 47 46 aa aa aa aa 2e 31 42 88 83 df b8 e3 0e 8f d3 e1 60 35 32 d9 2c cf fe fc 85 83 8f 1e 39 c2 83 f7 de db c3 79 a2 50 55 55 55 75 89 91 92 76 a7 c3 c1 6a 39 1d 0e f6 7e e9 56 9c 0e e7 c1 47 8f 1c e9 e1 3c 51 a8 aa Data Ascii: PNGIHDRfZ-IDATxyxR]Uec!CH!8F>O<<3;3lgt76$k@!ICB7dI%]JHFaV}>KG;U?x=GF.1B`52,9yPUUUuvj9~VG<Q
2024-12-20 20:41:02 UTC	8261	IN	Data Raw: 9e 7b de e6 12 70 e7 9e db 1e fe d1 89 e7 31 40 cf 93 27 4e f0 8d 3d 7b 7a a8 78 ea c4 89 1e 81 38 28 11 3d 77 ef b9 ed 61 e6 31 b2 12 42 ba 90 e0 74 38 b8 18 58 2c 16 ae dc b5 cb 1e 8a 84 67 4a a5 d2 7d c7 8e 1d fb 0f 5d 5d 5d 45 aa 2e 28 c5 62 19 d1 66 73 76 2a 3e f7 99 1b 68 f0 f9 5c ac 82 aa aa 24 c7 c7 88 c6 e3 c4 93 49 ca a5 12 73 1c 76 3b fe a6 26 fc 2d cd b4 34 35 61 31 9b a9 fa 63 ee 1a 17 ee 1a 17 9d 3b b6 23 a5 64 6c 62 82 70 34 4a 38 1a 67 62 6a 92 b1 89 71 c6 26 c6 79 e7 fd f7 a8 ab ad a5 a5 a9 99 e6 a6 46 ec 36 3b 2b 21 84 a0 a5 b9 99 96 e6 66 57 72 6c 8c 7f f9 cd af 41 4a bb 62 b1 8e 70 09 b9 73 cf 6d 0f ff e8 c4 f3 18 a0 e7 c9 13 27 50 00 81 38 28 11 3d 77 ef b9 ed 61 16 30 b2 22 42 82 e4 62 b3 a5 ad cd 38 30 38 58 93 d5 b4 db 81 a7 a9 ba Data Ascii: {p1@'N={zx8(=wa1Bt8X,gJ}]]]E.(bfsv*>h\$Isv;&-45a1c;#dlbp4J8gbjq&yF6;+!fWrlAJbpsm'P8(=wa0"Bb808X
2024-12-20 20:41:03 UTC	16384	IN	Data Raw: 47 be fb 4e 3f df f9 c2 f5 2c 57 5b 8d 83 39 23 33 b3 6c 06 9a a6 99 40 a6 d9 00 14 45 7c 4f d3 e4 2d c3 23 23 33 5b 02 ad 35 2c a2 cd 1f e0 83 fe 53 f4 0f 0e 11 68 6e 66 b5 da 02 01 7e fb f6 3b c4 12 09 ae be e2 4a 36 92 58 22 81 ae 2d e0 67 b5 62 89 04 d9 d9 59 ec 36 3b f5 75 75 2c 65 78 74 64 06 a8 51 14 f1 3d 36 a8 ae 7d 77 30 5f d7 be 3b 98 af 6b df 1d cc d7 b5 ef 0e d6 c8 6e 20 0f 3c 0e a4 58 06 85 2a 5c 26 13 0f 5e b9 9d 39 af 44 92 bc 3f 99 62 b9 da 9c 0e e6 a4 4b 25 d2 a5 12 97 3a 4d d3 cc 48 91 66 03 a8 b3 db 9f 02 31 3b 33 33 e3 9a cd cd b2 98 80 df 8f 6e 34 1c a6 50 2c b2 5a b5 6e 37 2e a7 93 7c 3e cf 54 2a c5 46 31 95 4a 91 cf e7 71 39 9d d4 ba dd ac 56 df e9 41 74 ad 81 00 4b 99 cd cd 32 33 33 e3 02 31 5b 67 b7 3f 45 d5 42 56 20 0f ec 03 ae Data Ascii: GN?,W[9#3l@E\|O-##3[5,Shnf~;J6X"-gbY6;uu,extdQ=6}w0_;kn <X\&^9D?bK%:MHf1;33n4P,Zn7.\|>TF1Jq9VAtK2331[g?EBV
2024-12-20 20:41:03 UTC	8192	IN	Data Raw: c3 e8 d7 f2 78 ec ba 1f f2 93 ab 2e 23 d8 47 c5 87 99 be f9 3d 76 7b 4b 68 55 95 a5 98 87 f7 10 d1 a1 07 aa 4a e5 da ff a6 fa cf cf 50 57 f5 9f 9f 81 ea 4a a2 86 cf 47 0c 03 f5 7a a0 c2 cb b9 f4 c0 95 09 9c 27 da 03 1f 8b c8 21 42 db 07 c4 a8 6a 7b 11 39 44 0b 50 55 bb cf e7 4b 8e 88 88 b8 43 55 53 55 d5 01 d8 39 ce 0b 14 1a 86 51 a8 aa 05 51 51 51 6b 69 19 89 c0 55 c0 5b 1c 77 1b 70 2b 70 1f c7 5d 05 14 72 82 85 b0 f3 56 f9 df df e7 9f 23 6e e7 e2 f4 51 b4 4d b9 91 a8 2b ba d3 f6 ba 54 da 5e 97 4a 40 8d f7 2b ca ff b6 95 bd 3f 9f 42 c5 b6 0f b9 50 95 55 d7 30 e3 ed bf b2 f4 a3 4f 48 be b4 3d b1 d6 48 8a 0e 7e c5 bb fb be a0 56 95 73 a1 e2 a9 c1 58 92 7f 42 ad fb af 98 fb 0a 09 a5 fa af 4b a9 dd fb 37 22 2e bf 96 9a 6d 6b 40 4d c2 4e 8a a1 61 e5 1c 57 41 Data Ascii: x.#G=v{KhUJPWJGz'!Bj{9DPUKCUSU9QQQQkiU[wp+p]rV#nQM+T^J@+?BPU0OH=H~VsXBK7".mk@MNaWA
2024-12-20 20:41:03 UTC	4096	IN	Data Raw: 3e a4 39 b5 8d 8d 62 d6 bd 43 e8 d0 be 2d 67 4c 59 4b 13 78 ab 6a 08 76 71 a4 85 60 6b f7 7e 49 b0 69 3d bb 62 b7 5a 48 6e d7 96 60 ee d2 0a 9a c0 cd f8 5b 0a 09 45 b5 2b a1 dc 9f f1 47 0c b9 07 a4 12 f4 4e 20 05 a4 18 35 1e a2 3e aa 06 4f af 1c c2 e2 57 fe 87 f2 ea b1 44 5a de 62 e2 a8 a9 4c 1a f9 5f 4c 1a b9 0a e7 9d 87 68 cc 90 2b 2b 89 b6 0d 43 d8 c7 29 51 a8 f9 10 a6 f9 df a0 91 d4 47 35 15 35 e7 a0 fc 14 b4 13 c7 c8 76 0c 63 18 96 c8 51 f8 a9 be 03 6a 07 6d 8b c8 47 14 ef 7e 8b 65 1b c6 51 9f 21 57 56 12 6d 1b 86 b0 8f 6f d0 76 a0 8f a1 fc 94 50 54 ef 40 f5 09 54 c7 a2 5c 4c 7d 84 7d 44 db 86 31 e4 ca 4a ce 91 eb 06 a7 c7 9b 5a 9a a7 90 24 4a a9 28 a5 0a 49 a6 96 e6 5d 37 38 3d 9e 73 c3 0b f8 00 2f 21 18 34 66 4f 21 5c 33 94 06 15 15 40 b9 97 06 15 Data Ascii: >9bC-gLYKxjvq`k~Ii=bZHn`[E+GN 5>OWDZbL_Lh++C)QG55vcQjmG~eQ!WVmovPT@T\L}}D1JZ$J(I]78=s/!4fO!\3@
2024-12-20 20:41:03 UTC	8192	IN	Data Raw: 06 27 29 55 1d 0e bc 0d 0c 23 74 2e 07 de 53 d5 ef d3 49 d3 ef 7f 68 b8 a1 f2 36 30 8c 10 11 b8 bc 31 a2 f1 bd 19 0f 3c f0 7d 3a 69 fa fd 0f 0d 37 54 de 06 86 11 22 02 97 37 46 34 be 37 e3 81 07 be cf 09 f2 ee 87 1f 52 f2 ce bb b8 f7 ef 27 ed ea 31 c4 c5 c6 cd 5f b6 6a 55 0e bd 40 15 3b 5e a7 c4 c5 79 ce 39 eb 2c 92 2e bc 80 cb 86 27 33 fa ca 2b 3c 37 5e 77 2d b7 df 7c 13 b7 df 7c 13 b7 5c 9f 6e 1b 93 32 8a cb 86 0f 27 e9 c2 0b b1 0f 19 62 3b ed d4 53 39 19 bc fb e1 87 94 bc f3 2e ee fd fb 49 bb 7a 0c 71 b1 71 f3 97 ad 5a 95 43 d8 c9 ac 16 f8 35 b0 00 78 1a f8 35 e0 26 08 83 93 90 aa 0e 05 36 03 83 e8 9e 4a e0 2f f8 97 00 14 a8 ea 60 8e 61 ea dc b9 43 d5 b0 36 a3 0c a2 7b 2a 81 bf e0 5f 82 a5 46 c1 d4 b9 73 07 73 0c 53 e7 ce 1d aa 86 b5 19 65 10 dd 53 09 Data Ascii: ')U#t.SIh601<}:i7T"7F47R'1_jU@;^y9,.'3+<7^w-\|\|\n2'b;S9.IzqqZC5x5&6J/`aC6{*_FssSeS
2024-12-20 20:41:03 UTC	6079	IN	Data Raw: 3e 13 91 0b 38 79 24 73 2c 8a 03 58 40 96 d3 c3 0a 73 03 c2 54 10 1b 2f 14 9c c3 ed e9 9f 23 52 0a ca 51 04 3b 01 4c cb 9e b7 17 b0 d3 c2 bd 3c 77 51 22 bd 20 65 6c da ab 8a a6 e3 25 22 af 96 98 85 37 d0 0b b6 bf ff c1 5e 54 ed 34 53 dc 23 2f 1d 91 48 ef b8 96 16 cb e8 bc 0d c0 74 e0 1a 42 a0 c4 cc 2f 4f 71 65 3a 55 2b 8b 80 24 d5 ca a2 14 57 a6 b3 c4 cc 2f e7 38 8b e4 18 4c 33 bf dc e5 ca 74 56 6b 65 91 42 12 5e 02 65 fd 24 ce 69 9a f9 e5 84 4e 05 90 0b 64 03 f1 b4 a8 00 72 81 0a 7a 89 08 85 aa a4 e1 87 aa 28 9d a0 aa 1f d3 22 57 44 56 02 23 38 b6 1f e2 a5 aa 53 80 6c bc 44 e4 fb 74 81 aa ee 06 86 e2 87 7a d1 e2 33 11 b9 80 9e 59 06 3c 46 70 cb 38 b9 d8 38 16 c1 41 9e e9 20 cb 55 8c b2 12 61 2a cd 2c b1 03 9f 63 e9 21 0c fc b1 13 98 9d 36 76 7c a6 65 cf Data Ascii: >8y$s,X@sT/#RQ;L<wQ" el%"7^T4S#/HtB/Oqe:U+$W/8L3tVkeB^e$iNdrz("WDV#8SlDtz3Y<Fp88A Ua*,c!6v\|e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49739	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:14 UTC	442	OUT	GET /share/dist/index.js?v=9.26.11-73fecd7b HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:15 UTC	766	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 11070984 Connection: close Date: Fri, 20 Dec 2024 20:41:15 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:32 GMT ETag: W/"a8ee08-19371fe4ec0" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 9e5f1a91c47416623ea43cb662694d38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: 6RWoa-quJ7Jhp5_woXuHjfz68nYm252H0gkocuOiuOGyKo9sgUVbRA==
2024-12-20 20:41:15 UTC	3522	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 69 6e 64 65 78 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 Data Ascii: /! For license information please see index.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(
2024-12-20 20:41:15 UTC	6465	IN	Data Raw: 73 53 74 61 72 74 65 64 28 29 7c 7c 28 74 68 69 73 2e 5f 6f 6e 53 74 61 72 74 28 29 2c 74 68 69 73 2e 74 72 69 67 67 65 72 4d 69 63 72 6f 74 61 73 6b 28 29 29 2c 74 68 69 73 2e 5f 73 74 61 72 74 65 64 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4d 69 63 72 6f 74 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 62 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6f 6e 46 69 6e 69 73 68 28 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 6e 53 74 61 72 74 46 6e 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 74 68 69 73 2e 5f 6f 6e 53 Data Ascii: sStarted()\|\|(this._onStart(),this.triggerMicrotask()),this._started=!0},e.prototype.triggerMicrotask=function(){var e=this;b((function(){return e._onFinish()}))},e.prototype._onStart=function(){this._onStartFns.forEach((function(e){return e()})),this._onS
2024-12-20 20:41:15 UTC	1796	IN	Data Raw: 70 70 6c 79 28 6f 2c 4f 62 6a 65 63 74 28 72 2e 5f 5f 73 70 72 65 61 64 29 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 29 29 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3b 69 26 26 6f 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 20 6f 7d 7d 76 61 72 20 5f 3d 6e 75 6c 6c 2c 77 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 5f 7c 7c 28 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 7c 7c 7b 7d 2c 77 3d 21 21 5f 2e 73 74 79 6c 65 26 26 22 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 22 69 6e Data Ascii: pply(o,Object(r.__spread)(e.querySelectorAll(t)));else{var i=e.querySelector(t);i&&o.push(i)}return o}}var _=null,w=!1;function C(e){_\|\|(_=function(){if("undefined"!=typeof document)return document.body;return null}()\|\|{},w=!!_.style&&"WebkitAppearance"in
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: 29 2c 63 3d 21 30 29 2c 6f 3c 30 26 26 28 74 2e 70 75 73 68 28 22 44 65 6c 61 79 20 76 61 6c 75 65 73 20 62 65 6c 6f 77 20 30 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 61 6e 69 6d 61 74 69 6f 6e 20 73 74 65 70 2e 22 29 2c 63 3d 21 30 29 2c 63 26 26 74 2e 73 70 6c 69 63 65 28 75 2c 30 2c 27 54 68 65 20 70 72 6f 76 69 64 65 64 20 74 69 6d 69 6e 67 20 76 61 6c 75 65 20 22 27 2b 65 2b 27 22 20 69 73 20 69 6e 76 61 6c 69 64 2e 27 29 7d 72 65 74 75 72 6e 7b 64 75 72 61 74 69 6f 6e 3a 72 2c 64 65 6c 61 79 3a 6f 2c 65 61 73 69 6e 67 3a 69 7d 7d 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: ),c=!0),o<0&&(t.push("Delay values below 0 are not allowed for this animation step."),c=!0),c&&t.splice(u,0,'The provided timing value "'+e+'" is invalid.')}return{duration:r,delay:o,easing:i}}(e,t,n)}function I(e,t){return void 0===t&&(t={}),Object.keys(
2024-12-20 20:41:15 UTC	8192	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 74 2e 71 75 65 72 79 43 6f 75 6e 74 3d 30 2c 6f 3d 74 2e 64 65 70 43 6f 75 6e 74 3d 30 2c 69 3d 5b 5d 2c 61 3d 5b 5d 3b 72 65 74 75 72 6e 22 40 22 3d 3d 65 2e 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 26 26 74 2e 65 72 72 6f 72 73 2e 70 75 73 68 28 22 61 6e 69 6d 61 74 69 6f 6e 20 74 72 69 67 67 65 72 73 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 65 66 69 78 65 64 20 77 69 74 68 20 61 6e 20 60 40 60 20 73 69 67 6e 20 28 65 2e 67 2e 20 74 72 69 67 67 65 72 28 27 40 66 6f 6f 27 2c 20 5b 2e 2e 2e 5d 29 29 22 29 2c 65 2e 64 65 66 69 6e 69 74 69 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 2e 5f 72 65 73 65 74 43 6f 6e 74 65 78 74 53 74 79 6c 65 54 69 6d 69 6e Data Ascii: on(e,t){var n=this,r=t.queryCount=0,o=t.depCount=0,i=[],a=[];return"@"==e.name.charAt(0)&&t.errors.push("animation triggers cannot be prefixed with an `@` sign (e.g. trigger('@foo', [...]))"),e.definitions.forEach((function(e){if(n._resetContextStyleTimin
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 70 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 70 2e 61 6c 6c 6f 77 4f 6e 6c 79 54 69 6d 65 6c 69 6e 65 53 74 79 6c 65 73 28 29 7c 7c 70 2e 73 65 74 53 74 79 6c 65 73 28 5b 61 5d 2c 6e 75 6c 6c 2c 75 2e 65 72 72 6f 72 73 2c 73 29 7d 72 65 74 75 72 6e 20 64 2e 6c 65 6e 67 74 68 3f 64 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 75 69 6c 64 4b 65 79 66 72 61 6d 65 73 28 29 7d 29 29 3a 5b 73 65 28 74 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 30 2c 30 2c 22 22 2c 21 31 29 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 73 69 74 54 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 73 69 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: .length){var p=d[d.length-1];p.allowOnlyTimelineStyles()\|\|p.setStyles([a],null,u.errors,s)}return d.length?d.map((function(e){return e.buildKeyframes()})):[se(t,[],[],[],0,0,"",!1)]},e.prototype.visitTrigger=function(e,t){},e.prototype.visitState=function
2024-12-20 20:41:15 UTC	3198	IN	Data Raw: 64 53 74 79 6c 65 73 28 6c 29 2c 74 2e 63 75 72 72 65 6e 74 54 69 6d 65 6c 69 6e 65 2e 73 6e 61 70 73 68 6f 74 43 75 72 72 65 6e 74 53 74 79 6c 65 73 28 29 29 2c 74 2e 70 72 65 76 69 6f 75 73 4e 6f 64 65 3d 65 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 73 69 74 53 74 61 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 70 61 72 65 6e 74 43 6f 6e 74 65 78 74 2c 72 3d 74 2e 63 75 72 72 65 6e 74 54 69 6d 65 6c 69 6e 65 2c 6f 3d 65 2e 74 69 6d 69 6e 67 73 2c 69 3d 4d 61 74 68 2e 61 62 73 28 6f 2e 64 75 72 61 74 69 6f 6e 29 2c 61 3d 69 2a 28 74 2e 63 75 72 72 65 6e 74 51 75 65 72 79 54 6f 74 61 6c 2d 31 29 2c 73 3d 69 2a 74 2e 63 75 72 72 65 6e 74 51 75 65 72 79 49 6e 64 65 78 3b 73 77 69 74 63 68 28 6f 2e 64 75 72 61 74 69 Data Ascii: dStyles(l),t.currentTimeline.snapshotCurrentStyles()),t.previousNode=e},e.prototype.visitStagger=function(e,t){var n=t.parentContext,r=t.currentTimeline,o=e.timings,i=Math.abs(o.duration),a=i(t.currentQueryTotal-1),s=it.currentQueryIndex;switch(o.durati
2024-12-20 20:41:15 UTC	898	IN	Data Raw: 71 75 65 72 79 28 22 27 2b 74 2b 27 22 2c 20 7b 20 6f 70 74 69 6f 6e 61 6c 3a 20 74 72 75 65 20 7d 29 60 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 61 6c 6c 6f 77 20 74 68 69 73 2e 29 27 29 2c 73 7d 2c 65 7d 28 29 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 2c 72 29 7b 74 68 69 73 2e 5f 64 72 69 76 65 72 3d 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 6e 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 54 69 6d 65 6c 69 6e 65 53 74 79 6c 65 73 4c 6f 6f 6b 75 70 3d 72 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 30 2c 74 68 69 73 2e 5f 70 72 65 76 69 6f 75 73 4b 65 79 66 72 61 6d 65 3d 7b 7d 2c 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 4b 65 79 66 72 61 6d 65 3d Data Ascii: query("'+t+'", { optional: true })` if you wish to allow this.)'),s},e}(),me=function(){function e(e,t,n,r){this._driver=e,this.element=t,this.startTime=n,this._elementTimelineStylesLookup=r,this.duration=0,this._previousKeyframe={},this._currentKeyframe=
2024-12-20 20:41:15 UTC	3198	IN	Data Raw: 6c 65 6e 67 74 68 3e 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 30 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 4b 65 79 66 72 61 6d 65 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 72 72 65 6e 74 54 69 6d 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 2b 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 65 2e Data Ascii: length>0;default:return!0}},e.prototype.getCurrentStyleProperties=function(){return Object.keys(this._currentKeyframe)},Object.defineProperty(e.prototype,"currentTime",{get:function(){return this.startTime+this.duration},enumerable:!0,configurable:!0}),e.
2024-12-20 20:41:15 UTC	898	IN	Data Raw: 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 73 54 6f 4b 65 79 66 72 61 6d 65 28 29 3b 76 61 72 20 74 3d 6e 65 77 20 53 65 74 2c 6e 3d 6e 65 77 20 53 65 74 2c 72 3d 31 3d 3d 3d 74 68 69 73 2e 5f 6b 65 79 66 72 61 6d 65 73 2e 73 69 7a 65 26 26 30 3d 3d 3d 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 69 3d 5b 5d 3b 74 68 69 73 2e 5f 6b 65 79 66 72 61 6d 65 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 2c 73 29 7b 76 61 72 20 6c 3d 4e 28 61 2c 21 30 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6c 5b 65 5d 3b 72 3d 3d 6f 5b 22 c9 b5 50 52 45 5f 53 54 59 4c 45 22 5d 3f 74 2e 61 64 64 Data Ascii: mes=function(){var e=this;this.applyStylesToKeyframe();var t=new Set,n=new Set,r=1===this._keyframes.size&&0===this.duration,i=[];this._keyframes.forEach((function(a,s){var l=N(a,!0);Object.keys(l).forEach((function(e){var r=l[e];r==o["PRE_STYLE"]?t.add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49744	216.239.36.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:14 UTC	602	OUT	GET /gtag/js?id=G-7ZKFB3S0PN HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:15 UTC	269	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 441000 Vary: Accept-Encoding cache-control: private, max-age=900 expires: Fri, 20 Dec 2024 20:55:38 GMT Via: 1.1 google Connection: close
2024-12-20 20:41:15 UTC	1139	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 36 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 30 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6f 67 74 5f 63 72 6f 73 73 5f 64 6f 6d 61 69 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"6", "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}], "tags":[{"function":"__ogt_cross_domai
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 2c 22 76 74 70 5f 6c 61 73 74 4e 61 6d 65 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 70 68 6f 6e 65 54 79 70 65 22 3a 22 43 53 53 5f 53 45 4c 45 43 54 4f 52 22 2c 22 76 74 70 5f 70 68 6f 6e 65 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 73 74 72 65 65 74 54 79 70 65 22 3a 22 43 53 53 5f 53 45 4c 45 43 54 4f 52 22 2c 22 76 74 70 5f 61 75 74 6f 50 68 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 70 6f 73 74 61 6c 43 6f 64 65 54 79 70 65 22 3a 22 43 53 53 5f 53 45 4c 45 43 54 4f 52 22 2c 22 76 74 70 5f 65 6d 61 69 6c 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 66 69 72 73 74 4e 61 6d 65 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 73 74 72 65 65 74 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 6c 61 73 74 4e 61 6d 65 54 79 70 65 22 Data Ascii: ,"vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType"
2024-12-20 20:41:15 UTC	1256	IN	Data Raw: 6e 64 5f 63 6c 69 63 6b 22 2c 22 70 72 69 6f 72 69 74 79 22 3a 32 30 2c 22 76 74 70 5f 69 6e 63 6c 75 64 65 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 74 61 67 5f 69 64 22 3a 31 33 37 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 63 64 5f 65 6d 5f 70 61 67 65 5f 76 69 65 77 22 2c 22 70 72 69 6f 72 69 74 79 22 3a 31 39 2c 22 76 74 70 5f 68 69 73 74 6f 72 79 45 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 63 6c 75 64 65 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 74 61 67 5f 69 64 22 3a Data Ascii: nd_click","priority":20,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","tag_id":137},{"function":"__ccd_em_page_view","priority":19,"vtp_historyEvents":true,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","tag_id":
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 69 6e 5f 61 70 70 5f 70 75 72 63 68 61 73 65 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 70 75 72 63 68 61 73 65 5c 22 7d 2c 7b 5c 22 Data Ascii: entName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"in_app_purchase\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"purchase\"},{\"
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 76 69 65 77 5f 69 74 65 6d 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 76 69 65 77 5f 69 74 65 6d 5f 6c 69 73 74 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a Data Ascii: ],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"view_item\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"view_item_list\"},{\"contextValue\":
2024-12-20 20:41:15 UTC	1280	IN	Data Raw: 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 66 75 6e 6e 65 6c 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 67 65 74 5f 73 70 65 63 69 61 6c 5f 6f 66 66 65 72 5c 22 7d 2c 7b Data Ascii: }]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"registration_funnel\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"get_special_offer\"},{
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 66 6f 72 6d 5f 73 75 62 6d 69 74 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 62 6f 6f 6b 5f 64 65 6d 6f 5f 70 70 63 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 Data Ascii: me\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"form_submit\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"book_demo_ppc\"},{\"cont
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 2c 22 63 6f 6e 73 74 5f 76 61 6c 75 65 22 2c 22 67 65 74 2d 73 74 61 72 74 65 64 2e 6e 69 6d 62 75 73 77 65 62 2e 6d 65 5c 2f 22 5d 5d 2c 22 74 79 70 65 22 2c 22 63 6e 22 5d 5d 5d 5d 5d 2c 22 74 61 67 5f 69 64 22 3a 31 33 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6f 67 74 5f 65 76 65 6e 74 5f 63 72 65 61 74 65 22 2c 22 70 72 69 6f 72 69 74 79 22 3a 31 33 2c 22 76 74 70 5f 65 76 65 6e 74 4e 61 6d 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 66 75 6e 6e 65 6c 22 2c 22 76 74 70 5f 69 73 43 6f 70 79 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 76 74 70 5f 70 72 65 63 6f 6d 70 69 6c 65 64 52 75 6c 65 22 3a 5b 22 6d 61 70 22 2c 22 6e 65 Data Ascii: ,"const_value","get-started.nimbusweb.me\/"]],"type","cn"]]]]],"tag_id":131},{"function":"__ogt_event_create","priority":13,"vtp_eventName":"registration_funnel","vtp_isCopy":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","vtp_precompiledRule":["map","ne
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 22 3a 31 32 2c 22 76 74 70 5f 65 76 65 6e 74 4e 61 6d 65 22 3a 22 72 65 67 5f 63 61 70 74 75 72 65 5f 62 32 62 22 2c 22 76 74 70 5f 69 73 43 6f 70 79 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 76 74 70 5f 70 72 65 63 6f 6d 70 69 6c 65 64 52 75 6c 65 22 3a 5b 22 6d 61 70 22 2c 22 6e 65 77 5f 65 76 65 6e 74 5f 6e 61 6d 65 22 2c 22 72 65 67 5f 63 61 70 74 75 72 65 5f 62 32 62 22 2c 22 6d 65 72 67 65 5f 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 70 61 72 61 6d 73 22 2c 74 72 75 65 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 5f 70 72 65 64 69 63 61 74 65 22 2c 5b 22 6d 61 70 22 2c 22 76 61 6c 75 65 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 74 79 70 Data Ascii: ":12,"vtp_eventName":"reg_capture_b2b","vtp_isCopy":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","vtp_precompiledRule":["map","new_event_name","reg_capture_b2b","merge_source_event_params",true,"event_name_predicate",["map","values",["list",["map","typ
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 22 2c 22 76 61 6c 75 65 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 65 76 65 6e 74 5f 70 61 72 61 6d 22 2c 22 65 76 65 6e 74 5f 70 61 72 61 6d 22 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 5f 6e 61 6d 65 22 2c 22 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 22 5d 5d 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 63 6f 6e 73 74 22 2c 22 63 6f 6e 73 74 5f 76 61 6c 75 65 22 2c 22 4e 6f 74 65 42 32 43 44 6f 6e 65 22 5d 5d 2c 22 74 79 70 65 22 2c 22 65 71 69 22 5d 2c 5b 22 6d 61 70 22 2c 22 76 61 6c 75 65 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 65 76 65 6e 74 5f 70 61 72 61 6d 22 2c 22 65 76 65 6e 74 5f 70 61 72 61 6d 22 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 5f 6e 61 6d 65 22 2c 22 70 61 Data Ascii: ","values",["list",["map","type","event_param","event_param",["map","param_name","event_category"]],["map","type","const","const_value","NoteB2CDone"]],"type","eqi"],["map","values",["list",["map","type","event_param","event_param",["map","param_name","pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49745	216.239.36.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:14 UTC	605	OUT	GET /gtlytics.js?id=GTM-WHFRJTP HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:15 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:15 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Vary: Accept-Encoding access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control vary: Accept-Encoding cache-control: private, max-age=900 last-modified: Fri, 20 Dec 2024 18:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0 cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0"}],} server: Google Tag Manager x-xss-protection: 0 accept-ranges: none Via: 1.1 google Connection: close
2024-12-20 20:41:15 UTC	416	IN	Data Raw: 31 31 63 30 64 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 67 29 7b 77 5b 67 5d 3d 77 5b 67 5d 7c 7c 7b 7d 3b 0a 20 77 5b 67 5d 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 73 29 3b 7d 3b 7d 29 28 77 69 6e 64 6f 77 2c 27 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 27 29 3b 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 37 36 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f Data Ascii: 11c0d// Copyright 2012 Google Inc. All rights reserved. (function(w,g){w[g]=w[g]\|\|{}; w[g].e=function(s){return eval(s);};})(window,'google_tag_manager'); (function(){var data = {"resource": { "version":"1076", "macros":[{"function":"__
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 50 61 72 61 6d 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 74 6d 2e 74 72 69 67 67 65 72 73 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 74 70 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 74 6d 2e 76 69 64 65 6f 54 69 74 6c 65 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 Data Ascii: Param":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.videoTitle","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"g
2024-12-20 20:41:15 UTC	1256	IN	Data Raw: 74 70 5f 6e 61 6d 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 70 61 69 64 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6a 73 6d 22 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 39 5d 2c 38 2c 31 36 5d 2c 22 2c 62 3d 38 36 34 45 35 2c 65 3d 33 30 2c 63 3d 31 30 3b 61 3d 6e 65 77 20 44 61 74 65 28 61 29 3b 61 3d 61 2e 67 65 74 54 69 6d 65 28 29 Data Ascii: tp_name":"product"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"paid"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=",["escape",["macro",9],8,16],",b=864E5,e=30,c=10;a=new Date(a);a=a.getTime()
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 65 76 65 6e 74 4d 6f 64 65 6c 2e 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 50 41 54 48 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4d 75 6c 74 69 51 75 65 72 79 4b 65 79 73 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 49 67 6e 6f 72 65 45 6d 70 74 79 51 75 65 72 79 50 61 72 61 6d 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c Data Ascii: Version":2,"vtp_setDefaultValue":false,"vtp_name":"eventModel.event_category"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultVal
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 6d 65 22 3a 22 67 74 6d 2e 65 6c 65 6d 65 6e 74 55 72 6c 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 74 6d 2e 65 6c 65 6d 65 6e 74 43 6c 61 73 73 65 73 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6a 73 6d 22 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 39 5d 2c 38 2c 31 36 5d 2c 22 2c 62 3d 38 36 34 45 35 2c 65 3d 35 2c 63 3d 30 3b 61 3d 6e 65 77 20 44 61 74 65 28 61 29 3b 61 3d Data Ascii: me":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__jsm","vtp_javascript":["template","(function(){var a=",["escape",["macro",9],8,16],",b=864E5,e=5,c=0;a=new Date(a);a=
2024-12-20 20:41:15 UTC	1280	IN	Data Raw: 74 54 69 6d 65 28 29 5c 75 30 30 32 36 5c 75 30 30 32 36 61 5c 75 30 30 33 43 3d 63 2e 67 65 74 54 69 6d 65 28 29 7d 29 28 29 3b 22 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 63 72 65 61 74 65 64 54 61 73 6b 73 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 75 73 65 72 50 6f 72 74 61 6c 73 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 Data Ascii: tTime()\u0026\u0026a\u003C=c.getTime()})();"]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"createdTasks"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userPortals"},{"function":"
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 65 6d 61 69 6c 53 74 61 74 75 73 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 72 65 67 66 73 6f 75 72 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 73 75 72 76 65 79 5f 70 6c 61 6e 6e 69 6e 67 54 6f 44 6f 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 Data Ascii: lse,"vtp_name":"emailStatus"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"regfsour"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"survey_planningToDo"},{"function":"__v","vtp_dat
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 64 61 74 65 45 6e 64 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 64 75 6e 6e 69 6e 67 2e 63 61 72 64 4c 61 73 74 34 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 63 61 72 64 45 78 Data Ascii: erVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dateEnd"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dunning.cardLast4"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"cardEx
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 75 49 44 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 6e 65 77 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a Data Ascii: ction":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"uID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"new"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":
2024-12-20 20:41:15 UTC	1408	IN	Data Raw: 61 6d 65 22 3a 22 64 75 6e 6e 69 6e 67 2e 63 61 72 64 45 78 70 44 61 74 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 75 73 65 72 70 69 6c 6f 74 5f 65 78 70 65 72 69 65 6e 63 65 5f 66 6f 72 6d 2e 5f 75 73 65 72 70 69 6c 6f 74 46 6f 72 6d 5f 4f 74 68 65 72 5f 73 74 6f 70 70 69 6e 67 5f 72 65 61 73 6f 6e 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d Data Ascii: ame":"dunning.cardExpDate"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userpilot_experience_form._userpilotForm_Other_stopping_reason"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49740	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:14 UTC	752	OUT	GET /share/dist/f/80df5da08b99c807a5c6f7ae308e1f89.woff HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://premiumgain.nimbusweb.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://premiumgain.nimbusweb.me/share/dist/index.css?v=9.26.11-73fecd7b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day
2024-12-20 20:41:15 UTC	711	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 94040 Connection: close Date: Fri, 20 Dec 2024 20:41:15 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"16f58-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 0d8fb9ea76ca48d1884fa97507d30086.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: AbxgD7aPZscgC3eq9e7D3oS8MOamt5E2wAXNJGzYZhBgPFd7l-TWbw==
2024-12-20 20:41:15 UTC	3577	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 6f 58 00 12 00 00 00 02 be 64 00 02 00 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 01 6f 3c 00 00 00 1c 00 00 00 1c 73 f3 0c 1f 47 44 45 46 00 01 2d 2c 00 00 00 68 00 00 00 7e 25 80 1f c7 47 50 4f 53 00 01 39 7c 00 00 35 bd 00 00 65 a4 66 ac 6c 6d 47 53 55 42 00 01 2d 94 00 00 0b e5 00 00 16 4c 63 e7 ec 2e 4f 53 2f 32 00 00 02 10 00 00 00 52 00 00 00 60 98 ae b1 9e 63 6d 61 70 00 00 0d 58 00 00 03 48 00 00 04 ae 33 96 c1 06 63 76 74 20 00 00 12 b4 00 00 00 48 00 00 00 48 2b 7e 04 b5 66 70 67 6d 00 00 10 a0 00 00 01 3a 00 00 01 bc 5f f2 1a ab 67 61 73 70 00 01 2d 20 00 00 00 0c 00 00 00 0c 00 08 00 13 67 6c 79 66 00 00 1c f4 00 00 f7 71 00 01 e2 a4 9a 0b f9 c8 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFoXdFFTMo<sGDEF-,h~%GPOS9\|5eflmGSUB-Lc.OS/2R`cmapXH3cvt HH+~fpgm:_gasp- glyfqhead
2024-12-20 20:41:15 UTC	8261	IN	Data Raw: 06 48 8a 64 cb 1e d9 2b 47 e5 6b b9 20 df 86 76 27 a4 db ca 9e 69 ef b2 ff 18 59 a6 93 75 aa ce d0 b6 76 f4 68 3d 51 4f d6 d3 74 81 8e e8 7a bd 4d b7 e8 93 ba 5d 9f d5 e7 c2 09 e1 f4 70 66 d8 09 e7 86 c7 87 ab 1c cb 49 74 52 9c 34 67 98 63 3b e3 9c 79 4e b5 b3 2a e7 ab 9f ac df cf ff 15 f2 83 20 1e 04 d0 e7 d3 34 f5 f8 9a 54 9b f1 fd 69 65 f5 f9 3e 37 be ef 8c 8f 6b be 9d c6 b7 4f 9a e5 1b e3 23 d4 60 63 17 da db ed 26 e3 43 0f d6 e9 7a 88 d6 3a c7 f8 26 e9 fc 6b be 66 7d c2 f8 ce e8 ae eb 7c d1 3e 5f ea bf 7c 2b 8d 4f 19 9f 32 be 2b c6 a7 50 c1 6f 41 77 70 3e e8 0c 3a 82 e3 c1 91 a0 22 28 0f f2 82 11 fe 15 ff 65 ff a0 7f c0 df e1 d7 fa 2b fc 6a 3f ea 2f f2 8b e3 5e dc 8d c7 e2 97 e3 3f c4 bf 8f 77 c4 db bb 3f eb 6e ec 2e e9 9e e0 5d f4 c6 7a b9 5e 8e 37 Data Ascii: Hd+Gk v'iYuvh=QOtzM]pfItR4gc;yN* 4Tie>7kO#`c&Cz:&kf}\|>_\|+O2+PoAwp>:"(e+j?/^?w?n.]z^7
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: 28 9c 7b 3f c7 09 61 66 c5 66 a4 30 0f b1 e9 26 fc fd f1 d7 f0 77 db 60 2b 44 c3 24 88 de 8a ab f6 6e da b8 17 f6 6e d9 b8 1b b8 e3 57 f1 5b f6 c3 d0 f1 52 fe 55 e8 72 e4 08 7e e3 33 f8 fe de 4f df 76 a9 7e f8 f3 b7 48 e1 1f 5f b3 bd 6c 42 3d a5 40 33 b3 1c 07 52 bf 84 0f 9f 94 4b f5 93 82 78 c6 e3 83 b4 32 35 af a1 53 04 74 3a 65 e9 8c 3f 5b 93 18 7b 4e 4e 21 28 85 af 70 2d f6 fe bd 04 7f 89 1d f8 6f 08 aa 78 62 fe 54 fc 33 07 0e a7 68 9f fd f5 ca cf fe fc 7d da b8 89 8b 38 02 5b 3f 5c 2b 52 dd c8 44 e4 e6 7c c9 4f 96 9b 89 58 18 ab c0 a6 71 29 a9 08 66 30 78 9a 9f a8 00 1a eb 35 9f 7a 8b 3e 49 f7 6f 73 9a b6 68 e6 6f a7 f0 85 ac dc 7f 99 d7 ff e0 cb 25 6f bf f4 b7 ff 7f 99 db 5f d9 5e b1 a0 91 92 18 59 8f c2 2f 52 89 f7 bf 09 76 c1 e4 22 98 d9 fa 65 c1 Data Ascii: ({?aff0&w`+D$nnW[RUr~3Ov~H_lB=@3RKx25St:e?[{NN!(p-oxbT3h}8[?\+RD\|OXq)f0x5z>Iosho%o_^Y/Rv"e
2024-12-20 20:41:15 UTC	8192	IN	Data Raw: 9c 39 f3 c3 59 15 1f cc 98 f1 01 93 15 c8 ba b4 25 fb 3c 02 95 49 88 69 9c 3e cc ee 6e 45 2e 90 c5 6b eb 41 d6 75 5c 01 83 a2 47 e4 19 21 79 fe 1e 97 44 25 d6 b3 f8 1f 91 61 1f d9 79 e1 2c 54 9a ed 3c 82 fb 19 66 ab 99 b9 d0 a9 bb 88 fc cb 20 64 39 f9 06 e4 e2 b7 bf c0 37 20 0e df c0 57 f0 47 90 8e 3f 7a 80 4f 42 4b 7e 1e 97 e9 c8 3e 32 fd 30 be 03 11 87 a7 1f e1 2e c8 7b f0 37 58 c4 68 95 9e d0 4b 17 b5 72 39 ab a8 bb 24 95 ec 34 a3 b5 1e 75 4b 3d 09 02 ae 25 7f bf f1 d1 b5 df f3 e7 b9 87 f2 3e 1e 8c 5b 09 db c4 b3 a8 09 ca 45 4b a4 98 bc 96 b2 ff cd 9e 5b c5 02 23 55 4f 1e ed 30 53 cf 5c 78 99 1a 61 5f e2 c2 33 15 92 1f e2 e9 82 0c a7 14 41 6a 1a c3 d4 ac a6 86 ca c6 1e 5f d6 6b da b8 ae 9b 4f 8a 6f 9c 24 93 72 93 9e b9 f5 e2 12 b3 92 5c 5a 4f 22 8d bc Data Ascii: 9Y%<Ii>nE.kAu\G!yD%ay,T<f d97 WG?zOBK~>20.{7XhKr9$4uK=%>[EK[#UO0S\xa_3Aj_kOo$r\ZO"
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: f5 d4 85 bf 7e e1 ef 78 b7 4e e9 72 b9 7e 96 98 23 6c 26 78 35 41 d2 2b fe 8f 3a 8e 77 4d a1 2f 9f c7 4b 48 e6 70 86 69 66 5b 25 ef 91 61 ae 93 ef fa 69 14 52 f9 f4 37 d9 bd ee c1 04 cd 64 51 c4 9c d5 9b f1 af 7e 9e 0c b0 13 81 ee d8 11 43 ed 57 9e 95 b6 56 84 0e 79 42 b6 75 2f 27 fb 7c 1b b5 df 2b b6 ee 41 ce 4c 1f b6 6e 77 0c 9c 1c 3f f5 91 2b 7e 8a bf 05 c5 10 8c c2 90 64 0b 86 52 c9 16 49 5f 62 68 cd 67 35 6e 7b b3 2b 6e 9b bf 85 2e 3a af a1 b6 48 42 69 50 26 35 4b 23 6d a7 d1 97 5e ec 53 0e 79 41 39 e4 8b 5e f4 53 33 76 d9 9a b6 6b 4d bf a5 2f bd 5a d3 8e 55 de aa 2f d0 77 20 7d 2f 97 f9 16 77 0c 3a d4 d1 4f cc 9e 76 1d dd 4a c6 27 5e 52 da d3 d3 4e e4 e8 b0 b6 0a 4f 65 39 24 fa 27 49 9b ad 0a 2f fc 12 9e 74 f5 a9 da f5 d2 3c fa 2c 17 3a 8a b5 a4 fd Data Ascii: ~xNr~#l&x5A+:wM/KHpif[%aiR7dQ~CWVyBu/'\|+ALnw?+~dRI_bhg5n{+n.:HBiP&5K#m^SyA9^S3vkM/ZU/w }/w:OvJ'^RNOe9$'I/t<,:
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: 37 81 26 b7 ab 9e c1 eb 18 66 f5 24 05 bd 5c 8a de 22 d3 ec 4c b2 2d 52 e8 61 d5 5c c6 87 bf e2 5f 4b 7a 8d 9a 0c e5 10 3e 25 97 5b 5e bc 71 08 37 e1 e7 6b fc 9c 6f 85 1e b7 ce 0c 18 bb 6d 6b ec bc a5 dd 5b 0f ee d2 f3 fd b6 e5 23 1e cb 8f 6c f3 e0 c3 46 bb 6a 96 b9 f3 8e e7 13 3c a0 f3 db 43 89 32 a7 c9 96 61 9e be 74 0d a9 a6 28 10 ac 45 01 9d 96 06 22 83 7c 36 5b 42 84 2c 1e b0 d3 3f ad e0 e1 57 16 e6 e3 23 f8 b7 1b 3f 10 1e 18 7e 8f 6b 59 fb fd f4 89 23 26 4e 1a 39 6e 06 df 6b d5 e7 df e1 db d0 18 84 e0 5f 20 d1 71 6d db ee dd 95 ab b6 6e 62 73 9a e6 bc cb 3b 08 ac 46 54 28 05 7a 9c cb a6 39 4d 52 c5 59 c3 7f 43 53 82 a3 a1 f2 79 da 26 97 0c 4c 5d b0 59 56 de 81 b7 35 6e 6e cb 88 e9 3f 66 c3 cb 80 8f f2 9f f0 7d 1c 0f 5b 66 1b bf 8a 7b 49 e2 02 7f a0 Data Ascii: 7&f$\"L-Ra\_Kz>%[^q7komk[#lFj<C2at(E"\|6[B,?W#?~kY#&N9nk_ qmnbs;FT(z9MRYCSy&L]YV5nn?f}[f{I
2024-12-20 20:41:15 UTC	3198	IN	Data Raw: 61 73 56 54 0f f5 f7 81 29 aa 49 30 06 bf 32 83 b8 f3 67 bc 82 57 ba b7 30 e0 26 83 1e 4a 36 00 53 40 55 96 4a f4 d0 64 33 9a d2 bb 81 e4 27 16 db 80 f3 9d 53 f1 2f a0 40 97 3f 90 ff ed 81 df 1d 86 de 85 fb 9c 3f 42 7d 7c 18 95 47 bd 67 e0 9f 5c 2a d6 2e db c3 8d 19 2d 25 12 b0 e9 33 d2 f7 08 b2 f2 1e c2 1e ae 27 38 3e 3d 5d ff ab fe f9 3f 68 9d 22 55 35 6d 4c eb b4 d1 b7 d2 b4 99 38 7f fa cf f8 7d 68 8f f7 41 ff 3f 06 83 7d e8 55 a2 61 e7 40 47 bc 11 96 e3 11 f4 81 b2 90 84 87 c2 4a f6 10 9d 27 54 db ad 78 89 c5 d2 cd 52 44 5d 2c 1d 9b 7f f7 40 34 fb 7b 80 51 e7 34 b1 f2 e3 4a 4a 44 00 db d1 29 64 47 d7 4e 69 95 42 76 74 6e ca ef f4 65 64 ca b4 14 34 2a 27 49 b7 99 2d 49 34 d0 5c 89 89 e0 c2 b9 37 d8 89 5b 0b 55 73 7f b4 12 c1 46 15 14 ed 68 5a bf 61 27 Data Ascii: asVT)I02gW0&J6S@UJd3'S/@??B}\|Gg\.-%3'8>=]?h"U5mL8}hA?}Ua@GJ'TxRD],@4{Q4JJD)dGNiBvtned4'I-I4\7[UsFhZa'
2024-12-20 20:41:15 UTC	898	IN	Data Raw: a9 2b d0 68 b1 e6 cb 56 ee 99 e7 b3 5f 78 02 8e d2 b1 4d 21 b2 5f 53 32 f7 36 22 05 4d d3 8d cd 67 da db ff 3a 36 c1 12 a6 12 0d c8 d5 c3 5c 50 02 6f ce e5 61 eb 8e 88 5c 25 2a 4c 1d 5e 86 4d 3f 3c be f7 e9 62 c1 e6 c2 fb 50 12 d6 e1 5f 7a b0 55 bb d8 ff 13 b6 df 23 d8 9a 9d 41 a3 c9 6a a9 2b c7 57 cf b9 54 5d 3b 22 fb 9b 16 92 b5 8b 21 52 c1 64 25 36 5e ad 4c aa d9 00 98 1e e8 73 ed 0c 69 f5 6e c8 7d 25 2a 9a 2d 57 14 5b ae 28 a3 4c cf a2 76 95 58 7e 47 b4 77 86 48 02 50 53 70 79 60 47 9a 95 f7 b1 5b b3 4a a4 90 05 b5 d9 a5 8d cf 1f ca 64 bd 06 4d ea 82 f3 86 cc 18 06 e4 3d f9 17 82 17 c9 01 ce b7 3e c7 f3 c4 44 bf df 7e c6 1b a1 c3 a8 5e c8 79 01 95 e9 33 0a ef 82 f6 7f 5e 43 68 99 f3 3d 18 2a b8 e5 78 99 62 12 44 13 fe 3b 4e 89 e1 72 7c 0c f7 fd 46 a6 Data Ascii: +hV_xM!_S26"Mg:6\Poa\%L^M?<bP_zU#Aj+WT];"!Rd%6^Lsin}%-W[(LvX~GwHPSpy`G[JdM=>D~^y3^Ch=*xbD;Nr\|F
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: 71 2c 94 c1 9c ec 99 bc ea 40 45 68 1a cf 50 c9 33 77 4d ce 63 08 bd ff cc f1 db 3f 3f d4 9c 3c bd f5 bc cd 68 e7 d6 cc 5e 6f 3d 58 bb f1 e8 98 15 cf f0 8f 07 f0 0f ff a0 a7 a3 cf a3 f5 8b 77 35 ad fb e1 aa 8f 10 ea da a7 ea 96 b2 c7 27 bc bd b0 5e d5 d9 fb 45 91 cd 57 6c 00 d1 8f 55 6c bb 30 13 cc e3 b1 59 3c bf 9c 7c de c9 fc 92 9d 89 1c 5a 49 fe 8a 48 37 51 e4 8c ce 56 a2 39 ca 77 34 cb fc 88 f6 d8 64 0d aa a9 9b 38 eb 35 37 25 2e c8 5d 75 7c 68 dc e4 38 32 09 df c5 91 6d 18 14 57 2c 0e 8d 52 36 90 f7 ca d0 38 18 b5 bf 6c 5c 8d 38 34 3a 27 42 c7 71 83 bc 2d 4a de d8 9a 40 65 ce 04 b0 d1 d0 c2 f2 20 57 2a 82 aa e9 7c 77 c9 96 00 e7 82 c0 f7 17 2f d9 12 88 c6 05 be ef 55 58 81 86 d5 39 ef e4 7d f3 4d 9e 78 e7 dc e9 d3 e7 04 36 76 5a 57 a1 0e c3 25 8a 14 Data Ascii: q,@EhP3wMc??<h^o=Xw5'^EWlUl0Y<\|ZIH7QV9w4d857%.]u\|h82mW,R68l\84:'Bq-J@e W*\|w/UX9}Mx6vZW%
2024-12-20 20:41:15 UTC	4096	IN	Data Raw: 24 4f 49 64 25 05 c5 aa ce a9 32 da fc d0 12 46 64 3a 22 42 80 da eb a3 52 5f 63 36 1a ea 65 62 73 e3 9e 1a 53 84 f4 e8 f4 aa b7 96 bc c4 5f 8e 38 31 a9 5a dd 45 a3 7b 1e 5d bd f1 f4 dc 46 ed b0 b9 cb c0 2a a5 4a 57 89 cd ac 00 55 9e 75 9e fb db f8 87 7e 93 fb f6 9d f3 a1 34 fd c0 ba fd 77 71 c1 b9 c5 67 16 86 c0 a4 f9 bd 5a af 5a de 75 44 df 0e cc 77 58 92 61 ae a5 52 c4 09 26 7b 9d 70 2d 66 be c3 92 34 8f 9a 5c 6f a8 5e af cd ae 97 24 34 52 ab 21 4e af a3 96 1c 7f 13 af a7 b9 cd 44 86 7b a2 de ff bc 68 0d 40 26 33 b2 ba 54 61 26 58 c1 68 ab fa 77 1a 89 a9 04 84 5a 8c 79 76 3e e3 98 34 1d c1 c4 e5 07 53 7a 8e ac e3 bd 42 ae 12 a0 fe 81 72 6d 0f e3 55 41 13 c5 2b 67 f1 b9 23 fd f1 44 68 0c e5 20 1d 1a e1 89 6f 22 e4 c4 08 1d 44 ff 38 47 a2 65 4e 7f 7d fd Data Ascii: $OId%2Fd:"BR_c6ebsS_81ZE{]F*JWUu~4wqgZZuDwXaR&{p-f4\o^$4R!ND{h@&3Ta&XhwZyv>4SzBrmUA+g#Dh o"D8GeN}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49741	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:14 UTC	713	OUT	GET /share/share-api/profile/me HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day
2024-12-20 20:41:15 UTC	519	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close Date: Fri, 20 Dec 2024 20:41:15 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"4-K+iMpCQsduglOsYkdIUQZQMtaDM" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 5107abe805c079f90ed2ab4c60ef887a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: DeJqP7Mh5xe9Okid_DsbIpa3v354hfLkSJMzAZ8XeFeSVbmxk1dT8w==
2024-12-20 20:41:15 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49742	108.158.75.7	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:15 UTC	656	OUT	POST /timing/share_page_load HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive Content-Length: 10 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:15 UTC	10	OUT	Data Raw: 74 69 6d 65 3d 32 37 30 34 37 Data Ascii: time=27047
2024-12-20 20:41:16 UTC	699	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Fri, 20 Dec 2024 20:41:16 GMT Access-Control-Max-Age: 1728000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Miss from cloudfront Via: 1.1 7fe845e495399d62eea17599202da57e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 0ltCW9eIeFwUypXJdDEcm9bXU7Bo2r3IKRyWyajOZds0bzNlc3cT1g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49743	108.158.75.7	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:15 UTC	662	OUT	POST /timing/share_page_note_title HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive Content-Length: 10 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:15 UTC	10	OUT	Data Raw: 74 69 6d 65 3d 32 37 31 30 37 Data Ascii: time=27107
2024-12-20 20:41:16 UTC	699	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Fri, 20 Dec 2024 20:41:16 GMT Access-Control-Max-Age: 1728000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Miss from cloudfront Via: 1.1 a5809b918549dd11b14905c2a6010052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: ovcsCM1TVi7O0S0vYVR265aMI6F6EfkuJvA8ANGBSsW3_bTGRVfYjw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49746	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:16 UTC	706	OUT	GET /share/share-api/org HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day
2024-12-20 20:41:16 UTC	523	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 668 Connection: close Date: Fri, 20 Dec 2024 20:41:16 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"29c-SpGnjiea67+ujiDErg7rBfsby0I" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 11db54d41dc7b64f760df4a169363db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: Rwf_iCkL0YRyWgCQKhzmQIyZnjvSDjKtG9T1EDS6fqticouiknI-1w==
2024-12-20 20:41:16 UTC	668	IN	Data Raw: 7b 22 67 6c 6f 62 61 6c 49 64 22 3a 22 75 32 33 7a 78 70 22 2c 22 75 73 65 72 49 64 22 3a 33 35 34 35 37 37 33 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 32 39 37 30 30 33 39 38 2c 22 75 70 64 61 74 65 64 41 74 22 3a 31 37 32 39 37 30 30 38 32 35 2c 22 74 69 74 6c 65 22 3a 22 50 72 65 6d 69 75 6d 67 61 69 6e 22 2c 22 73 75 62 22 3a 22 70 72 65 6d 69 75 6d 67 61 69 6e 22 2c 22 73 75 73 70 65 6e 64 65 64 22 3a 66 61 6c 73 65 2c 22 73 75 73 70 65 6e 64 65 64 52 65 61 73 6f 6e 22 3a 22 69 6e 69 74 69 61 6c 22 2c 22 73 75 73 70 65 6e 64 65 64 41 74 22 3a 6e 75 6c 6c 2c 22 64 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 64 6f 6d 61 69 6e 53 68 6f 72 74 65 72 22 3a 74 72 75 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 65 6f 70 6c 65 54 6f 43 Data Ascii: {"globalId":"u23zxp","userId":3545773,"createdAt":1729700398,"updatedAt":1729700825,"title":"Premiumgain","sub":"premiumgain","suspended":false,"suspendedReason":"initial","suspendedAt":null,"domain":null,"domainShorter":true,"description":null,"peopleToC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49747	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:16 UTC	882	OUT	GET /gwapi2/ft%3Atasks/shares/11450334?securityKey=ots3f4w6xehf2feb09wy&nodeId=1Hy4Ofi612giTUWL HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / everhelper-session-id: 0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg x-session-id: 0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day
2024-12-20 20:41:16 UTC	501	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 2388 Connection: close Date: Fri, 20 Dec 2024 20:41:16 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"954-pEBay8AUu3k8DYKPNvWGp3iJcp8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 876d78271929a83070970f4d8906b684.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: F68Ws85-oZEZpBz2jzl45wS5lOiDdP-WPK-fjb_i-2TjgBlmQH3kcA==
2024-12-20 20:41:16 UTC	2388	IN	Data Raw: 7b 22 74 61 73 6b 4c 69 73 74 73 22 3a 5b 5d 2c 22 6e 6f 74 65 73 22 3a 5b 7b 22 67 6c 6f 62 61 6c 49 64 22 3a 22 31 48 79 34 4f 66 69 36 31 32 67 69 54 55 57 4c 22 2c 22 70 61 72 65 6e 74 49 64 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 33 34 37 32 30 34 35 36 2c 22 64 61 74 65 41 64 64 65 64 22 3a 31 37 33 34 37 32 30 34 35 36 2c 22 64 61 74 65 55 70 64 61 74 65 64 22 3a 31 37 33 34 37 32 30 35 35 33 2c 22 75 70 64 61 74 65 64 41 74 22 3a 31 37 33 34 37 32 30 35 35 33 2c 22 74 79 70 65 22 3a 22 6e 6f 74 65 22 2c 22 72 6f 6c 65 22 3a 22 6e 6f 74 65 22 2c 22 74 69 74 6c 65 22 3a 22 42 49 41 22 2c 22 75 72 6c 22 3a 22 22 2c 22 6c 6f 63 61 74 69 6f 6e 4c 61 74 22 3a 30 2c 22 6c 6f 63 61 74 69 6f 6e 4c 6e 67 22 3a 30 2c 22 Data Ascii: {"taskLists":[],"notes":[{"globalId":"1Hy4Ofi612giTUWL","parentId":"default","createdAt":1734720456,"dateAdded":1734720456,"dateUpdated":1734720553,"updatedAt":1734720553,"type":"note","role":"note","title":"BIA","url":"","locationLat":0,"locationLng":0,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49750	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:16 UTC	809	OUT	POST /share/share-api/mentionDiff HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive Content-Length: 61 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day
2024-12-20 20:41:16 UTC	61	OUT	Data Raw: 7b 0a 20 20 22 63 61 63 68 65 22 3a 20 7b 7d 2c 0a 20 20 22 63 75 72 72 65 6e 74 57 6f 72 6b 73 70 61 63 65 49 64 22 3a 20 22 33 6a 79 74 64 62 6d 74 66 66 38 68 68 34 38 7a 22 0a 7d Data Ascii: { "cache": {}, "currentWorkspaceId": "3jytdbmtff8hh48z"}
2024-12-20 20:41:16 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 11 Connection: close Date: Fri, 20 Dec 2024 20:41:16 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"b-x3+bTRsZME4WCWskj1sT1IlSQKg" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 e210e35eb3b86a214f96a9c0bbf8557e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: ipQfVQljgcNBDUH71snnTjgaXmWHydFSpQWgRfUiNHlJ1be8ccppIQ==
2024-12-20 20:41:16 UTC	11	IN	Data Raw: 7b 22 64 69 66 66 22 3a 7b 7d 7d Data Ascii: {"diff":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49748	108.158.75.7	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:16 UTC	662	OUT	POST /timing/share_init_editor_dump HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive Content-Length: 8 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:16 UTC	8	OUT	Data Raw: 74 69 6d 65 3d 32 32 39 Data Ascii: time=229
2024-12-20 20:41:17 UTC	699	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Fri, 20 Dec 2024 20:41:17 GMT Access-Control-Max-Age: 1728000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Miss from cloudfront Via: 1.1 eb2f49b78dae5a2d3df4afb2aa3e99b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 7LTV4KEnmpCou2jO7jCzmGsaDD7_XWssqKMSpGNP1zciOHLJrbS9lA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49749	108.158.75.7	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:16 UTC	664	OUT	POST /timing/share_page_load_content HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive Content-Length: 10 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:16 UTC	10	OUT	Data Raw: 74 69 6d 65 3d 32 38 34 35 32 Data Ascii: time=28452
2024-12-20 20:41:17 UTC	699	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Fri, 20 Dec 2024 20:41:16 GMT Access-Control-Max-Age: 1728000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Miss from cloudfront Via: 1.1 a5809b918549dd11b14905c2a6010052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: u0l5ytWbkWlruzEpSdPhUqXlYgHoxxbKAr-8mu3gtIuAMvHUDhUuAA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49751	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:17 UTC	467	OUT	GET /share/share-api/profile/me HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day
2024-12-20 20:41:17 UTC	519	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close Date: Fri, 20 Dec 2024 20:41:17 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"4-K+iMpCQsduglOsYkdIUQZQMtaDM" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 3e74b0c89b562282a810c16f34372bd4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: MN8Y4L3h3DCa4Y824fCkV1XhvU7TOUPe9svA0JzhGEdrCTVLV3ng5g==
2024-12-20 20:41:17 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49752	216.239.36.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:17 UTC	1372	OUT	POST /g/collect?v=2&tid=G-7ZKFB3S0PN&gtm=45he4cc1v888117676za204&_p=1734727272303&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=668868513.1734727275&ul=en-us&sr=1280x1024&_fplc=0&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1734727275&sct=1&seg=0&dl=https%3A%2F%2Fpremiumgain.nimbusweb.me%2Fshare%2F11450334%2Fots3f4w6xehf2feb09wy&dt=BIA%20-%20FuseBase&en=page_view&_fv=2&_nsi=1&_ss=2&_ee=1&ep.link_attribution=true&tfd=35607 HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; _ga=GA1.1.668868513.1734727275
2024-12-20 20:41:18 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:18 GMT Content-Length: 0 set-cookie: FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; Max-Age=63072000; Domain=nimbusweb.me; Path=/; Secure; HttpOnly set-cookie: FPLC=CzKSzqQy8hthiKGfX9kh3Qm5jvKQyLXPpwczJkBvHZL2IFiLPCE07SxKv0skLHRPm5xVIxl2NKa0EHNob3he14gREELtxCoW8qKtG26xpkrCkFsf%2F%2FrtHBtr0LAUmg%3D%3D; Max-Age=72000; Domain=nimbusweb.me; Path=/; Secure Via: 1.1 google Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49755	216.239.34.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:17 UTC	419	OUT	GET /gtag/js?id=G-7ZKFB3S0PN HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:18 UTC	269	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 441000 Vary: Accept-Encoding cache-control: private, max-age=900 expires: Fri, 20 Dec 2024 20:55:38 GMT Via: 1.1 google Connection: close
2024-12-20 20:41:18 UTC	1139	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 36 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 30 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6f 67 74 5f 63 72 6f 73 73 5f 64 6f 6d 61 69 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"6", "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}], "tags":[{"function":"__ogt_cross_domai
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 2c 22 76 74 70 5f 6c 61 73 74 4e 61 6d 65 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 70 68 6f 6e 65 54 79 70 65 22 3a 22 43 53 53 5f 53 45 4c 45 43 54 4f 52 22 2c 22 76 74 70 5f 70 68 6f 6e 65 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 73 74 72 65 65 74 54 79 70 65 22 3a 22 43 53 53 5f 53 45 4c 45 43 54 4f 52 22 2c 22 76 74 70 5f 61 75 74 6f 50 68 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 70 6f 73 74 61 6c 43 6f 64 65 54 79 70 65 22 3a 22 43 53 53 5f 53 45 4c 45 43 54 4f 52 22 2c 22 76 74 70 5f 65 6d 61 69 6c 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 66 69 72 73 74 4e 61 6d 65 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 73 74 72 65 65 74 56 61 6c 75 65 22 3a 22 22 2c 22 76 74 70 5f 6c 61 73 74 4e 61 6d 65 54 79 70 65 22 Data Ascii: ,"vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType"
2024-12-20 20:41:18 UTC	1256	IN	Data Raw: 6e 64 5f 63 6c 69 63 6b 22 2c 22 70 72 69 6f 72 69 74 79 22 3a 32 30 2c 22 76 74 70 5f 69 6e 63 6c 75 64 65 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 74 61 67 5f 69 64 22 3a 31 33 37 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 63 64 5f 65 6d 5f 70 61 67 65 5f 76 69 65 77 22 2c 22 70 72 69 6f 72 69 74 79 22 3a 31 39 2c 22 76 74 70 5f 68 69 73 74 6f 72 79 45 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 63 6c 75 64 65 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 74 61 67 5f 69 64 22 3a Data Ascii: nd_click","priority":20,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","tag_id":137},{"function":"__ccd_em_page_view","priority":19,"vtp_historyEvents":true,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","tag_id":
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 69 6e 5f 61 70 70 5f 70 75 72 63 68 61 73 65 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 70 75 72 63 68 61 73 65 5c 22 7d 2c 7b 5c 22 Data Ascii: entName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"in_app_purchase\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"purchase\"},{\"
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 76 69 65 77 5f 69 74 65 6d 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 76 69 65 77 5f 69 74 65 6d 5f 6c 69 73 74 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a Data Ascii: ],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"view_item\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"view_item_list\"},{\"contextValue\":
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 66 75 6e 6e 65 6c 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 67 65 74 5f 73 70 65 63 69 61 6c 5f 6f 66 66 65 72 5c 22 7d 2c 7b Data Ascii: }]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"registration_funnel\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"get_special_offer\"},{
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 62 6f 6f 6b 5f 64 65 6d 6f 5f 70 70 63 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c Data Ascii: :1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"book_demo_ppc\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"],["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 5f 65 76 65 6e 74 4e 61 6d 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 66 75 6e 6e 65 6c 22 2c 22 76 74 70 5f 69 73 43 6f 70 79 22 3a 74 72 75 65 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 37 5a 4b 46 42 33 53 30 50 4e 22 2c 22 76 74 70 5f 70 72 65 63 6f 6d 70 69 6c 65 64 52 75 6c 65 22 3a 5b 22 6d 61 70 22 2c 22 6e 65 77 5f 65 76 65 6e 74 5f 6e 61 6d 65 22 2c 22 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 66 75 6e 6e 65 6c 22 2c 22 6d 65 72 67 65 5f 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 70 61 72 61 6d 73 22 2c 74 72 75 65 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 5f 70 72 65 64 69 63 61 74 65 22 2c 5b 22 6d 61 70 22 2c 22 76 61 6c 75 65 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 Data Ascii: _eventName":"registration_funnel","vtp_isCopy":true,"vtp_instanceDestinationId":"G-7ZKFB3S0PN","vtp_precompiledRule":["map","new_event_name","registration_funnel","merge_source_event_params",true,"event_name_predicate",["map","values",["list",["map","type
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 2c 22 6e 65 77 5f 65 76 65 6e 74 5f 6e 61 6d 65 22 2c 22 72 65 67 5f 63 61 70 74 75 72 65 5f 62 32 62 22 2c 22 6d 65 72 67 65 5f 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 70 61 72 61 6d 73 22 2c 74 72 75 65 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 5f 70 72 65 64 69 63 61 74 65 22 2c 5b 22 6d 61 70 22 2c 22 76 61 6c 75 65 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 5d 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 63 6f 6e 73 74 22 2c 22 63 6f 6e 73 74 5f 76 61 6c 75 65 22 2c 22 52 65 67 69 73 74 72 61 74 69 6f 6e 22 5d 5d 2c 22 74 79 70 65 22 2c 22 65 71 69 22 5d 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 70 72 65 64 69 63 61 74 65 73 22 2c 5b 22 6c Data Ascii: ,"new_event_name","reg_capture_b2b","merge_source_event_params",true,"event_name_predicate",["map","values",["list",["map","type","event_name"],["map","type","const","const_value","Registration"]],"type","eqi"],"conditions",["list",["map","predicates",["l
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 5f 76 61 6c 75 65 22 2c 22 4e 6f 74 65 42 32 43 44 6f 6e 65 22 5d 5d 2c 22 74 79 70 65 22 2c 22 65 71 69 22 5d 2c 5b 22 6d 61 70 22 2c 22 76 61 6c 75 65 73 22 2c 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 65 76 65 6e 74 5f 70 61 72 61 6d 22 2c 22 65 76 65 6e 74 5f 70 61 72 61 6d 22 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 5f 6e 61 6d 65 22 2c 22 70 61 67 65 5f 68 6f 73 74 6e 61 6d 65 22 5d 5d 2c 5b 22 6d 61 70 22 2c 22 74 79 70 65 22 2c 22 63 6f 6e 73 74 22 2c 22 63 6f 6e 73 74 5f 76 61 6c 75 65 22 2c 22 68 6f 6c 69 64 61 79 77 6f 72 6c 64 5c 5c 2e 63 6f 6d 7c 68 6f 6c 69 64 61 79 77 6f 72 6c 64 5c 5c 2e 63 6f 6d 7c 2e 2a 68 6f 6c 69 64 61 79 77 6f 72 6c 64 5c 5c 2e 63 6f 6d 22 5d 5d 2c 22 74 79 70 65 22 2c 22 72 65 69 22 2c 22 Data Ascii: _value","NoteB2CDone"]],"type","eqi"],["map","values",["list",["map","type","event_param","event_param",["map","param_name","page_hostname"]],["map","type","const","const_value","holidayworld\\.com\|holidayworld\\.com\|.*holidayworld\\.com"]],"type","rei","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49754	216.239.34.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:17 UTC	422	OUT	GET /gtlytics.js?id=GTM-WHFRJTP HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg
2024-12-20 20:41:18 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:18 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Vary: Accept-Encoding access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control vary: Accept-Encoding cache-control: private, max-age=900 last-modified: Fri, 20 Dec 2024 18:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0 cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0"}],} server: Google Tag Manager x-xss-protection: 0 accept-ranges: none Via: 1.1 google Connection: close
2024-12-20 20:41:18 UTC	416	IN	Data Raw: 31 31 63 30 64 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 67 29 7b 77 5b 67 5d 3d 77 5b 67 5d 7c 7c 7b 7d 3b 0a 20 77 5b 67 5d 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 73 29 3b 7d 3b 7d 29 28 77 69 6e 64 6f 77 2c 27 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 27 29 3b 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 37 36 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f Data Ascii: 11c0d// Copyright 2012 Google Inc. All rights reserved. (function(w,g){w[g]=w[g]\|\|{}; w[g].e=function(s){return eval(s);};})(window,'google_tag_manager'); (function(){var data = {"resource": { "version":"1076", "macros":[{"function":"__
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 50 61 72 61 6d 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 74 6d 2e 74 72 69 67 67 65 72 73 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 74 70 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 74 6d 2e 76 69 64 65 6f 54 69 74 6c 65 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 Data Ascii: Param":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.videoTitle","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"g
2024-12-20 20:41:18 UTC	1256	IN	Data Raw: 74 70 5f 6e 61 6d 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 70 61 69 64 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6a 73 6d 22 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 39 5d 2c 38 2c 31 36 5d 2c 22 2c 62 3d 38 36 34 45 35 2c 65 3d 33 30 2c 63 3d 31 30 3b 61 3d 6e 65 77 20 44 61 74 65 28 61 29 3b 61 3d 61 2e 67 65 74 54 69 6d 65 28 29 Data Ascii: tp_name":"product"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"paid"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=",["escape",["macro",9],8,16],",b=864E5,e=30,c=10;a=new Date(a);a=a.getTime()
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 65 76 65 6e 74 4d 6f 64 65 6c 2e 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 50 41 54 48 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4d 75 6c 74 69 51 75 65 72 79 4b 65 79 73 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 49 67 6e 6f 72 65 45 6d 70 74 79 51 75 65 72 79 50 61 72 61 6d 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c Data Ascii: Version":2,"vtp_setDefaultValue":false,"vtp_name":"eventModel.event_category"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultVal
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 6d 65 22 3a 22 67 74 6d 2e 65 6c 65 6d 65 6e 74 55 72 6c 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 67 74 6d 2e 65 6c 65 6d 65 6e 74 43 6c 61 73 73 65 73 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6a 73 6d 22 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 39 5d 2c 38 2c 31 36 5d 2c 22 2c 62 3d 38 36 34 45 35 2c 65 3d 35 2c 63 3d 30 3b 61 3d 6e 65 77 20 44 61 74 65 28 61 29 3b 61 3d Data Ascii: me":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__jsm","vtp_javascript":["template","(function(){var a=",["escape",["macro",9],8,16],",b=864E5,e=5,c=0;a=new Date(a);a=
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 74 54 69 6d 65 28 29 5c 75 30 30 32 36 5c 75 30 30 32 36 61 5c 75 30 30 33 43 3d 63 2e 67 65 74 54 69 6d 65 28 29 7d 29 28 29 3b 22 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 63 72 65 61 74 65 64 54 61 73 6b 73 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 75 73 65 72 50 6f 72 74 61 6c 73 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 Data Ascii: tTime()\u0026\u0026a\u003C=c.getTime()})();"]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"createdTasks"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userPortals"},{"function":"
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 73 75 72 76 65 79 5f 70 6c 61 6e 6e 69 6e 67 54 6f 44 6f 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 63 6e 74 4e 6f 74 65 73 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 Data Ascii: nction":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"survey_planningToDo"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"cntNotes"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultVa
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 64 75 6e 6e 69 6e 67 2e 63 61 72 64 4c 61 73 74 34 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 63 61 72 64 45 78 70 44 61 74 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 64 75 6e 6e 69 6e 67 2e 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 Data Ascii: false,"vtp_name":"dunning.cardLast4"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"cardExpDate"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dunning.paymentMethod"},{"function":"
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 6e 65 77 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 6c 61 73 74 43 6f 6d 70 61 6e 79 4e 61 6d 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 6c 61 73 74 41 63 74 69 76 65 44 61 74 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f Data Ascii: vtp_setDefaultValue":false,"vtp_name":"new"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"lastCompanyName"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"lastActiveDate"},{"functio
2024-12-20 20:41:18 UTC	1408	IN	Data Raw: 6e 63 65 5f 66 6f 72 6d 2e 5f 75 73 65 72 70 69 6c 6f 74 46 6f 72 6d 5f 4f 74 68 65 72 5f 73 74 6f 70 70 69 6e 67 5f 72 65 61 73 6f 6e 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 75 73 65 72 70 69 6c 6f 74 5f 65 78 70 65 72 69 65 6e 63 65 5f 66 6f 72 6d 2e 5f 75 73 65 72 70 69 6c 6f 74 46 6f 72 6d 5f 57 68 61 74 5f 61 72 65 5f 74 68 72 65 65 5f 69 6d 70 6f 72 74 61 6e 74 5f 66 65 61 74 75 72 65 73 5f 74 68 61 74 5f 77 65 5f 61 72 65 5f 6d 69 73 73 69 6e 67 3f 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 Data Ascii: nce_form._userpilotForm_Other_stopping_reason"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userpilot_experience_form._userpilotForm_What_are_three_important_features_that_we_are_missing?"},{"function":"__v","vtp_dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49756	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:17 UTC	716	OUT	GET /?N4JV=9Xdg HTTP/1.1 Host: bia.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:19 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-12-20 20:41:19 UTC	16203	IN	Data Raw: 37 37 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 46 2c 63 29 7b 76 61 72 20 4c 74 3d 61 30 46 35 2c 41 3d 46 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 4c 3d 70 61 72 73 65 49 6e 74 28 4c 74 28 30 78 35 37 34 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 4c 74 28 30 78 32 34 30 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 4c 74 28 30 78 32 64 32 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 4c 74 28 30 78 34 65 34 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 4c 74 28 30 78 32 Data Ascii: 77f5<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> (function(F,c){var Lt=a0F5,A=F();while(!![]){try{var L=parseInt(Lt(0x574))/0x1+-parseInt(Lt(0x240))/0x2(-parseInt(Lt(0x2d2))/0x3)+parseInt(Lt(0x4e4))/0x4(parseInt(Lt(0x2
2024-12-20 20:41:19 UTC	14514	IN	Data Raw: 7b 7d 5b 43 33 28 30 78 33 62 31 29 5d 28 29 3b 72 65 74 75 72 6e 20 43 33 28 30 78 35 66 32 29 21 3d 74 79 70 65 6f 66 20 41 57 7c 7c 41 57 5b 43 33 28 30 78 35 33 37 29 5d 28 27 70 72 6f 74 6f 74 79 70 65 27 29 3b 7d 29 3b 7d 7d 2c 30 78 37 30 66 3a 66 75 6e 63 74 69 6f 6e 28 41 67 2c 41 52 2c 41 4a 29 7b 76 61 72 20 43 34 3d 61 30 46 35 2c 41 5a 3d 41 4a 28 30 78 31 31 32 29 2c 41 51 3d 46 75 6e 63 74 69 6f 6e 5b 43 34 28 30 78 32 39 31 29 5d 5b 43 34 28 30 78 32 61 64 29 5d 3b 41 67 5b 43 34 28 30 78 33 62 66 29 5d 3d 41 5a 3f 41 51 5b 43 34 28 30 78 33 62 31 29 5d 28 41 51 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 43 35 3d 43 34 3b 72 65 74 75 72 6e 20 41 51 5b 43 35 28 30 78 34 38 63 29 5d 28 41 51 2c 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b Data Ascii: {}[C3(0x3b1)]();return C3(0x5f2)!=typeof AW\|\|AW[C3(0x537)]('prototype');});}},0x70f:function(Ag,AR,AJ){var C4=a0F5,AZ=AJ(0x112),AQ=Function[C4(0x291)][C4(0x2ad)];Ag[C4(0x3bf)]=AZ?AQ[C4(0x3b1)](AQ):function(){var C5=C4;return AQ[C5(0x48c)](AQ,arguments);};
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 63 30 30 30 0d 0a 46 7c 7c 4c 43 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4c 67 2c 4c 52 2c 4c 4a 2c 4c 5a 29 7b 66 6f 72 28 76 61 72 20 4c 51 2c 4c 57 2c 4c 49 3d 4c 35 28 4c 67 29 2c 4c 62 3d 4c 34 28 4c 49 29 2c 4c 59 3d 4c 36 28 4c 62 29 2c 4c 48 3d 4c 32 28 4c 52 2c 4c 4a 29 2c 4c 6a 3d 30 78 30 2c 4c 56 3d 4c 5a 7c 7c 4c 37 2c 4c 58 3d 4c 63 3f 4c 56 28 4c 67 2c 4c 59 29 3a 4c 41 7c 7c 4c 54 3f 4c 56 28 4c 67 2c 30 78 30 29 3a 76 6f 69 64 20 30 78 30 3b 4c 59 3e 4c 6a 3b 4c 6a 2b 2b 29 69 66 28 28 4c 72 7c 7c 4c 6a 20 69 6e 20 4c 62 29 26 26 28 4c 57 3d 4c 48 28 4c 51 3d 4c 62 5b 4c 6a 5d 2c 4c 6a 2c 4c 49 29 2c 4c 46 29 29 7b 69 66 28 4c 63 29 4c 58 5b 4c 6a 5d 3d 4c 57 3b 65 6c 73 65 7b 69 66 28 4c 57 29 73 77 69 74 63 68 28 4c 46 29 7b Data Ascii: c000F\|\|LC;return function(Lg,LR,LJ,LZ){for(var LQ,LW,LI=L5(Lg),Lb=L4(LI),LY=L6(Lb),LH=L2(LR,LJ),Lj=0x0,LV=LZ\|\|L7,LX=Lc?LV(Lg,LY):LA\|\|LT?LV(Lg,0x0):void 0x0;LY>Lj;Lj++)if((Lr\|\|Lj in Lb)&&(LW=LH(LQ=Lb[Lj],Lj,LI),LF)){if(Lc)LX[Lj]=LW;else{if(LW)switch(LF){
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 2b 2b 29 41 6c 5b 28 41 4f 3d 41 42 5b 41 66 5d 29 5b 30 78 30 5d 5d 3d 41 6f 5b 41 4f 5b 30 78 31 5d 5d 3b 7d 72 65 74 75 72 6e 20 41 6f 3b 7d 29 2c 41 67 5b 72 44 28 30 78 33 62 66 29 5d 3d 41 45 3b 7d 2c 30 78 31 39 66 64 3a 66 75 6e 63 74 69 6f 6e 28 41 67 2c 41 52 2c 41 4a 29 7b 76 61 72 20 72 72 3d 61 30 46 35 2c 41 5a 3d 41 4a 28 30 78 38 66 35 29 3b 41 67 5b 72 72 28 30 78 33 62 66 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 67 3d 72 72 2c 41 51 3d 41 5a 28 74 68 69 73 29 2c 41 57 3d 27 27 3b 72 65 74 75 72 6e 20 41 51 5b 72 67 28 30 78 32 65 65 29 5d 26 26 28 41 57 2b 3d 27 64 27 29 2c 41 51 5b 72 67 28 30 78 32 33 33 29 5d 26 26 28 41 57 2b 3d 27 67 27 29 2c 41 51 5b 27 69 67 6e 6f 72 65 43 61 73 65 27 5d 26 26 28 41 57 2b 3d 27 69 Data Ascii: ++)Al[(AO=AB[Af])[0x0]]=Ao[AO[0x1]];}return Ao;}),Ag[rD(0x3bf)]=AE;},0x19fd:function(Ag,AR,AJ){var rr=a0F5,AZ=AJ(0x8f5);Ag[rr(0x3bf)]=function(){var rg=rr,AQ=AZ(this),AW='';return AQ[rg(0x2ee)]&&(AW+='d'),AQ[rg(0x233)]&&(AW+='g'),AQ['ignoreCase']&&(AW+='i
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 30 46 35 2c 41 5a 3d 41 4a 28 30 78 32 31 61 34 29 2c 41 51 3d 41 4a 28 30 78 32 31 31 39 29 2c 41 57 3d 41 4a 28 30 78 39 32 62 29 2c 41 49 3d 41 4a 28 30 78 39 33 33 29 3b 41 5a 28 7b 27 74 61 72 67 65 74 27 3a 67 68 28 30 78 33 66 63 29 2c 27 70 72 6f 74 6f 27 3a 21 30 78 30 2c 27 61 72 69 74 79 27 3a 30 78 31 2c 27 66 6f 72 63 65 64 27 3a 41 51 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 64 3d 67 68 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 5b 67 64 28 30 78 34 32 38 29 5d 28 29 7c 7c 30 78 31 21 3d 3d 44 61 74 65 5b 67 64 28 30 78 32 39 31 29 5d 5b 67 64 28 30 78 34 32 38 29 5d 5b 67 64 28 30 78 32 61 64 29 5d 28 7b 27 74 6f 49 53 4f 53 74 72 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: 0F5,AZ=AJ(0x21a4),AQ=AJ(0x2119),AW=AJ(0x92b),AI=AJ(0x933);AZ({'target':gh(0x3fc),'proto':!0x0,'arity':0x1,'forced':AQ(function(){var gd=gh;return null!==new Date(NaN)[gd(0x428)]()\|\|0x1!==Date[gd(0x291)][gd(0x428)][gd(0x2ad)]({'toISOString':function(){retu
2024-12-20 20:41:19 UTC	8	IN	Data Raw: 3d 41 4b 3f 30 78 0d 0a Data Ascii: =AK?0x
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 66 66 66 38 0d 0a 66 66 66 66 66 66 66 66 3a 41 4b 3e 3e 3e 30 78 30 3b 69 66 28 30 78 30 3d 3d 3d 41 71 29 72 65 74 75 72 6e 5b 5d 3b 69 66 28 30 78 30 3d 3d 3d 41 66 5b 27 6c 65 6e 67 74 68 27 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 41 78 28 41 70 2c 41 66 29 3f 5b 41 66 5d 3a 5b 5d 3b 66 6f 72 28 76 61 72 20 41 42 3d 30 78 30 2c 41 6d 3d 30 78 30 2c 41 6e 3d 5b 5d 3b 41 6d 3c 41 66 5b 52 47 28 30 78 33 39 35 29 5d 3b 29 7b 69 66 28 52 47 28 30 78 35 39 63 29 3d 3d 3d 52 47 28 30 78 35 39 63 29 29 7b 41 70 5b 52 47 28 30 78 35 30 37 29 5d 3d 41 45 3f 30 78 30 3a 41 6d 3b 76 61 72 20 41 65 2c 41 79 3d 41 78 28 41 70 2c 41 45 3f 41 61 28 41 66 2c 41 6d 29 3a 41 66 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 41 79 7c 7c 28 41 65 3d 41 53 28 41 56 28 41 70 Data Ascii: fff8ffffffff:AK>>>0x0;if(0x0===Aq)return[];if(0x0===Af['length'])return null===Ax(Ap,Af)?[Af]:[];for(var AB=0x0,Am=0x0,An=[];Am<Af[RG(0x395)];){if(RG(0x59c)===RG(0x59c)){Ap[RG(0x507)]=AE?0x0:Am;var Ae,Ay=Ax(Ap,AE?Aa(Af,Am):Af);if(null===Ay\|\|(Ae=AS(AV(Ap
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 20 46 58 3d 5b 30 78 38 37 63 33 37 62 39 31 2c 30 78 31 31 34 32 35 33 64 35 5d 2c 46 7a 3d 5b 30 78 34 63 66 35 61 64 34 33 2c 30 78 32 37 34 35 39 33 37 66 5d 2c 46 78 3d 5b 30 78 30 2c 30 78 35 5d 2c 46 50 3d 5b 30 78 30 2c 30 78 35 32 64 63 65 37 32 39 5d 2c 46 4e 3d 5b 30 78 30 2c 30 78 33 38 34 39 35 61 62 35 5d 3b 66 75 6e 63 74 69 6f 6e 20 46 45 28 41 67 2c 41 52 29 7b 76 61 72 20 4a 6a 3d 4a 67 3b 69 66 28 27 6f 4d 42 59 78 27 21 3d 3d 4a 6a 28 30 78 32 33 32 29 29 72 65 74 75 72 6e 20 46 61 5b 4a 6a 28 30 78 32 31 38 29 5d 28 30 78 31 2b 46 48 29 3b 65 6c 73 65 7b 76 61 72 20 41 4a 3d 66 75 6e 63 74 69 6f 6e 28 41 7a 29 7b 76 61 72 20 4a 56 3d 4a 6a 3b 66 6f 72 28 76 61 72 20 41 78 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 41 7a 5b 4a 56 Data Ascii: FX=[0x87c37b91,0x114253d5],Fz=[0x4cf5ad43,0x2745937f],Fx=[0x0,0x5],FP=[0x0,0x52dce729],FN=[0x0,0x38495ab5];function FE(Ag,AR){var Jj=Jg;if('oMBYx'!==Jj(0x232))return Fa[Jj(0x218)](0x1+FH);else{var AJ=function(Az){var JV=Jj;for(var Ax=new Uint8Array(Az[JV
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 46 75 5b 5a 67 28 30 78 34 63 37 29 5d 28 41 59 29 3b 7d 28 29 29 2c 41 7a 3d 41 6a 28 29 2c 41 51 5b 5a 4c 28 30 78 33 34 61 29 5d 28 41 57 29 2c 41 78 3d 30 78 30 3b 41 78 3c 46 75 5b 27 6c 65 6e 67 74 68 27 5d 3b 41 78 2b 2b 29 41 49 5b 46 75 5b 41 78 5d 5d 3d 41 58 5b 41 78 5d 5b 5a 4c 28 30 78 35 31 38 29 5d 2c 41 62 5b 46 75 5b 41 78 5d 5d 3d 41 58 5b 41 78 5d 5b 5a 4c 28 30 78 34 39 61 29 5d 3b 72 65 74 75 72 6e 5b 30 78 32 2c 46 69 5b 5a 4c 28 30 78 35 63 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 41 4e 29 7b 72 65 74 75 72 6e 20 41 56 28 41 7a 5b 41 4e 5d 29 3b 7d 29 5d 3b 7d 29 3b 7d 29 3b 7d 29 3b 7d 2c 27 64 6f 6d 42 6c 6f 63 6b 65 72 73 27 3a 66 75 6e 63 74 69 6f 6e 28 41 67 29 7b 76 61 72 20 5a 52 3d 4a 67 2c 41 52 3d 28 76 6f 69 64 20 30 78 30 Data Ascii: Fu[Zg(0x4c7)](AY);}()),Az=Aj(),AQ[ZL(0x34a)](AW),Ax=0x0;Ax<Fu['length'];Ax++)AI[Fu[Ax]]=AX[Ax][ZL(0x518)],Ab[Fu[Ax]]=AX[Ax][ZL(0x49a)];return[0x2,Fi[ZL(0x5c9)](function(AN){return AV(Az[AN]);})];});});});},'domBlockers':function(Ag){var ZR=Jg,AR=(void 0x0
2024-12-20 20:41:19 UTC	16384	IN	Data Raw: 72 20 41 52 3d 2d 30 78 31 21 3d 3d 41 67 5b 51 32 28 30 78 35 63 36 29 5d 5b 51 32 28 30 78 34 35 61 29 5d 28 27 63 6f 6f 6b 69 65 74 65 73 74 3d 27 29 3b 72 65 74 75 72 6e 20 41 67 5b 51 32 28 30 78 35 63 36 29 5d 3d 27 63 6f 6f 6b 69 65 74 65 73 74 3d 31 3b 5c 78 32 30 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 5c 78 32 30 65 78 70 69 72 65 73 3d 54 68 75 2c 5c 78 32 30 30 31 2d 4a 61 6e 2d 31 39 37 30 5c 78 32 30 30 30 3a 30 30 3a 30 31 5c 78 32 30 47 4d 54 27 2c 41 52 3b 7d 63 61 74 63 68 28 41 4a 29 7b 72 65 74 75 72 6e 21 30 78 31 3b 7d 7d 2c 27 63 6f 6c 6f 72 47 61 6d 75 74 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 33 3d 4a 67 3b 66 6f 72 28 76 61 72 20 41 67 3d 30 78 30 2c 41 52 3d 5b 51 33 28 30 78 33 36 38 29 2c 27 70 33 27 2c Data Ascii: r AR=-0x1!==Ag[Q2(0x5c6)][Q2(0x45a)]('cookietest=');return Ag[Q2(0x5c6)]='cookietest=1;\x20SameSite=Strict;\x20expires=Thu,\x2001-Jan-1970\x2000:00:01\x20GMT',AR;}catch(AJ){return!0x1;}},'colorGamut':function(){var Q3=Jg;for(var Ag=0x0,AR=[Q3(0x368),'p3',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49753	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:18 UTC	764	OUT	GET /user-marketing-info/ HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:18 UTC	514	IN	HTTP/1.1 401 Unauthorized Content-Type: text/json;charset=UTF-8 Content-Length: 24 Connection: close Date: Fri, 20 Dec 2024 20:41:18 GMT X-Fusebase-Env: prod-replica X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 c6acedd7ff5b228fcdfba22cb8fb153c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: mCuYHeFfhblK7lntRVQjFt3u1lhpgduHKJna9Yf45TsUHtPoUamdVg==
2024-12-20 20:41:18 UTC	24	IN	Data Raw: 7b 22 65 72 72 22 3a 20 22 61 75 74 68 20 72 65 71 75 69 72 65 64 22 7d Data Ascii: {"err": "auth required"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49758	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:18 UTC	547	OUT	GET /share/share-api/org HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:19 UTC	523	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 668 Connection: close Date: Fri, 20 Dec 2024 20:41:18 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"29c-SpGnjiea67+ujiDErg7rBfsby0I" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 c6acedd7ff5b228fcdfba22cb8fb153c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: pUhWFfZbeIw94CNilSO6RVgLOr6Maac7RFHBWs8k-cK7qghCmPx8dA==
2024-12-20 20:41:19 UTC	668	IN	Data Raw: 7b 22 67 6c 6f 62 61 6c 49 64 22 3a 22 75 32 33 7a 78 70 22 2c 22 75 73 65 72 49 64 22 3a 33 35 34 35 37 37 33 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 32 39 37 30 30 33 39 38 2c 22 75 70 64 61 74 65 64 41 74 22 3a 31 37 32 39 37 30 30 38 32 35 2c 22 74 69 74 6c 65 22 3a 22 50 72 65 6d 69 75 6d 67 61 69 6e 22 2c 22 73 75 62 22 3a 22 70 72 65 6d 69 75 6d 67 61 69 6e 22 2c 22 73 75 73 70 65 6e 64 65 64 22 3a 66 61 6c 73 65 2c 22 73 75 73 70 65 6e 64 65 64 52 65 61 73 6f 6e 22 3a 22 69 6e 69 74 69 61 6c 22 2c 22 73 75 73 70 65 6e 64 65 64 41 74 22 3a 6e 75 6c 6c 2c 22 64 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 64 6f 6d 61 69 6e 53 68 6f 72 74 65 72 22 3a 74 72 75 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 65 6f 70 6c 65 54 6f 43 Data Ascii: {"globalId":"u23zxp","userId":3545773,"createdAt":1729700398,"updatedAt":1729700825,"title":"Premiumgain","sub":"premiumgain","suspended":false,"suspendedReason":"initial","suspendedAt":null,"domain":null,"domainShorter":true,"description":null,"peopleToC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49759	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:18 UTC	555	OUT	GET /share/share-api/mentionDiff HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:19 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 31229 Connection: close Date: Fri, 20 Dec 2024 20:41:19 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"79fd-0ohYekvs3b9EstS4IfGcfd9v914" Vary: Accept-Encoding Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 2f60289312992373b517623785f072a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: 5GB3TzndP5H8g-_S1A4Rg12ZgNgLmDGkGV5kPwW29lWs4ivB5YjcvQ==
2024-12-20 20:41:19 UTC	3769	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 50 72 65 6d 69 75 6d 67 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6d 62 75 73 2c 20 4e 6f 74 65 2c 20 53 68 61 72 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6d 62 75 73 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>Premiumgain</title> <meta charset="UTF-8"> <meta name="keywords" content="Nimbus, Note, Share"> <meta name="author" content="Nimbus"> <meta name="viewport" content="width=device-width, minimum-scale=1
2024-12-20 20:41:19 UTC	8261	IN	Data Raw: 6f 3b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 37 35 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 6e 73 2d 6d 65 6e 75 2d 74 72 69 67 67 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 32 5d 7b 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6e 6e 73 2d 66 75 6c 6c 73 63 72 65 65 6e 5b 5f 6e 67 68 6f 73 74 2d 73 63 32 5d 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 31 30 30 25 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 0a 0a 20 20 Data Ascii: o; padding:0 10px; position:relative; box-sizing:border-box; z-index:75; } .nns-menu-trigger[_ngcontent-sc2]{ opacity: 0; } .nns-fullscreen[_nghost-sc2] {transform:translate(0, -100%); position:absolute;}
2024-12-20 20:41:19 UTC	4096	IN	Data Raw: 61 64 64 69 6e 67 3a 20 31 32 70 78 20 32 38 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 61 75 74 68 2d 66 6f 72 6d 2d 73 6c 6f 67 61 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 39 5d 20 7b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 Data Ascii: adding: 12px 28px; font-size: 18px; line-height: 24px; border-bottom: 2px solid transparent; font-weight: bold; cursor: pointer; } .auth-form-slogan[_ngcontent-sc9] { text-align: center;
2024-12-20 20:41:19 UTC	7294	IN	Data Raw: 6f 72 6d 2d 74 61 62 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 39 5d 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 20 2e 35 34 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6e 6e 73 2d 74 68 65 6d 65 2d 64 61 79 5b 5f 6e 67 68 6f 73 74 2d 73 63 39 5d 20 20 20 2e 61 75 74 68 2d 66 6f 72 6d 2d 74 61 62 5f 5f 61 63 74 69 76 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 39 5d 2c 20 2e 6e 6e 73 2d 74 68 65 6d 65 2d 64 61 79 20 20 20 5b 5f 6e 67 68 6f 73 74 2d 73 63 39 5d 20 20 20 2e 61 75 74 68 2d 66 6f 72 6d 2d 74 61 62 5f 5f 61 63 74 69 76 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 39 5d 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 41 43 43 31 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 Data Ascii: orm-tab[_ngcontent-sc9]{ color: rgba(0,0,0, .54); } .nns-theme-day[_nghost-sc9] .auth-form-tab__active[_ngcontent-sc9], .nns-theme-day [_nghost-sc9] .auth-form-tab__active[_ngcontent-sc9]{ color: #00ACC1; border-c
2024-12-20 20:41:19 UTC	7294	IN	Data Raw: 6f 2d 66 6c 65 78 20 20 20 5b 5f 6e 67 68 6f 73 74 2d 73 63 31 37 5d 20 20 20 6e 6e 73 2d 73 68 61 72 65 2d 70 61 73 73 77 6f 72 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 31 37 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 5b 5f 6e 67 68 6f 73 74 2d 73 63 31 37 5d 20 20 20 6e 6e 73 2d 65 72 72 6f 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 31 37 5d 2c 20 2e 6e 6f 2d 66 6c 65 78 20 20 20 5b 5f 6e 67 68 6f 73 74 2d 73 63 31 37 5d 20 20 20 6e 6e 73 2d 65 72 72 6f 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 31 37 5d 0a 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 6e 67 2d 74 72 61 6e 73 69 74 69 6f 6e 3d 22 6e 6e 73 2d 76 31 22 3e 5b 5f 6e 67 68 6f 73 74 2d 73 63 Data Ascii: o-flex [_nghost-sc17] nns-share-password[_ngcontent-sc17], .no-flex[_nghost-sc17] nns-error[_ngcontent-sc17], .no-flex [_nghost-sc17] nns-error[_ngcontent-sc17] { display:block; }</style><style ng-transition="nns-v1">[_nghost-sc
2024-12-20 20:41:19 UTC	515	IN	Data Raw: 3c 21 2d 2d 2d 2d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 6e 6e 73 2d 65 72 72 6f 72 3e 3c 21 2d 2d 2d 2d 3e 3c 21 2d 2d 2d 2d 3e 3c 2f 6e 6e 73 2d 73 68 61 72 65 2d 73 6d 61 72 74 3e 3c 2f 6e 6e 73 2d 73 68 61 72 65 3e 3c 2f 64 69 76 3e 3c 21 2d 2d 2d 2d 3e 3c 21 2d 2d 2d 2d 3e 3c 21 2d 2d 2d 2d 3e 3c 6e 6e 73 2d 6e 6f 74 65 2d 69 6d 61 67 65 2d 76 69 65 77 65 72 20 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 30 3d 22 22 20 5f 6e 67 68 6f 73 74 2d 73 63 35 3d 22 22 3e 3c 64 69 76 20 5f 6e 67 63 6f 6e 74 65 6e 74 2d 73 63 35 3d 22 22 20 69 64 3d 22 6e 6f 74 65 2d 69 6d 61 67 65 2d 76 69 65 77 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 6e 6e 73 2d 6e 6f 74 65 2d 69 6d 61 67 65 2d 76 69 65 77 65 72 3e 3c 21 2d 2d 2d 2d 3e 3c 67 6f 6f Data Ascii: ...--></div></div></nns-error>...-->...--></nns-share-smart></nns-share></div>...-->...-->...--><nns-note-image-viewer _ngcontent-sc0="" _nghost-sc5=""><div _ngcontent-sc5="" id="note-image-viewer-container"></div></nns-note-image-viewer>...--><goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49760	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:18 UTC	618	OUT	GET /gwapi2/ft%3Atasks/shares/11450334?securityKey=ots3f4w6xehf2feb09wy&nodeId=1Hy4Ofi612giTUWL HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:19 UTC	501	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 2388 Connection: close Date: Fri, 20 Dec 2024 20:41:19 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express ETag: W/"954-pEBay8AUu3k8DYKPNvWGp3iJcp8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 8f4e0ffdaf6aff45124ff701a42582e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: YAklGD8WGnUVqysjoPMbKItmu8ilJIrpN65fmZPBAwTCJFxr4-n8Yw==
2024-12-20 20:41:19 UTC	2388	IN	Data Raw: 7b 22 74 61 73 6b 4c 69 73 74 73 22 3a 5b 5d 2c 22 6e 6f 74 65 73 22 3a 5b 7b 22 67 6c 6f 62 61 6c 49 64 22 3a 22 31 48 79 34 4f 66 69 36 31 32 67 69 54 55 57 4c 22 2c 22 70 61 72 65 6e 74 49 64 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 33 34 37 32 30 34 35 36 2c 22 64 61 74 65 41 64 64 65 64 22 3a 31 37 33 34 37 32 30 34 35 36 2c 22 64 61 74 65 55 70 64 61 74 65 64 22 3a 31 37 33 34 37 32 30 35 35 33 2c 22 75 70 64 61 74 65 64 41 74 22 3a 31 37 33 34 37 32 30 35 35 33 2c 22 74 79 70 65 22 3a 22 6e 6f 74 65 22 2c 22 72 6f 6c 65 22 3a 22 6e 6f 74 65 22 2c 22 74 69 74 6c 65 22 3a 22 42 49 41 22 2c 22 75 72 6c 22 3a 22 22 2c 22 6c 6f 63 61 74 69 6f 6e 4c 61 74 22 3a 30 2c 22 6c 6f 63 61 74 69 6f 6e 4c 6e 67 22 3a 30 2c 22 Data Ascii: {"taskLists":[],"notes":[{"globalId":"1Hy4Ofi612giTUWL","parentId":"default","createdAt":1734720456,"dateAdded":1734720456,"dateUpdated":1734720553,"updatedAt":1734720553,"type":"note","role":"note","title":"BIA","url":"","locationLat":0,"locationLng":0,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49761	108.158.75.61	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:18 UTC	508	OUT	GET /timing/share_page_load HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:19 UTC	813	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Date: Fri, 20 Dec 2024 20:41:19 GMT Access-Control-Max-Age: 1728000 Allow: OPTIONS, POST X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Error from cloudfront Via: 1.1 faeaaf5db340bc602fd96355e084d554.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: hGC4xNXpnhjitDlzOUgKIEqwIPfLqmH89ZTLwpVzRnNRvCTs4EdFDQ==
2024-12-20 20:41:19 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49762	108.158.75.61	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:18 UTC	514	OUT	GET /timing/share_page_note_title HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:20 UTC	813	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Date: Fri, 20 Dec 2024 20:41:19 GMT Access-Control-Max-Age: 1728000 Allow: OPTIONS, POST X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Error from cloudfront Via: 1.1 96424b39140b3ccbe02b238698ac89ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 6beN8XzB30i5DYK1qaYzHB5SP6CqFjWd2fRIiqp50zrzeCU36hs-3A==
2024-12-20 20:41:20 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49763	108.158.75.61	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:19 UTC	516	OUT	GET /timing/share_page_load_content HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:20 UTC	813	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Date: Fri, 20 Dec 2024 20:41:19 GMT Access-Control-Max-Age: 1728000 Allow: OPTIONS, POST X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Error from cloudfront Via: 1.1 c0756b6fa47b5825ec117ce8b50151c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: LXfb15FZsIWYtE9uHPCELLeKyuI1Y4v_vWeBAozb33MWacODagZilg==
2024-12-20 20:41:20 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49764	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:19 UTC	800	OUT	GET /static/assets/a6794726fa7eda006545.vendors.fs_web.js HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:20 UTC	741	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 91217 Connection: close Date: Fri, 20 Dec 2024 20:41:20 GMT X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 11:38:11 GMT ETag: W/"16451-193cf42f0b8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 11db54d41dc7b64f760df4a169363db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: Et6a7-ya6RAFid-_DkUGZw-45VMwU8mFe_QMBOYeQsIDVW0Y3UNxMA==
2024-12-20 20:41:20 UTC	11787	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 65 64 69 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 65 64 69 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 37 5d 2c 7b 35 34 35 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 66 73 6a 73 3a 28 29 3d 3e 69 2c 65 62 6d 6c 6a 73 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 69 3d 6e 28 39 34 30 33 36 29 2c 61 3d 6e 28 36 34 30 32 38 29 7d 2c 31 38 35 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 32 32 33 35 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 6e 65 77 20 69 28 65 29 3b 74 2e 74 72 61 63 6b 4e 75 6d 62 Data Ascii: (self.webpackChunkweb_editor=self.webpackChunkweb_editor\|\|[]).push([[997],{54519:(e,t,n)=>{"use strict";n.r(t),n.d(t,{fsjs:()=>i,ebmljs:()=>a});var i=n(94036),a=n(64028)},18595:(e,t,n)=>{var i=n(22357);e.exports=function(e){var t={},n=new i(e);t.trackNumb
2024-12-20 20:41:20 UTC	8192	IN	Data Raw: 6e 76 65 72 3a 30 2c 6d 61 78 76 65 72 3a 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 54 68 65 20 53 65 67 6d 65 6e 74 20 50 6f 73 69 74 69 6f 6e 20 6f 66 20 74 68 65 20 43 6c 75 73 74 65 72 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 72 65 66 65 72 65 6e 63 65 64 20 42 6c 6f 63 6b 2e 22 7d 2c 31 35 32 3a 7b 6e 61 6d 65 3a 22 43 68 61 70 74 65 72 46 6c 61 67 48 69 64 64 65 6e 22 2c 6c 65 76 65 6c 3a 34 2c 74 79 70 65 3a 22 75 22 2c 6d 61 6e 64 61 74 6f 72 79 3a 21 30 2c 64 65 66 61 75 6c 74 3a 22 30 22 2c 72 61 6e 67 65 3a 22 30 2d 31 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 53 65 74 20 74 6f 20 31 20 69 66 20 61 20 63 68 61 70 74 65 72 20 69 73 20 68 69 64 64 65 6e 2e 20 48 69 64 64 65 6e 20 63 68 61 70 74 65 72 73 20 2a 2a 53 48 4f 55 4c 44 20 Data Ascii: nver:0,maxver:0,description:"The Segment Position of the Cluster containing the referenced Block."},152:{name:"ChapterFlagHidden",level:4,type:"u",mandatory:!0,default:"0",range:"0-1",description:"Set to 1 if a chapter is hidden. Hidden chapters **SHOULD
2024-12-20 20:41:20 UTC	16384	IN	Data Raw: 3a 35 2c 74 79 70 65 3a 22 75 22 2c 6d 69 6e 76 65 72 3a 30 2c 6d 61 78 76 65 72 3a 30 2c 64 65 66 61 75 6c 74 3a 22 30 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 66 72 61 6d 65 20 74 6f 20 67 65 6e 65 72 61 74 65 20 66 72 6f 6d 20 74 68 69 73 20 6c 61 63 65 20 77 69 74 68 20 74 68 69 73 20 64 65 6c 61 79 20 28 61 6c 6c 6f 77 20 79 6f 75 20 74 6f 20 67 65 6e 65 72 61 74 65 20 6d 61 6e 79 20 66 72 61 6d 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 42 6c 6f 63 6b 2f 46 72 61 6d 65 29 2e 22 7d 2c 32 30 36 3a 7b 6e 61 6d 65 3a 22 44 65 6c 61 79 22 2c 63 70 70 6e 61 6d 65 3a 22 53 6c 69 63 65 44 65 6c 61 79 22 2c 6c 65 76 65 6c 3a 35 2c 74 79 70 65 3a 22 75 22 2c 6d 69 6e 76 65 72 3a 30 2c 6d 61 78 Data Ascii: :5,type:"u",minver:0,maxver:0,default:"0",description:"The number of the frame to generate from this lace with this delay (allow you to generate many frames from the same Block/Frame)."},206:{name:"Delay",cppname:"SliceDelay",level:5,type:"u",minver:0,max
2024-12-20 20:41:20 UTC	4096	IN	Data Raw: 6e 74 65 6e 74 45 6e 63 72 79 70 74 69 6f 6e 22 2c 6c 65 76 65 6c 3a 35 2c 74 79 70 65 3a 22 6d 22 2c 77 65 62 6d 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 53 65 74 74 69 6e 67 73 20 64 65 73 63 72 69 62 69 6e 67 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 65 64 2e 20 54 68 69 73 20 45 6c 65 6d 65 6e 74 20 2a 2a 4d 55 53 54 2a 2a 20 62 65 20 70 72 65 73 65 6e 74 20 69 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 60 43 6f 6e 74 65 6e 74 45 6e 63 6f 64 69 6e 67 54 79 70 65 60 20 69 73 20 31 20 28 65 6e 63 72 79 70 74 69 6f 6e 29 20 61 6e 64 20 2a 2a 4d 55 53 54 2a 2a 20 62 65 20 69 67 6e 6f 72 65 64 20 6f 74 68 65 72 77 69 73 65 2e 22 7d 2c 32 31 33 34 33 3a 7b 6e 61 6d 65 3a 22 43 75 65 52 65 66 4e 75 6d 62 65 72 22 2c 6c 65 76 65 6c 3a Data Ascii: ntentEncryption",level:5,type:"m",webm:!0,description:"Settings describing the encryption used. This Element MUST be present if the value of `ContentEncodingType` is 1 (encryption) and MUST be ignored otherwise."},21343:{name:"CueRefNumber",level:
2024-12-20 20:41:20 UTC	16384	IN	Data Raw: 2c 74 79 70 65 3a 22 75 22 2c 6d 69 6e 76 65 72 3a 34 2c 72 61 6e 67 65 3a 22 30 2d 31 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 53 65 74 20 74 6f 20 31 20 69 66 20 74 68 61 74 20 74 72 61 63 6b 20 69 73 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 75 73 65 72 73 20 77 69 74 68 20 76 69 73 75 61 6c 20 69 6d 70 61 69 72 6d 65 6e 74 73 2c 20 73 65 74 20 74 6f 20 30 20 69 66 20 69 74 20 69 73 20 75 6e 73 75 69 74 61 62 6c 65 20 66 6f 72 20 75 73 65 72 73 20 77 69 74 68 20 76 69 73 75 61 6c 20 69 6d 70 61 69 72 6d 65 6e 74 73 2e 22 7d 2c 32 31 39 33 33 3a 7b 6e 61 6d 65 3a 22 46 6c 61 67 54 65 78 74 44 65 73 63 72 69 70 74 69 6f 6e 73 22 2c 6c 65 76 65 6c 3a 33 2c 74 79 70 65 3a 22 75 22 2c 6d 69 6e 76 65 72 3a 34 2c 72 61 6e 67 65 3a 22 30 2d 31 22 2c 64 65 Data Ascii: ,type:"u",minver:4,range:"0-1",description:"Set to 1 if that track is suitable for users with visual impairments, set to 0 if it is unsuitable for users with visual impairments."},21933:{name:"FlagTextDescriptions",level:3,type:"u",minver:4,range:"0-1",de
2024-12-20 20:41:20 UTC	16384	IN	Data Raw: 76 69 64 65 6f 20 74 72 61 63 6b 2e 22 7d 2c 33 30 33 32 32 3a 7b 6e 61 6d 65 3a 22 50 72 6f 6a 65 63 74 69 6f 6e 50 72 69 76 61 74 65 22 2c 63 70 70 6e 61 6d 65 3a 22 56 69 64 65 6f 50 72 6f 6a 65 63 74 69 6f 6e 50 72 69 76 61 74 65 22 2c 6c 65 76 65 6c 3a 35 2c 74 79 70 65 3a 22 62 22 2c 6d 69 6e 76 65 72 3a 34 2c 77 65 62 6d 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 50 72 69 76 61 74 65 20 64 61 74 61 20 74 68 61 74 20 6f 6e 6c 79 20 61 70 70 6c 69 65 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 70 72 6f 6a 65 63 74 69 6f 6e 2e 20 20 2a 20 20 49 66 20 60 50 72 6f 6a 65 63 74 69 6f 6e 54 79 70 65 60 20 65 71 75 61 6c 73 20 30 20 28 52 65 63 74 61 6e 67 75 6c 61 72 29 2c 20 74 68 65 6e 20 74 68 69 73 20 65 6c 65 6d 65 6e 74 20 6d 75 73 74 20 Data Ascii: video track."},30322:{name:"ProjectionPrivate",cppname:"VideoProjectionPrivate",level:5,type:"b",minver:4,webm:!0,description:"Private data that only applies to a specific projection. * If `ProjectionType` equals 0 (Rectangular), then this element must
2024-12-20 20:41:20 UTC	16384	IN	Data Raw: 6e 5f 65 76 65 72 79 5f 73 69 6d 70 6c 65 62 6c 6f 63 6b 3d 21 31 2c 74 2e 75 73 65 5f 77 65 62 70 3d 21 31 2c 74 2e 75 73 65 5f 73 65 67 6d 65 6e 74 5f 69 6e 66 6f 3d 21 30 2c 74 2e 64 72 6f 70 5f 64 65 66 61 75 6c 74 5f 64 75 72 61 74 69 6f 6e 3d 21 30 2c 74 7d 72 65 74 75 72 6e 20 61 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 68 69 73 2e 65 6e 64 65 64 3d 21 30 2c 74 68 69 73 2e 65 6d 69 74 5f 73 65 67 6d 65 6e 74 5f 69 6e 66 6f 28 29 3b 74 68 69 73 2e 73 74 61 63 6b 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 73 74 61 63 6b 2e 70 6f 70 28 29 2c 74 68 69 73 2e 6c 6f 67 67 69 6e 67 26 26 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 74 68 69 73 2e 6c 6f 67 67 69 6e 67 26 Data Ascii: n_every_simpleblock=!1,t.use_webp=!1,t.use_segment_info=!0,t.drop_default_duration=!0,t}return a(t,e),t.prototype.stop=function(){for(this.ended=!0,this.emit_segment_info();this.stack.length;)this.stack.pop(),this.logging&&console.groupEnd();this.logging&
2024-12-20 20:41:20 UTC	1606	IN	Data Raw: 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 6e 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 65 2c 69 29 2c 6e 7c 7c 28 6e 3d 21 30 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 72 65 74 75 72 6e 20 69 2e 6c 69 73 74 65 6e 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 28 65 2c 69 29 2c 74 68 69 73 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 61 2c 73 3b 69 66 28 21 72 28 74 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 6c 69 73 74 65 6e 65 72 20 6d Data Ascii: hrow TypeError("listener must be a function");var n=!1;function i(){this.removeListener(e,i),n\|\|(n=!0,t.apply(this,arguments))}return i.listener=t,this.on(e,i),this},a.prototype.removeListener=function(e,t){var n,i,a,s;if(!r(t))throw TypeError("listener m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49768	216.239.34.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:19 UTC	1347	OUT	GET /g/collect?v=2&tid=G-7ZKFB3S0PN&gtm=45he4cc1v888117676za204&_p=1734727272303&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=668868513.1734727275&ul=en-us&sr=1280x1024&_fplc=0&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1734727275&sct=1&seg=0&dl=https%3A%2F%2Fpremiumgain.nimbusweb.me%2Fshare%2F11450334%2Fots3f4w6xehf2feb09wy&dt=BIA%20-%20FuseBase&en=page_view&_fv=2&_nsi=1&_ss=2&_ee=1&ep.link_attribution=true&tfd=35607 HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; FPLC=CzKSzqQy8hthiKGfX9kh3Qm5jvKQyLXPpwczJkBvHZL2IFiLPCE07SxKv0skLHRPm5xVIxl2NKa0EHNob3he14gREELtxCoW8qKtG26xpkrCkFsf%2F%2FrtHBtr0LAUmg%3D%3D
2024-12-20 20:41:19 UTC	475	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:19 GMT Content-Length: 0 set-cookie: FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; Max-Age=63072000; Domain=nimbusweb.me; Path=/; Secure; HttpOnly set-cookie: FPLC=ofO4FpcDezG1dl58MDyuADvT%2FeF%2BxQJfTq%2FKO0asR468Pbu9M2rPdIFsxabs1HJqjbHu2g1tje7h%2BxZ3Iq6ZaCPqyytMxuMr7WfyOevZmYNWs34R4GipsUxwu9xXpg%3D%3D; Max-Age=72000; Domain=nimbusweb.me; Path=/; Secure Via: 1.1 google Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49765	108.158.75.61	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:19 UTC	515	OUT	GET /timing/share_init_editor_dump HTTP/1.1 Host: metric.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0
2024-12-20 20:41:20 UTC	813	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Date: Fri, 20 Dec 2024 20:41:19 GMT Access-Control-Max-Age: 1728000 Allow: OPTIONS, POST X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization X-Cache: Error from cloudfront Via: 1.1 f5c473fef0972ed94af1ce1148b64d62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: V2giesvL1TBmf-o0IaZIsTJ9TRL1U6T3_i9v3ZtOBCPzy7Wi8K4jxQ==
2024-12-20 20:41:20 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49769	66.102.1.156	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:19 UTC	883	OUT	POST /g/collect?v=2&tid=G-7ZKFB3S0PN&cid=668868513.1734727275&gtm=45he4cc1v888117676za204&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:20 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://premiumgain.nimbusweb.me Date: Fri, 20 Dec 2024 20:41:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49757	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:20 UTC	825	OUT	POST /?N4JV=9Xdg HTTP/1.1 Host: bia.twuseb.us Connection: keep-alive Content-Length: 4695 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://bia.twuseb.us Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://bia.twuseb.us/?N4JV=9Xdg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:20 UTC	4695	OUT	Data Raw: 33 31 31 68 77 66 71 6a 3d 25 35 42 25 35 42 25 32 32 32 35 33 33 34 35 37 37 36 32 37 31 37 37 36 61 36 61 36 39 32 25 32 32 25 32 43 25 32 32 35 33 37 34 36 37 35 36 38 36 65 37 32 36 33 36 39 33 32 37 35 25 32 32 25 32 43 25 32 32 33 30 33 34 33 35 33 37 33 35 33 35 33 39 33 30 33 36 33 34 33 25 32 32 25 32 43 25 32 32 35 33 34 33 37 33 35 33 33 33 37 33 34 25 32 32 25 35 44 25 32 43 25 32 32 30 34 35 37 35 35 39 30 36 34 25 32 32 25 32 43 25 32 32 33 36 36 30 33 34 35 25 32 32 25 32 43 34 25 35 44 26 39 64 68 72 74 79 3d 25 35 42 25 35 42 25 32 32 36 33 32 35 33 36 33 30 37 39 32 35 33 37 34 33 37 34 36 62 36 66 32 35 33 25 32 32 25 32 43 25 32 32 33 34 36 36 38 33 32 37 34 32 35 33 33 34 36 33 35 36 66 33 32 32 35 33 37 25 32 32 25 32 43 25 32 32 34 Data Ascii: 311hwfqj=%5B%5B%22253345776271776a6a692%22%2C%225374675686e7263693275%22%2C%22303435373535393036343%22%2C%225343735333734%22%5D%2C%220457559064%22%2C%223660345%22%2C4%5D&9dhrty=%5B%5B%226325363079253743746b6f253%22%2C%22346683274253346356f322537%22%2C%224
2024-12-20 20:41:21 UTC	387	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 20 Dec 2024 20:41:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://bia.twuseb.us/?N4JV=9Xdg set-cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; Domain=twuseb.us; HttpOnly; Path=/; SameSite=None; Secure
2024-12-20 20:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49770	138.199.15.193	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:20 UTC	539	OUT	GET /m42xj3qw.js HTTP/1.1 Host: l.getsitecontrol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:21 UTC	1191	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:21 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-MS1-891 CDN-PullZone: 89704 CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=0 ETag: W/"cbeb922a6533441a6f3f5a3586235296" Last-Modified: Thu, 08 Aug 2024 11:56:07 GMT CDN-CachedAt: 12/20/2024 20:41:21 x-amz-id-2: DU/+m605lPxn28evGSau2AJqPfKUXbYQMtsBejs+htyXWskmNKnI/Ieu5ATeJuv5WckIsBfJeQE= x-amz-request-id: TMQZW0Z04Y3FQVVQ x-amz-server-side-encryption: AES256 CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 891 Cross-Origin-Resource-Policy: cross-origin CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: cb4b54b6a7a3a50270417d7d339f3f14 CDN-Cache: MISS
2024-12-20 20:41:21 UTC	440	IN	Data Raw: 31 62 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 2e 71 3d 6e 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 74 2e 67 73 63 3d 74 2e 67 73 63 7c 7c 6e 3b 76 61 72 20 73 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 73 2e 6f 70 65 6e 28 22 67 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 2e 67 65 74 73 69 74 65 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 2f 6d 34 32 78 6a 33 71 77 2e 6a 73 6f 6e 22 2c 21 30 29 2c 73 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 Data Ascii: 1b1"use strict";!function(t,e){if(!e.documentMode){var n=function(){(n.q=n.q\|\|[]).push(arguments)};t.gsc=t.gsc\|\|n;var s=new XMLHttpRequest;s.open("get","https://l.getsitecontrol.com/m42xj3qw.json",!0),s.onload=function(){var n=JSON.parse(s.responseText)
2024-12-20 20:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49771	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:21 UTC	841	OUT	GET /?N4JV=9Xdg HTTP/1.1 Host: bia.twuseb.us Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://bia.twuseb.us/?N4JV=9Xdg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:25 UTC	777	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55022 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7341605b-f535-40a8-88a9-b7cfcc660602 x-ms-ests-server: 2.1.19683.3 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:25 UTC	15607	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 6b 5b e2 48 d7 28 fc 7d 7e 85 b2 e7 32 e4 36 2a e1 20 a7 ce f0 28 6a 64 a0 db 16 b4 75 9a f1 e9 1d 20 d1 d8 08 4a 82 48 ab fb b7 bf eb 50 95 54 38 74 cf be 9f 7b bf 7d cd 48 52 a9 73 ad 5a b5 ce f5 61 f3 e8 ac 7e f1 d7 e7 e3 8d bb f0 61 f8 c7 6f 1f f8 67 e3 c3 9d eb 0c e0 77 e3 43 e8 87 43 17 9f 36 da ee c0 9f b8 fd d0 1f dd e2 87 bd e8 cb 87 07 37 74 36 fa e3 51 e8 8e 42 2b 15 ba 2f e1 1e d6 53 dd e8 df 39 93 c0 0d ad 69 e8 ed 94 52 d0 46 f8 b8 e3 3e 4d fd 67 2b 55 e7 ec 3b 17 f3 47 37 b5 b7 a2 9a c6 b1 e5 0e 6e dd 64 a9 eb 9d cb 83 9d fa f8 e1 d1 09 fd de 70 75 c1 99 3f 08 ef ac 81 fb ec f7 dd 1d 7a 31 36 fc 91 1f fa ce 70 27 e8 3b 43 d7 32 77 33 c6 c6 83 f3 e2 3f 4c 1f 44 52 16 93 a6 81 3b a1 77 07 ea b6 e6 6e 90 da Data Ascii: k[H(}~26* (jdu JHPT8t{}HRsZa~aogwCC67t6QB+/S9iRF>Mg+U;G7ndpu?z16p';C2w3?LDR;wn
2024-12-20 20:41:25 UTC	14460	IN	Data Raw: 7a 29 37 90 e8 e0 20 45 1e 5a da 0e 9c a4 90 59 f4 76 60 79 7f ca 6a a5 d5 ed 39 50 16 64 0e 5a 10 ea 3c 34 62 ed 6a 4a 08 56 b6 ff a6 7d 7a df d5 30 50 24 db 0c 21 13 22 da 33 31 ca 90 a5 7d d2 68 bf 8a c4 1c b2 cf 96 f6 59 23 4c f7 67 7c 72 08 36 af 58 f0 56 e0 d3 db 98 02 61 db 46 16 cf ca 67 7d ad 73 58 e2 ce 00 46 7d 49 8f b5 97 34 1b 60 eb 22 7a c0 5a 25 b3 b7 60 2a 29 b5 74 de 2a 8b 46 79 84 38 96 f7 17 f5 1a ad ef 3c 72 a8 d3 1e 6f c7 e7 27 92 6c ba 17 17 68 44 1e ef 1b ad f3 b4 42 00 91 45 08 ec d2 d6 0b eb a9 0d 62 8a 71 29 ee dc 11 3a 15 f5 8d d6 a2 f4 81 1a 4b 4a 01 3b 35 19 53 b7 53 49 1c 5f d9 c1 7a 74 de 5b 0e 19 44 03 5e 65 f1 d7 89 e9 5f aa fe ed 4d ba f1 76 64 4b 85 c2 0a 87 08 4f 58 f7 79 64 63 57 26 33 f9 e8 19 08 aa 27 20 c5 6a 34 2d Data Ascii: z)7 EZYv`yj9PdZ<4bjJV}z0P$!"31}hY#Lg\|r6XVaFg}sXF}I4`"zZ%`)tFy8<ro'lhDBEbq):KJ;5SSI_zt[D^e_MvdKOXydcW&3' j4-
2024-12-20 20:41:25 UTC	16384	IN	Data Raw: b6 4d 0e 72 9b b5 c1 c4 a1 72 4f ec b2 bc ef 25 13 bf cc bd c1 9e 54 35 d7 f5 5d 69 74 ca df df 21 cf 92 34 2b 7f 46 60 cd 80 c5 05 46 29 54 93 24 6a 2a 41 1f 68 2a b4 20 bf e7 c5 e7 cf 99 70 f6 d4 f5 27 19 9d f0 78 41 cd 92 16 51 ce 9a 0e 96 24 57 d9 13 23 44 a6 a7 87 08 43 57 fd f2 59 f5 bb 80 60 1f 7f 41 8c 3d 7a 57 e0 b8 c3 0b ed 26 6f 50 9f 05 4d 62 08 99 ba 25 2c a3 05 a5 95 82 e8 4e dc c6 16 e9 73 c0 05 36 ed b4 10 9c 34 01 47 60 71 91 e6 93 c7 58 b5 1a e2 fd d8 e1 fd a0 32 22 96 1f de 01 ba 18 96 84 fb 83 3a 12 c9 e1 5c 03 79 41 3a 24 9d 55 80 2a 4b cc c4 ab 9c 36 59 07 e3 31 16 f3 9a 15 3c 47 14 7e f9 02 14 8c ce 8e 21 28 45 a8 01 e6 40 f8 17 1c 1a 7b 16 ec 8d 07 bd 41 79 60 d2 82 8e f1 5f c8 6f 98 7e 84 f3 75 45 b5 37 8d fc b0 76 d8 c0 6e 1e 35 Data Ascii: MrrO%T5]it!4+F`F)T$jAh p'xAQ$W#DCWY`A=zW&oPMb%,Ns64G`qX2":\yA:$U*K6Y1<G~!(E@{Ay`_o~uE7vn5
2024-12-20 20:41:25 UTC	8571	IN	Data Raw: 18 c2 24 4f 1b e5 1a 10 5e 4e 27 2d 1e 9e bd 45 8d 69 ee 75 80 d3 11 4d 02 f2 4d 40 b0 8c 53 9b ba 58 03 b1 63 c2 d1 8c f2 76 1f 03 95 a2 03 e0 7f fe 27 90 f1 64 05 b8 fd 87 f2 62 fc ff 02 fd 24 b3 ec e1 90 e3 3d 86 84 62 60 18 27 f6 2c 9b 6d 8b d6 fd 80 70 e1 f6 e9 36 84 31 f4 1f 8f ab df 01 37 ee aa 88 aa 66 a4 45 b1 c6 9d 00 80 92 df dc dd ce af ef 04 77 8d d1 cb 0c 36 d2 18 bc e9 e4 54 37 77 77 76 d6 37 72 c7 8f f5 f2 12 ce 18 a2 e6 d0 d8 f7 60 de 1c d3 1a f3 39 60 8c fd a8 dc 8d 16 f4 f2 52 d2 cf 8b 3e 20 d8 fc 68 0c 44 23 c4 dd 3d 0b 03 a0 63 82 42 e0 49 c4 b9 22 c5 ca f9 cf 4d 1f 7b 23 9b 1f 5b 3b dd 1e e0 92 94 a8 9b ab e8 ec 79 6c ee 95 63 a2 f8 30 8d ef 8d 33 e8 30 e2 6d 3a f4 5f 6f 66 ff 04 07 10 c2 13 65 f8 6e 43 7e f5 0b 64 1d 0e 3b 08 7e a6 Data Ascii: $O^N'-EiuMM@SXcv'db$=b`',mp617fEw6T7wwv7r`9`R> hD#=cBI"M{#[;ylc030m:_ofenC~d;~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49772	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:22 UTC	803	OUT	GET /static/assets/a6794726fa7eda006545.vendors.fs_web.js HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; FPLC=ofO4FpcDezG1dl58MDyuADvT%2FeF%2BxQJfTq%2FKO0asR468Pbu9M2rPdIFsxabs1HJqjbHu2g1tje7h%2BxZ3Iq6ZaCPqyytMxuMr7WfyOevZmYNWs34R4GipsUxwu9xXpg%3D%3D
2024-12-20 20:41:22 UTC	748	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 91217 Connection: close Date: Fri, 20 Dec 2024 20:41:20 GMT X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 11:38:11 GMT ETag: W/"16451-193cf42f0b8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Fusebase-Env: prod-replica Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2358c92c016b37a066a4efcb933f0da0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: bjNhFiQRRbOoq-Tug-EyX-V3nN5ajhzMIWubjs4tUj8KuPtpv7F_BQ== Age: 2
2024-12-20 20:41:22 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 65 64 69 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 65 64 69 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 37 5d 2c 7b 35 34 35 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 66 73 6a 73 3a 28 29 3d 3e 69 2c 65 62 6d 6c 6a 73 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 69 3d 6e 28 39 34 30 33 36 29 2c 61 3d 6e 28 36 34 30 32 38 29 7d 2c 31 38 35 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 32 32 33 35 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 6e 65 77 20 69 28 65 29 3b 74 2e 74 72 61 63 6b 4e 75 6d 62 Data Ascii: (self.webpackChunkweb_editor=self.webpackChunkweb_editor\|\|[]).push([[997],{54519:(e,t,n)=>{"use strict";n.r(t),n.d(t,{fsjs:()=>i,ebmljs:()=>a});var i=n(94036),a=n(64028)},18595:(e,t,n)=>{var i=n(22357);e.exports=function(e){var t={},n=new i(e);t.trackNumb
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 43 6f 6e 74 61 69 6e 73 20 74 68 65 20 61 74 6f 6d 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 65 20 61 73 20 74 68 65 20 63 68 61 70 74 65 72 20 61 74 6f 6d 20 28 61 70 70 6c 79 20 74 6f 20 61 6c 6c 20 74 72 61 63 6b 73 29 2e 22 7d 2c 31 38 33 3a 7b 6e 61 6d 65 3a 22 43 75 65 54 72 61 63 6b 50 6f 73 69 74 69 6f 6e 73 22 2c 6c 65 76 65 6c 3a 33 2c 74 79 70 65 3a 22 6d 22 2c 6d 61 6e 64 61 74 6f 72 79 3a 21 30 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 43 6f 6e 74 61 69 6e 20 70 6f 73 69 74 69 6f 6e 73 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 63 6b 73 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 74 6f 20 74 68 65 20 74 69 6d 65 73 74 61 6d 70 2e 22 7d 2c Data Ascii: 0,description:"Contains the atom information to use as the chapter atom (apply to all tracks)."},183:{name:"CueTrackPositions",level:3,type:"m",mandatory:!0,multiple:!0,description:"Contain positions for different tracks corresponding to the timestamp."},
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 64 61 74 6f 72 79 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 4d 49 4d 45 20 74 79 70 65 20 6f 66 20 74 68 65 20 66 69 6c 65 2e 22 7d 2c 31 38 30 31 37 3a 7b 6e 61 6d 65 3a 22 46 69 6c 65 55 73 65 64 53 74 61 72 74 54 69 6d 65 22 2c 6c 65 76 65 6c 3a 33 2c 74 79 70 65 3a 22 75 22 2c 6d 69 6e 76 65 72 3a 30 2c 6d 61 78 76 65 72 3a 30 2c 64 69 76 78 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 54 68 65 20 74 69 6d 65 73 74 61 6d 70 20 61 74 20 77 68 69 63 68 20 74 68 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 66 6f 6e 74 20 61 74 74 61 63 68 6d 65 6e 74 20 63 6f 6d 65 73 20 69 6e 74 6f 20 63 6f 6e 74 65 78 74 2c 20 65 78 70 72 65 73 73 65 64 20 69 6e 20 53 65 67 6d 65 6e 74 20 54 69 63 6b 73 20 77 68 69 63 68 20 69 73 20 62 61 73 65 64 20 6f 6e 20 Data Ascii: datory:!0,description:"MIME type of the file."},18017:{name:"FileUsedStartTime",level:3,type:"u",minver:0,maxver:0,divx:!0,description:"The timestamp at which this optimized font attachment comes into context, expressed in Segment Ticks which is based on
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 2c 74 79 70 65 3a 22 6d 22 2c 6d 61 6e 64 61 74 6f 72 79 3a 21 30 2c 77 65 62 6d 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 6f 74 68 65 72 20 65 6c 65 6d 65 6e 74 73 20 74 68 65 20 6d 65 74 61 64 61 74 61 20 72 65 70 72 65 73 65 6e 74 65 64 20 62 79 20 74 68 65 20 54 61 67 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 66 20 65 6d 70 74 79 20 6f 72 20 6e 6f 74 20 70 72 65 73 65 6e 74 2c 20 74 68 65 6e 20 74 68 65 20 54 61 67 20 64 65 73 63 72 69 62 65 73 20 65 76 65 72 79 74 68 69 6e 67 20 69 6e 20 74 68 65 20 53 65 67 6d 65 6e 74 2e 22 7d 2c 32 35 35 33 39 3a 7b 6e 61 6d 65 3a 22 43 68 61 70 74 65 72 50 68 79 73 69 63 61 6c 45 71 75 69 76 22 2c 6c 65 76 65 6c 3a 34 2c 74 79 70 65 3a 22 75 22 2c 64 65 73 Data Ascii: ,type:"m",mandatory:!0,webm:!0,description:"Specifies which other elements the metadata represented by the Tag applies to. If empty or not present, then the Tag describes everything in the Segment."},25539:{name:"ChapterPhysicalEquiv",level:4,type:"u",des
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 3a 22 43 6f 6e 74 61 69 6e 73 20 67 65 6e 65 72 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 53 65 67 6d 65 6e 74 2e 22 7d 2c 33 37 34 36 34 38 34 32 37 3a 7b 6e 61 6d 65 3a 22 54 72 61 63 6b 73 22 2c 6c 65 76 65 6c 3a 31 2c 74 79 70 65 3a 22 6d 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 41 20 54 6f 70 2d 4c 65 76 65 6c 20 45 6c 65 6d 65 6e 74 20 6f 66 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 6d 61 6e 79 20 74 72 61 63 6b 73 20 64 65 73 63 72 69 62 65 64 2e 22 7d 2c 34 30 38 31 32 35 35 34 33 3a 7b 6e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 22 2c 6c 65 76 65 6c 3a 30 2c 74 79 70 65 3a 22 6d 22 2c 6d 61 6e 64 61 74 6f 72 79 3a 21 30 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 54 68 65 20 52 Data Ascii: scription:"Contains general information about the Segment."},374648427:{name:"Tracks",level:1,type:"m",description:"A Top-Level Element of information with many tracks described."},408125543:{name:"Segment",level:0,type:"m",mandatory:!0,description:"The R
2024-12-20 20:41:23 UTC	9297	IN	Data Raw: 6f 6e 28 65 29 7b 69 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 53 65 65 6b 22 2c 74 79 70 65 3a 22 6d 22 2c 69 73 45 6e 64 3a 21 31 7d 29 2c 69 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 53 65 65 6b 49 44 22 2c 74 79 70 65 3a 22 62 22 2c 64 61 74 61 3a 6e 65 77 20 74 2e 42 75 66 66 65 72 28 5b 33 31 2c 36 37 2c 31 38 32 2c 31 31 37 5d 29 7d 29 2c 69 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 53 65 65 6b 50 6f 73 69 74 69 6f 6e 22 2c 74 79 70 65 3a 22 75 22 2c 64 61 74 61 3a 76 28 65 2b 6e 29 7d 29 2c 69 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 53 65 65 6b 22 2c 74 79 70 65 3a 22 6d 22 2c 69 73 45 6e 64 3a 21 30 7d 29 7d 29 29 2c 69 7d 28 72 2c 6e 29 29 2c 66 28 73 2c 22 53 65 65 6b 48 65 61 64 22 2c 63 2c 21 30 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c Data Ascii: on(e){i.push({name:"Seek",type:"m",isEnd:!1}),i.push({name:"SeekID",type:"b",data:new t.Buffer([31,67,182,117])}),i.push({name:"SeekPosition",type:"u",data:v(e+n)}),i.push({name:"Seek",type:"m",isEnd:!0})})),i}(r,n)),f(s,"SeekHead",c,!0),s}function f(e,t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49776	138.199.15.193	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:23 UTC	579	OUT	GET /m42xj3qw.json HTTP/1.1 Host: l.getsitecontrol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:23 UTC	1199	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-MS1-891 CDN-PullZone: 89704 CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=0 ETag: W/"be46a8e35c1d25ea8d526c40e0010ecf" Last-Modified: Thu, 08 Aug 2024 11:56:07 GMT CDN-CachedAt: 11/26/2024 19:17:29 x-amz-id-2: c9Yey7s4dp5ShjuFp+kSl8zBN+rDjvssURjIE4jDvSoRYKDsCf/tQhKULOaTbY8a0zWOjZMk/34= x-amz-request-id: QTVA20JPEAH11X48 x-amz-server-side-encryption: AES256 CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 891 Cross-Origin-Resource-Policy: cross-origin CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 376b19c87a3952fb96ee22085bbf2e82 CDN-Cache: REVALIDATED
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 7b 0a 20 20 20 20 22 77 69 64 67 65 74 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 22 3a 20 32 34 38 34 36 38 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 66 6f 72 6d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 61 79 6f 75 74 22 3a 20 22 66 75 6c 6c 73 63 72 65 65 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6f 72 74 5f 6f 72 64 65 72 22 3a 20 31 33 31 2e 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 44 75 6e 6e 69 6e 67 2e 20 5c 75 30 34 31 64 5c 75 30 34 33 35 5c 75 30 34 34 33 5c 75 30 34 33 34 5c 75 30 34 33 30 5c 75 30 34 34 37 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 66 20 5c 75 30 34 33 65 5c 75 30 34 33 66 Data Ascii: 3ff9{ "widgets": [ { "id": 248468, "type": "form", "layout": "fullscreen", "sort_order": 131.0, "name": "Dunning. \u041d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043e\u043f
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 20 22 61 6e 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 72 61 74 69 6f 6e 22 3a 20 22 61 6e 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 22 3a 20 22 54 61 72 67 65 74 69 6e 67 47 72 6f 75 70 53 74 61 72 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000 "and" } ], "operation": "and" }, { "id": "TargetingGroupStart",
2024-12-20 20:41:23 UTC	9	IN	Data Raw: 22 2c 0a 20 20 20 20 0d 0a Data Ascii: ",
2024-12-20 20:41:23 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 72 61 74 69 6f 6e 22 3a 20 22 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 69 73 4f 72 67 4f 77 6e 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000 "operation": "=" }, { "name": "isOrgOwner",
2024-12-20 20:41:23 UTC	8	IN	Data Raw: 20 20 20 20 20 20 0d 0a Data Ascii:
2024-12-20 20:41:24 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 6c 6f 63 61 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 2f 77 73 2a 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 72 61 74 69 6f 6e 22 3a 20 22 6d 61 74 63 68 55 72 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000 "type": "location", "value": "/ws*", "operation": "matchUrl" }
2024-12-20 20:41:24 UTC	8	IN	Data Raw: 2e 69 6e 70 75 74 0d 0a Data Ascii: .input
2024-12-20 20:41:24 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 2d 63 68 65 63 6b 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 20 2b 20 73 70 61 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 34 30 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 63 68 65 63 6b 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 61 64 69 6f 27 5d 20 2b 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 5c 6e 2e 69 6e 70 75 74 2d 63 68 65 63 6b 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 20 2b 20 73 70 61 6e 3a 62 65 66 6f 72 65 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 5c 6e 20 20 74 6f 70 3a 20 30 3b 5c 6e 20 20 6c 65 66 74 3a 20 30 3b 5c 6e 20 20 62 61 63 6b 67 Data Ascii: 4000-check label input[type='checkbox'] + span {\n padding-left: 40px;\n}\n.input-check label input[type='radio'] + span:before,\n.input-check label input[type='checkbox'] + span:before {\n width: 24px;\n height: 24px;\n top: 0;\n left: 0;\n backg
2024-12-20 20:41:24 UTC	8	IN	Data Raw: 6f 72 64 65 72 2d 0d 0a Data Ascii: order-
2024-12-20 20:41:24 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 30 66 30 66 30 66 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 20 7b 5c 6e 20 20 72 69 67 68 74 3a 20 63 61 6c 63 28 31 30 30 25 20 2b 20 31 30 70 78 29 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 2c 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 3a 61 66 74 65 72 20 7b 5c 6e 20 20 74 6f 70 3a 20 35 30 25 3b 5c 6e 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 35 30 25 2c 20 30 29 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 3a 61 66 74 65 72 20 7b 5c 6e 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 23 30 66 30 66 30 66 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 Data Ascii: 4000bottom-color: #0f0f0f;\n}\n.tooltip-left {\n right: calc(100% + 10px);\n}\n.tooltip-left,\n.tooltip-left:after {\n top: 50%;\n transform: translate3d(0, -50%, 0);\n}\n.tooltip-left:after {\n left: 100%;\n border-left-color: #0f0f0f;\n}\n.toolti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49780	138.199.15.193	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:23 UTC	355	OUT	GET /m42xj3qw.js HTTP/1.1 Host: l.getsitecontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:23 UTC	1190	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:23 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-MS1-891 CDN-PullZone: 89704 CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=0 ETag: W/"cbeb922a6533441a6f3f5a3586235296" Last-Modified: Thu, 08 Aug 2024 11:56:07 GMT CDN-CachedAt: 12/20/2024 20:41:21 x-amz-id-2: DU/+m605lPxn28evGSau2AJqPfKUXbYQMtsBejs+htyXWskmNKnI/Ieu5ATeJuv5WckIsBfJeQE= x-amz-request-id: TMQZW0Z04Y3FQVVQ x-amz-server-side-encryption: AES256 CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 891 Cross-Origin-Resource-Policy: cross-origin CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: f03b5a54c473748e645bd9503e991469 CDN-Cache: HIT
2024-12-20 20:41:23 UTC	440	IN	Data Raw: 31 62 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 2e 71 3d 6e 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 74 2e 67 73 63 3d 74 2e 67 73 63 7c 7c 6e 3b 76 61 72 20 73 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 73 2e 6f 70 65 6e 28 22 67 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 2e 67 65 74 73 69 74 65 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 2f 6d 34 32 78 6a 33 71 77 2e 6a 73 6f 6e 22 2c 21 30 29 2c 73 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 Data Ascii: 1b1"use strict";!function(t,e){if(!e.documentMode){var n=function(){(n.q=n.q\|\|[]).push(arguments)};t.gsc=t.gsc\|\|n;var s=new XMLHttpRequest;s.open("get","https://l.getsitecontrol.com/m42xj3qw.json",!0),s.onload=function(){var n=JSON.parse(s.responseText)
2024-12-20 20:41:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49781	216.239.36.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:23 UTC	1639	OUT	POST /g/collect?v=2&tid=G-7ZKFB3S0PN&gtm=45he4cc1v888117676za204&_p=1734727272303&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=668868513.1734727275&ul=en-us&sr=1280x1024&_fplc=0&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&_eu=EEA&_s=2&sid=1734727275&sct=1&seg=0&dl=https%3A%2F%2Fpremiumgain.nimbusweb.me%2Fshare%2F11450334%2Fots3f4w6xehf2feb09wy&dt=BIA%20-%20FuseBase&en=scroll&ep.link_attribution=true&epn.percent_scrolled=90&tfd=41138 HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; FPLC=ofO4FpcDezG1dl58MDyuADvT%2FeF%2BxQJfTq%2FKO0asR468Pbu9M2rPdIFsxabs1HJqjbHu2g1tje7h%2BxZ3Iq6ZaCPqyytMxuMr7WfyOevZmYNWs34R4GipsUxwu9xXpg%3D%3D; _ga_7G2K66TV09=GS1.1.1734727280.1.0.1734727280.0.0.0
2024-12-20 20:41:23 UTC	479	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:23 GMT Content-Length: 0 set-cookie: FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; Max-Age=63072000; Domain=nimbusweb.me; Path=/; Secure; HttpOnly set-cookie: FPLC=Llrk4KxLhgn6iMHXHj1jgO25v2PrgXpd%2BOKot1VpK5i61QzTXF1G%2FM6srP0tcqUBseu0Ux%2BlT3zQh5lyiXj%2Byz30td4%2BDvxGkWrauBmaxRnfb3pscOmm0c%2FqHxKWCQ%3D%3D; Max-Age=72000; Domain=nimbusweb.me; Path=/; Secure Via: 1.1 google Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49782	216.239.34.21	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:24 UTC	1399	OUT	GET /g/collect?v=2&tid=G-7ZKFB3S0PN&gtm=45he4cc1v888117676za204&_p=1734727272303&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=668868513.1734727275&ul=en-us&sr=1280x1024&_fplc=0&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&_eu=EEA&_s=2&sid=1734727275&sct=1&seg=0&dl=https%3A%2F%2Fpremiumgain.nimbusweb.me%2Fshare%2F11450334%2Fots3f4w6xehf2feb09wy&dt=BIA%20-%20FuseBase&en=scroll&ep.link_attribution=true&epn.percent_scrolled=90&tfd=41138 HTTP/1.1 Host: stt.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; _ga=GA1.1.668868513.1734727275; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; _ga_7G2K66TV09=GS1.1.1734727280.1.0.1734727280.0.0.0; FPLC=Llrk4KxLhgn6iMHXHj1jgO25v2PrgXpd%2BOKot1VpK5i61QzTXF1G%2FM6srP0tcqUBseu0Ux%2BlT3zQh5lyiXj%2Byz30td4%2BDvxGkWrauBmaxRnfb3pscOmm0c%2FqHxKWCQ%3D%3D
2024-12-20 20:41:25 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:25 GMT Content-Length: 0 set-cookie: FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; Max-Age=63072000; Domain=nimbusweb.me; Path=/; Secure; HttpOnly set-cookie: FPLC=PjNtgvbTHK3i1VawWzxllJ%2BJvx8%2BcjF7eIPtAfv8tBBqvAhYnT1aq1CBvAgVFV01OqVJM4oa896p2EM3TF9O1MNE0h1WrmKcgi21Zi5M9fdRDyu8tx60BOy%2Friyb0A%3D%3D; Max-Age=72000; Domain=nimbusweb.me; Path=/; Secure Via: 1.1 google Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49783	138.199.15.193	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:25 UTC	357	OUT	GET /m42xj3qw.json HTTP/1.1 Host: l.getsitecontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:26 UTC	1191	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:26 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-MS1-891 CDN-PullZone: 89704 CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=0 ETag: W/"be46a8e35c1d25ea8d526c40e0010ecf" Last-Modified: Thu, 08 Aug 2024 11:56:07 GMT CDN-CachedAt: 11/26/2024 19:17:29 x-amz-id-2: c9Yey7s4dp5ShjuFp+kSl8zBN+rDjvssURjIE4jDvSoRYKDsCf/tQhKULOaTbY8a0zWOjZMk/34= x-amz-request-id: QTVA20JPEAH11X48 x-amz-server-side-encryption: AES256 CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 891 Cross-Origin-Resource-Policy: cross-origin CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 2f52a0a970128b18e349e58a3ae11e36 CDN-Cache: HIT
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 7b 0a 20 20 20 20 22 77 69 64 67 65 74 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 22 3a 20 32 34 38 34 36 38 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 66 6f 72 6d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 61 79 6f 75 74 22 3a 20 22 66 75 6c 6c 73 63 72 65 65 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6f 72 74 5f 6f 72 64 65 72 22 3a 20 31 33 31 2e 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 44 75 6e 6e 69 6e 67 2e 20 5c 75 30 34 31 64 5c 75 30 34 33 35 5c 75 30 34 34 33 5c 75 30 34 33 34 5c 75 30 34 33 30 5c 75 30 34 34 37 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 66 20 5c 75 30 34 33 65 5c 75 30 34 33 66 Data Ascii: 3ff9{ "widgets": [ { "id": 248468, "type": "form", "layout": "fullscreen", "sort_order": 131.0, "name": "Dunning. \u041d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043e\u043f
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 20 22 61 6e 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 72 61 74 69 6f 6e 22 3a 20 22 61 6e 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 22 3a 20 22 54 61 72 67 65 74 69 6e 67 47 72 6f 75 70 53 74 61 72 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000 "and" } ], "operation": "and" }, { "id": "TargetingGroupStart",
2024-12-20 20:41:26 UTC	9	IN	Data Raw: 22 2c 0a 20 20 20 20 0d 0a Data Ascii: ",
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 72 61 74 69 6f 6e 22 3a 20 22 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 69 73 4f 72 67 4f 77 6e 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000 "operation": "=" }, { "name": "isOrgOwner",
2024-12-20 20:41:26 UTC	8	IN	Data Raw: 20 20 20 20 20 20 0d 0a Data Ascii:
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 6c 6f 63 61 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 2f 77 73 2a 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 70 65 72 61 74 69 6f 6e 22 3a 20 22 6d 61 74 63 68 55 72 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000 "type": "location", "value": "/ws*", "operation": "matchUrl" }
2024-12-20 20:41:26 UTC	8	IN	Data Raw: 2e 69 6e 70 75 74 0d 0a Data Ascii: .input
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 2d 63 68 65 63 6b 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 20 2b 20 73 70 61 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 34 30 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 63 68 65 63 6b 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 61 64 69 6f 27 5d 20 2b 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 5c 6e 2e 69 6e 70 75 74 2d 63 68 65 63 6b 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 20 2b 20 73 70 61 6e 3a 62 65 66 6f 72 65 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 5c 6e 20 20 74 6f 70 3a 20 30 3b 5c 6e 20 20 6c 65 66 74 3a 20 30 3b 5c 6e 20 20 62 61 63 6b 67 Data Ascii: 4000-check label input[type='checkbox'] + span {\n padding-left: 40px;\n}\n.input-check label input[type='radio'] + span:before,\n.input-check label input[type='checkbox'] + span:before {\n width: 24px;\n height: 24px;\n top: 0;\n left: 0;\n backg
2024-12-20 20:41:26 UTC	8	IN	Data Raw: 6f 72 64 65 72 2d 0d 0a Data Ascii: order-
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 30 66 30 66 30 66 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 20 7b 5c 6e 20 20 72 69 67 68 74 3a 20 63 61 6c 63 28 31 30 30 25 20 2b 20 31 30 70 78 29 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 2c 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 3a 61 66 74 65 72 20 7b 5c 6e 20 20 74 6f 70 3a 20 35 30 25 3b 5c 6e 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 35 30 25 2c 20 30 29 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 6c 65 66 74 3a 61 66 74 65 72 20 7b 5c 6e 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 23 30 66 30 66 30 66 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 Data Ascii: 4000bottom-color: #0f0f0f;\n}\n.tooltip-left {\n right: calc(100% + 10px);\n}\n.tooltip-left,\n.tooltip-left:after {\n top: 50%;\n transform: translate3d(0, -50%, 0);\n}\n.tooltip-left:after {\n left: 100%;\n border-left-color: #0f0f0f;\n}\n.toolti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49785	143.244.56.58	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:25 UTC	559	OUT	GET /widgets/es6/runtime.0e5d0b4.js HTTP/1.1 Host: s2.getsitecontrol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:26 UTC	1247	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:26 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 156742 Connection: close Vary: Accept-Encoding Server: BunnyCDN-FR1-1221 CDN-PullZone: 83560 CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=22809600 ETag: "9e19b6354dff8d3da3d88d0d265e7f5c" Last-Modified: Mon, 13 May 2024 16:16:54 GMT x-amz-id-2: /hJmzXmLPpylG/NFn+4gn+8NoEjwd2OTLanbiQ3vaBxsugFONtK9K6Te26E1g5o/DmnyfognAnSO4thgnCRQUbDXUpB4IdcUCTLpqWAGIHw= x-amz-request-id: 3RN9FKDYWB9Q09NY x-amz-server-side-encryption: AES256 CDN-ProxyVer: 1.07 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/18/2024 12:43:11 CDN-EdgeStorageId: 1216 Cross-Origin-Resource-Policy: cross-origin CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: cbbe6d09f7b08a1d3a040425e75f1f85 CDN-Cache: HIT Accept-Ranges: bytes
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 2f 2a 21 20 40 62 75 69 6c 64 20 32 2e 31 32 2e 30 20 67 65 74 73 69 74 65 63 6f 6e 74 72 6f 6c 20 31 34 37 65 62 31 65 61 31 32 36 65 30 38 61 32 63 39 33 62 20 2a 2f 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 36 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 3d 6e 2e 6e 6d 64 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 65 26 26 65 2e 6e 6f 64 65 54 79 70 65 2c 74 26 26 74 2e 6e 6f 64 65 54 79 70 65 3b 76 61 72 20 6f 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 67 26 26 6e 2e 67 3b 6f 2e 67 6c 6f 62 61 6c 21 3d 3d 6f 26 26 6f 2e 77 69 6e 64 6f 77 21 3d 3d 6f 26 26 6f 2e 73 65 6c 66 3b 76 61 72 20 73 2c 61 3d 32 31 34 37 34 38 33 36 34 37 2c 63 3d 33 36 2c 6c 3d 2f 5e 78 6e 2d 2d 2f 2c 75 3d 2f 5b 5e 5c 78 32 Data Ascii: /! @build 2.12.0 getsitecontrol 147eb1ea126e08a2c93b /(()=>{var t={615:function(t,e,n){var r;t=n.nmd(t),function(i){e&&e.nodeType,t&&t.nodeType;var o="object"==typeof n.g&&n.g;o.global!==o&&o.window!==o&&o.self;var s,a=2147483647,c=36,l=/^xn--/,u=/[^\x2
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 72 3e 74 68 69 73 2e 6d 61 78 63 69 64 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 61 78 20 63 69 64 72 22 29 7d 69 66 28 21 74 68 69 73 2e 6f 63 74 65 74 73 7c 7c 69 73 4e 61 4e 28 74 68 69 73 2e 76 65 72 73 69 6f 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 61 72 73 65 20 65 72 72 6f 72 22 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 74 68 69 73 2e 6f 63 74 65 74 73 29 69 66 28 24 28 65 29 29 7b 74 68 69 73 2e 6d 61 73 6b 65 64 3d 21 30 3b 62 72 65 61 6b 7d 69 66 28 21 69 73 4e 61 4e 28 74 68 69 73 2e 63 69 64 72 29 26 26 74 68 69 73 2e 6d 61 73 6b 65 64 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 69 64 72 20 61 6e 64 20 6d 61 73 6b 65 64 22 29 7d 6d 61 74 63 68 28 74 29 7b 69 66 28 74 2e 76 65 72 73 Data Ascii: r>this.maxcidr)throw new Error("max cidr")}if(!this.octets\|\|isNaN(this.version))throw new Error("parse error");for(const e of this.octets)if($(e)){this.masked=!0;break}if(!isNaN(this.cidr)&&this.masked)throw new Error("cidr and masked")}match(t){if(t.vers
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 68 69 73 2e 72 75 6e 74 69 6d 65 3d 74 2c 74 68 69 73 2e 5f 63 72 65 61 74 65 64 3d 7b 7d 7d 61 73 79 6e 63 20 69 6e 69 74 69 61 6c 69 7a 65 28 74 29 7b 74 68 69 73 2e 72 75 6e 74 69 6d 65 2e 72 65 6e 64 65 72 65 72 2e 69 73 52 65 6e 64 65 72 65 64 28 29 7c 7c 74 68 69 73 2e 72 75 6e 74 69 6d 65 2e 72 65 6e 64 65 72 65 72 2e 72 65 6e 64 65 72 28 74 68 69 73 2e 72 75 6e 74 69 6d 65 2e 61 72 67 73 2e 67 65 74 50 61 72 61 6d 73 28 29 29 2c 74 26 26 28 74 68 69 73 2e 77 69 64 67 65 74 73 7c 7c 28 74 68 69 73 2e 77 69 64 67 65 74 73 3d 74 2e 73 6f 72 74 28 28 28 74 2c 65 29 3d 3e 28 65 2e 73 6f 72 74 5f 6f 72 64 65 72 7c 7c 30 29 2d 28 74 2e 73 6f 72 74 5f 6f 72 64 65 72 7c 7c 30 29 29 29 2c 74 68 69 73 2e 77 69 64 67 65 74 73 2e 6c 65 6e 67 74 68 26 26 28 74 Data Ascii: his.runtime=t,this._created={}}async initialize(t){this.runtime.renderer.isRendered()\|\|this.runtime.renderer.render(this.runtime.args.getParams()),t&&(this.widgets\|\|(this.widgets=t.sort(((t,e)=>(e.sort_order\|\|0)-(t.sort_order\|\|0))),this.widgets.length&&(t
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 2c 73 6b 75 3a 74 2e 73 6b 75 2c 6f 70 74 69 6f 6e 73 3a 6e 2e 6f 70 74 69 6f 6e 73 2e 72 65 64 75 63 65 28 28 28 65 2c 6e 2c 72 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 7b 5b 6e 5d 3a 74 2e 6f 70 74 69 6f 6e 73 5b 72 5d 7d 29 29 2c 7b 7d 29 2c 62 61 72 63 6f 64 65 3a 74 2e 62 61 72 63 6f 64 65 2c 77 65 69 67 68 74 3a 74 2e 77 65 69 67 68 74 2c 61 76 61 69 6c 61 62 6c 65 3a 74 2e 61 76 61 69 6c 61 62 6c 65 2c 74 61 78 61 62 6c 65 3a 74 2e 74 61 78 61 62 6c 65 2c 72 65 71 75 69 72 65 73 5f 73 68 69 70 70 69 6e 67 3a 74 2e 72 65 71 75 69 72 65 73 5f 73 68 69 70 70 69 6e 67 7d 29 7d 29 29 29 3b 6c 65 74 20 6f 3d 5f 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: ,sku:t.sku,options:n.options.reduce(((e,n,r)=>Object.assign(Object.assign({},e),{[n]:t.options[r]})),{}),barcode:t.barcode,weight:t.weight,available:t.available,taxable:t.taxable,requires_shipping:t.requires_shipping})})));let o=_(window.document.location
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 5b 5d 2c 6e 75 6c 6c 3d 3d 74 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 28 70 28 74 29 3f 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6a 28 74 2c 65 29 7d 29 29 3a 65 2e 70 75 73 68 28 74 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 74 2e 6b 65 79 2c 6f 3d 74 2e 74 79 70 65 2c 73 3d 6e 2d 31 2c 61 3d 6e 2b 31 2c 63 3d 65 5b 6e 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 63 7c 7c 63 26 26 69 3d 3d 63 2e 6b 65 79 26 26 6f 3d 3d 3d 63 2e 74 79 70 65 26 26 30 3d 3d 28 31 33 31 30 37 32 26 63 2e 5f 5f 75 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 72 3e 28 6e 75 6c 6c Data Ascii: ;return e}function j(t,e){return e=e\|\|[],null==t\|\|"boolean"==typeof t\|\|(p(t)?t.some((function(t){j(t,e)})):e.push(t)),e}function T(t,e,n,r){var i=t.key,o=t.type,s=n-1,a=n+1,c=e[n];if(null===c\|\|c&&i==c.key&&o===c.type&&0==(131072&c.__u))return n;if(r>(null
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 2c 22 21 5e 22 28 2e 2e 2e 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 3c 32 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 5b 65 2c 6e 5d 3d 74 3b 72 65 74 75 72 6e 21 42 74 28 65 29 7c 7c 21 42 74 28 6e 29 7c 7c 30 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 6e 29 7d 2c 24 28 2e 2e 2e 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 3c 32 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 5b 65 2c 6e 5d 3d 74 3b 72 65 74 75 72 6e 20 42 74 28 65 29 26 26 42 74 28 6e 29 26 26 65 2e 65 6e 64 73 57 69 74 68 28 6e 29 7d 2c 22 21 24 22 28 2e 2e 2e 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 3c 32 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 5b 65 2c 6e 5d 3d 74 3b 72 65 74 75 72 6e 21 42 74 28 65 29 7c 7c 21 42 74 28 6e 29 7c 7c 21 65 2e 65 6e 64 73 57 69 74 68 28 6e 29 7d 2c 69 6e 28 2e 2e 2e 74 29 Data Ascii: ,"!^"(...t){if(t.length<2)return;const[e,n]=t;return!Bt(e)\|\|!Bt(n)\|\|0!==e.indexOf(n)},$(...t){if(t.length<2)return;const[e,n]=t;return Bt(e)&&Bt(n)&&e.endsWith(n)},"!$"(...t){if(t.length<2)return;const[e,n]=t;return!Bt(e)\|\|!Bt(n)\|\|!e.endsWith(n)},in(...t)
2024-12-20 20:41:26 UTC	16384	IN	Data Raw: 6f 74 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 29 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 72 6f 6f 74 2d 62 67 29 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 72 6f 6f 74 2d 63 6f 6c 6f 72 29 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 5c 6e 7d 5c 6e 2e 62 61 63 6b 2c 5c 6e 2e 63 6c 6f 73 65 2c 5c 6e 2e 63 61 72 65 74 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 6e 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 5c 6e 7d 5c 6e 2e 62 61 63 6b 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 5c 6e 20 20 74 6f 70 3a 20 30 3b 5c 6e 20 20 72 69 67 68 74 3a 20 34 31 70 78 3b Data Ascii: ot-padding-left);\n background-color: var(--root-bg);\n color: var(--root-color);\n border-radius: 8px;\n}\n.back,\n.close,\n.caret {\n padding: 20px;\n position: absolute;\n z-index: 1;\n}\n.back {\n padding-right: 10px;\n top: 0;\n right: 41px;
2024-12-20 20:41:27 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 5c 6e 20 20 72 65 73 69 7a 65 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 69 6e 70 75 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 5c 6e 74 65 78 74 61 72 65 61 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 5c 6e 73 65 6c 65 63 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 30 30 30 70 78 20 77 68 69 74 65 20 69 6e 73 65 74 3b 5c 6e 7d 5c 6e 6c 61 62 65 6c 2c 5c 6e 62 75 74 74 6f 6e 2c 5c 6e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 5c 6e 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 5c 6e 62 75 74 74 Data Ascii: overflow: auto;\n resize: none;\n}\ninput:-webkit-autofill,\ntextarea:-webkit-autofill,\nselect:-webkit-autofill {\n background-color: transparent;\n -webkit-box-shadow: 0 0 0 1000px white inset;\n}\nlabel,\nbutton,\nbutton:focus,\nbutton:active,\nbutt
2024-12-20 20:41:27 UTC	16384	IN	Data Raw: 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 66 6f 72 6d 22 29 3b 65 26 26 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 3f 65 3d 6e 65 77 20 45 76 65 6e 74 28 74 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 45 76 65 6e 74 28 74 2c 21 30 2c 21 30 29 29 2c 65 7d 28 22 73 75 62 6d 69 74 22 29 29 7d 29 2c 5b 5d 29 3b 72 65 74 75 72 6e 20 69 74 28 22 64 69 76 22 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 72 65 66 3a Data Ascii: t)\|\|void 0===t?void 0:t.querySelector("form");e&&e.dispatchEvent(function(t){let e;return"function"==typeof Event?e=new Event(t,{cancelable:!0}):(e=document.createEvent("Event"),e.initEvent(t,!0,!0)),e}("submit"))}),[]);return it("div",Object.assign({ref:
2024-12-20 20:41:27 UTC	9286	IN	Data Raw: 6c 64 72 65 6e 3a 69 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 2e 34 35 38 20 31 2e 34 35 38 6c 32 31 2e 30 38 34 20 32 31 2e 30 38 34 6d 30 2d 32 31 2e 30 38 34 4c 31 2e 34 35 38 20 32 32 2e 35 34 32 22 7d 29 7d 29 29 7d 29 29 7d 2c 6e 6f 72 6d 61 6c 3a 51 72 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 69 28 7b 6c 61 62 65 6c 3a 74 7d 29 7b 63 6f 6e 73 74 7b 74 65 6d 70 6c 61 74 65 3a 65 7d 3d 44 72 28 29 3b 72 65 74 75 72 6e 20 69 74 28 22 73 70 61 6e 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 65 28 74 29 7d 29 7d 63 6f 6e 73 74 20 69 69 3d 52 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 7b 62 75 74 74 6f 6e 3a 6e 2c 6f 6e 41 63 74 69 6f 6e 3a 72 7d 3d 74 2c 69 3d 28 30 2c 76 6e 2e 5f 54 29 28 74 2c 5b 22 62 75 74 74 6f 6e 22 2c 22 6f 6e 41 63 74 69 Data Ascii: ldren:it("path",{d:"M1.458 1.458l21.084 21.084m0-21.084L1.458 22.542"})}))}))},normal:Qr};function ri({label:t}){const{template:e}=Dr();return it("span",{children:e(t)})}const ii=Re((function(t,e){var{button:n,onAction:r}=t,i=(0,vn._T)(t,["button","onActi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49787	66.102.1.156	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:26 UTC	868	OUT	POST /g/collect?v=2&tid=G-L1W7VLTSPG&cid=668868513.1734727275&gtm=45je4cc1v9126568603za200&aip=1&dma=0&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:26 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://premiumgain.nimbusweb.me Date: Fri, 20 Dec 2024 20:41:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49790	142.250.181.110	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:26 UTC	1293	OUT	POST /g/collect?v=2&tid=G-L1W7VLTSPG&gtm=45je4cc1v9126568603za200&_p=1734727272303&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=668868513.1734727275&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&_eu=EAAI&_s=1&sid=1734727283&sct=1&seg=0&dl=https%3A%2F%2Fpremiumgain.nimbusweb.me%2Fshare%2F11450334%2Fots3f4w6xehf2feb09wy&dt=BIA%20-%20FuseBase&en=page_view&_fv=1&_ss=1&ep.link_attribution=true&tfd=43823 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:27 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://premiumgain.nimbusweb.me Date: Fri, 20 Dec 2024 20:41:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49792	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:27 UTC	618	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bia.twuseb.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:30 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:29 GMT Content-Type: application/x-javascript Content-Length: 49907 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:23 GMT etag: 0x8DCE31D8CF87EF9 x-ms-request-id: 1906404f-c01e-002a-0cc2-4c23eb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204129Z-186c86bbc58vm967hC1SJC2umn0000000rcg00000000ewgf x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:30 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2024-12-20 20:41:30 UTC	14460	IN	Data Raw: f1 c3 7e 2f 9b bc 8d d2 cd 1c cd 74 23 0e 4e 2a e9 06 24 7a 6b b3 de c2 27 69 f0 fe 12 7a de 2e 39 3e 00 d9 82 9b 2c d1 57 92 8f 4d 90 cb 5b 25 99 4d 29 af b4 d8 e0 d9 1c b7 f7 e0 2d 58 39 9d e3 4c e0 d9 3b a4 71 e0 03 9e f5 7b 26 1e 84 3a 07 63 c5 0e 11 ea 6f 5a 87 dc 70 c2 81 cc bc 73 04 87 36 7d e9 4d 12 a5 bd d2 e6 3a 3c 2c 69 0e c3 72 24 6e 71 6a dd d2 40 39 82 f8 89 d1 f2 21 e2 2d 5b 29 1e 3e e4 af 22 b2 8d bf 7d ec 7d dc fb b8 6b e4 95 2a 9e b7 b8 9b 43 28 3f 95 c6 a1 6d c4 da 1b 70 01 54 e9 ab ac fb ec 85 e7 e9 04 4f a3 92 74 00 22 5d 85 e1 a4 9a 9f 9a 97 61 14 d0 ef 4b f7 f4 82 54 d2 be 80 cd 15 1e 72 b9 b5 ff 61 70 86 50 1c bf 4d 22 45 4d 42 a9 6e 08 ca 1a b7 59 0a f7 ed 46 26 d3 b7 9b e4 c7 a1 53 63 a8 b3 c0 1b 91 cb 3b 36 35 b1 6d 1b 22 7b 61 Data Ascii: ~/t#N$zk'iz.9>,WM[%M)-X9L;q{&:coZps6}M:<,ir$nqj@9!-[)>"}}kC(?mpTOt"]aKTrapPM"EMBnYF&Sc;65m"{a
2024-12-20 20:41:30 UTC	16384	IN	Data Raw: ce 55 0a db 3f 6a 07 00 13 6a e6 80 04 45 b8 90 5c 35 1d fd 7d ca f7 fe 3e e5 6c 23 95 1d 0e 69 61 37 e7 61 55 fb d2 ad 5a 6b 63 41 92 77 cf 49 77 7b 3b f3 a1 96 bd d7 13 56 4c 94 b9 9a 54 ec c8 1e a8 b8 ba 95 8f 65 ce e3 7f 7c 86 5c 08 48 6a 0b fc cc 2b be b8 3a 11 c3 b5 8a 27 5c 2f 82 64 c3 c9 1a 62 8e 98 a0 4e c4 0a 57 8e d3 92 f9 cb 30 13 36 97 9b 7c de e3 e4 a9 36 57 3c 89 5d 2f c8 39 7b ee 65 18 f7 a5 fd eb be 5b b8 f4 92 24 3c e8 73 28 c8 e9 d1 66 7c 8e 51 e9 73 f9 ca 19 8c aa 70 2f d9 62 ef 9f c3 c9 bf af 1c 87 05 e4 1b 59 f5 fc 1b cb 39 b5 5c 01 12 79 d6 80 94 53 64 7b cf cf 8f f9 e1 89 e7 4a 8e 6f 7b e7 5b 82 7f 82 10 7e 13 9e ef 22 14 f9 05 f1 0a 88 8e d3 d1 b5 00 35 56 df 77 97 21 ae 0f c4 5f c1 ef 6b ce 32 ba ab 3d cb 88 1b 54 c9 ce 6c 24 29 Data Ascii: U?jjE\5}>l#ia7aUZkcAwIw{;VLTe\|\Hj+:'\/dbNW06\|6W<]/9{e[$<s(f\|Qsp/bY9\ySd{Jo{[~"5Vw!_k2=Tl$)
2024-12-20 20:41:30 UTC	3485	IN	Data Raw: 4c 05 89 cf 6d d0 a0 46 2b 69 59 7d b7 b7 27 db 4a 9a 05 ed 56 56 33 ef f5 4a a6 b6 b2 d3 9a 52 5f 95 02 f3 84 f3 97 83 10 94 b9 95 28 69 1a 7e 9f 7c 4b b4 da 51 c3 35 10 6e 63 b0 bb 3b 78 93 0f b4 85 4d 80 cb 85 8e 3a 1a 8e be 52 28 5f 95 ac 09 27 a0 ba f6 f6 f6 51 99 5a 26 03 a5 5a cc 5b 28 f3 72 50 4a f9 47 28 cf 94 9d 0e 48 bb 90 a8 43 02 dd d7 1f c3 c7 7b 7b 2c 16 d2 1a b2 cb 71 df 0b 55 9a ea fa c0 6c 05 e0 67 f8 c9 40 8f 89 34 63 a3 86 20 5c b3 ea 31 f5 2f 15 2f 1e f9 71 32 5d 19 d6 dc 71 69 19 0c e4 d3 cc e2 c9 cf a1 e3 0d e8 41 63 a0 85 05 b4 ef f8 54 78 76 71 84 85 18 00 af a6 7c 49 4b 76 01 7f 6f 23 69 34 89 16 4f 31 b5 af 3e 4c b9 91 8a d1 49 19 19 b2 e0 75 12 2c 7d 00 c9 e0 57 df 22 52 72 9f 7d c0 58 e7 4a 68 3d f1 55 9c ba 75 cb c3 06 ca 42 Data Ascii: LmF+iY}'JVV3JR_(i~\|KQ5nc;xM:R(_'QZ&Z[(rPJG(HC{{,qUlg@4c \1//q2]qiAcTxvq\|IKvo#i4O1>LIu,}W"Rr}XJh=UuB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49797	143.244.56.58	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:28 UTC	375	OUT	GET /widgets/es6/runtime.0e5d0b4.js HTTP/1.1 Host: s2.getsitecontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:29 UTC	1247	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:28 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 156742 Connection: close Vary: Accept-Encoding Server: BunnyCDN-FR1-1221 CDN-PullZone: 83560 CDN-Uid: e3a1246b-2fdd-4153-9207-6ca707c9379d CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=22809600 ETag: "9e19b6354dff8d3da3d88d0d265e7f5c" Last-Modified: Mon, 13 May 2024 16:16:54 GMT x-amz-id-2: /hJmzXmLPpylG/NFn+4gn+8NoEjwd2OTLanbiQ3vaBxsugFONtK9K6Te26E1g5o/DmnyfognAnSO4thgnCRQUbDXUpB4IdcUCTLpqWAGIHw= x-amz-request-id: 3RN9FKDYWB9Q09NY x-amz-server-side-encryption: AES256 CDN-ProxyVer: 1.07 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/18/2024 12:43:11 CDN-EdgeStorageId: 1216 Cross-Origin-Resource-Policy: cross-origin CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 73f8093ed2d7f2abb98b96278a1f8089 CDN-Cache: HIT Accept-Ranges: bytes
2024-12-20 20:41:29 UTC	15137	IN	Data Raw: 2f 2a 21 20 40 62 75 69 6c 64 20 32 2e 31 32 2e 30 20 67 65 74 73 69 74 65 63 6f 6e 74 72 6f 6c 20 31 34 37 65 62 31 65 61 31 32 36 65 30 38 61 32 63 39 33 62 20 2a 2f 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 36 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 3d 6e 2e 6e 6d 64 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 65 26 26 65 2e 6e 6f 64 65 54 79 70 65 2c 74 26 26 74 2e 6e 6f 64 65 54 79 70 65 3b 76 61 72 20 6f 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 67 26 26 6e 2e 67 3b 6f 2e 67 6c 6f 62 61 6c 21 3d 3d 6f 26 26 6f 2e 77 69 6e 64 6f 77 21 3d 3d 6f 26 26 6f 2e 73 65 6c 66 3b 76 61 72 20 73 2c 61 3d 32 31 34 37 34 38 33 36 34 37 2c 63 3d 33 36 2c 6c 3d 2f 5e 78 6e 2d 2d 2f 2c 75 3d 2f 5b 5e 5c 78 32 Data Ascii: /! @build 2.12.0 getsitecontrol 147eb1ea126e08a2c93b /(()=>{var t={615:function(t,e,n){var r;t=n.nmd(t),function(i){e&&e.nodeType,t&&t.nodeType;var o="object"==typeof n.g&&n.g;o.global!==o&&o.window!==o&&o.self;var s,a=2147483647,c=36,l=/^xn--/,u=/[^\x2
2024-12-20 20:41:29 UTC	404	IN	Data Raw: 72 73 69 6f 6e 3d 4e 61 4e 2c 74 68 69 73 2e 6d 61 78 63 69 64 72 3d 4e 61 4e 2c 74 68 69 73 2e 6d 61 73 6b 65 64 3d 21 31 2c 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 20 61 64 64 72 22 29 3b 69 66 28 74 2e 6d 61 74 63 68 28 2f 5c 2f 2f 29 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 73 70 6c 69 74 28 22 2f 22 29 3b 74 3d 65 5b 30 5d 2c 74 68 69 73 2e 63 69 64 72 3d 70 61 72 73 65 49 6e 74 28 65 5b 31 5d 29 7d 69 66 28 74 2e 6d 61 74 63 68 28 2f 3a 2f 29 29 7b 69 66 28 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 36 2c 74 68 69 73 2e 6d 61 78 63 69 64 72 3d 31 32 38 2c 74 68 69 73 2e 6f 63 74 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 6d 61 74 63 68 28 4e 2e 6e 61 74 69 76 65 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: rsion=NaN,this.maxcidr=NaN,this.masked=!1,!t)throw new Error("no addr");if(t.match(/\//)){const e=t.split("/");t=e[0],this.cidr=parseInt(e[1])}if(t.match(/:/)){if(this.version=6,this.maxcidr=128,this.octets=function(t){if(t.match(N.native))return function
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 6c 65 74 20 69 3d 38 2d 6e 2c 6f 3d 22 3a 22 3b 66 6f 72 28 3b 69 2d 2d 3b 29 6f 2b 3d 22 30 3a 22 3b 72 65 74 75 72 6e 22 3a 22 3d 3d 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 22 3a 3a 22 2c 6f 29 29 5b 30 5d 26 26 28 74 3d 74 2e 73 6c 69 63 65 28 31 29 29 2c 22 3a 22 3d 3d 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 74 3d 74 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2c 74 2e 73 70 6c 69 74 28 22 3a 22 29 2e 6d 61 70 28 28 74 3d 3e 2f 5c 2a 2f 2e 74 65 73 74 28 74 29 3f 6e 65 77 20 52 65 67 45 78 70 28 60 5e 24 7b 74 2e 72 65 70 6c 61 63 65 28 2f 5c 2a 2f 67 2c 22 2e 2a 22 29 7d 24 60 2c 22 69 22 29 3a 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 29 29 7d 28 74 29 7d 28 74 29 2c 21 74 68 69 73 2e 6f 63 74 65 74 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 Data Ascii: let i=8-n,o=":";for(;i--;)o+="0:";return":"===(t=t.replace("::",o))[0]&&(t=t.slice(1)),":"===t[t.length-1]&&(t=t.slice(0,-1)),t.split(":").map((t=>/\/.test(t)?new RegExp(`^${t.replace(/\/g,".*")}$`,"i"):parseInt(t,16)))}(t)}(t),!this.octets)throw new Er
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 6f 2e 66 6f 72 45 61 63 68 28 28 28 69 2c 6f 29 3d 3e 7b 6c 65 74 20 61 3d 21 31 3b 69 2e 74 79 70 65 3d 3d 3d 51 2e 41 75 74 6f 26 26 21 30 3d 3d 3d 69 2e 76 61 6c 75 65 3f 61 3d 65 3f 21 31 21 3d 3d 74 68 69 73 2e 67 65 6e 65 72 61 6c 52 65 73 75 6c 74 26 26 21 6e 3a 21 30 21 3d 3d 74 68 69 73 2e 67 65 6e 65 72 61 6c 52 65 73 75 6c 74 26 26 6e 3a 5b 61 5d 3d 58 28 74 68 69 73 2e 6d 61 6b 65 54 61 72 67 65 74 69 6e 67 28 5b 69 5d 29 29 28 74 29 2c 72 7c 7c 21 61 7c 7c 73 5b 6f 5d 7c 7c 28 72 3d 69 2e 74 79 70 65 29 2c 22 3d 22 3d 3d 3d 69 2e 6f 70 65 72 61 74 69 6f 6e 26 26 21 30 3d 3d 3d 69 2e 76 61 6c 75 65 7c 7c 28 73 5b 6f 5d 3d 61 29 7d 29 29 2c 69 3d 72 3f 69 26 26 21 65 3a 65 2c 74 68 69 73 2e 67 65 6e 65 72 61 6c 52 65 73 75 6c 74 3d 6e 2c 69 7d Data Ascii: o.forEach(((i,o)=>{let a=!1;i.type===Q.Auto&&!0===i.value?a=e?!1!==this.generalResult&&!n:!0!==this.generalResult&&n:[a]=X(this.makeTargeting([i]))(t),r\|\|!a\|\|s[o]\|\|(r=i.type),"="===i.operation&&!0===i.value\|\|(s[o]=a)})),i=r?i&&!e:e,this.generalResult=n,i}
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 6f 72 2c 74 79 70 65 3a 6e 2e 70 72 6f 64 75 63 74 2e 74 79 70 65 2c 74 69 74 6c 65 3a 6e 2e 70 72 6f 64 75 63 74 2e 76 61 72 69 61 6e 74 73 5b 30 5d 2e 6e 61 6d 65 2e 73 70 6c 69 74 28 22 20 2d 20 22 29 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2e 6a 6f 69 6e 28 22 20 2d 20 22 29 2e 74 72 69 6d 28 29 2c 76 61 72 69 61 6e 74 73 3a 6e 2e 70 72 6f 64 75 63 74 2e 76 61 72 69 61 6e 74 73 2e 6d 61 70 28 28 74 3d 3e 28 7b 69 64 3a 74 2e 69 64 2c 74 69 74 6c 65 3a 74 2e 70 75 62 6c 69 63 5f 74 69 74 6c 65 2c 73 6b 75 3a 74 2e 73 6b 75 2c 70 72 69 63 65 3a 74 2e 70 72 69 63 65 2f 31 30 30 7d 29 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 61 73 79 6e 63 20 67 65 74 50 72 6f 64 75 63 74 28 74 3d 21 31 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 4d 65 74 61 28 Data Ascii: or,type:n.product.type,title:n.product.variants[0].name.split(" - ").slice(0,-1).join(" - ").trim(),variants:n.product.variants.map((t=>({id:t.id,title:t.public_title,sku:t.sku,price:t.price/100})))}))}return e}async getProduct(t=!1){const e=this.getMeta(
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 63 74 6f 72 3d 3d 53 74 72 69 6e 67 3f 5f 28 6e 75 6c 6c 2c 69 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 3a 70 28 69 29 3f 5f 28 76 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 7d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 3a 76 6f 69 64 20 30 3d 3d 3d 69 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 69 2e 5f 5f 62 3e 30 3f 5f 28 69 2e 74 79 70 65 2c 69 2e 70 72 6f 70 73 2c 69 2e 6b 65 79 2c 69 2e 72 65 66 3f 69 2e 72 65 66 3a 6e 75 6c 6c 2c 69 2e 5f 5f 76 29 3a 69 29 3f 28 69 2e 5f 5f 3d 74 2c 69 2e 5f 5f 62 3d 74 2e 5f 5f 62 2b 31 2c 61 3d 54 28 69 2c 6e 2c 73 2c 75 29 2c 69 2e 5f 5f 69 3d 61 2c 6f 3d 6e 75 6c 6c 2c 2d 31 21 3d 3d 61 26 26 28 75 2d 2d 2c 28 6f 3d 6e 5b 61 5d 29 26 26 28 6f 2e 5f 5f 75 7c 3d 31 33 31 30 37 32 29 29 2c 6e 75 6c 6c 3d 3d 6f Data Ascii: ctor==String?_(null,i,null,null,null):p(i)?_(v,{children:i},null,null,null):void 0===i.constructor&&i.__b>0?_(i.type,i.props,i.key,i.ref?i.ref:null,i.__v):i)?(i.__=t,i.__b=t.__b+1,a=T(i,n,s,u),i.__i=a,o=null,-1!==a&&(u--,(o=n[a])&&(o.__u\|=131072)),null==o
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 24 7b 74 7d 60 29 28 2e 2e 2e 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 65 29 29 7d 63 61 74 63 68 28 6e 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 65 72 72 6f 72 20 69 6e 20 65 76 61 6c 75 61 74 69 6e 67 20 27 24 7b 74 7d 27 3a 20 24 7b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 6e 2e 6d 65 73 73 61 67 65 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 60 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 59 74 28 65 29 2e 74 65 73 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 74 2c 65 29 7b 72 65 74 75 72 6e 21 28 21 47 74 28 74 29 26 26 21 47 74 28 65 29 29 26 26 28 47 74 28 74 29 7c 7c 28 74 3d 5b 74 5d 29 2c 47 74 28 65 29 7c 7c 28 65 3d 5b 65 5d 29 2c 74 2e 73 6f 6d 65 28 28 74 3d Data Ascii: eturn ${t}`)(...Object.values(e))}catch(n){throw new Error(`error in evaluating '${t}': ${n instanceof Error?n.message:"unknown"}`)}};function Qt(t,e){return Yt(e).test(t)}function te(t,e){return!(!Gt(t)&&!Gt(e))&&(Gt(t)\|\|(t=[t]),Gt(e)\|\|(e=[e]),t.some((t=
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 69 73 2e 70 72 6f 70 73 2c 7b 68 6f 73 74 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 6e 2c 68 6f 73 74 52 65 66 3a 72 7d 3d 74 2c 69 3d 28 30 2c 76 6e 2e 5f 54 29 28 74 2c 5b 22 68 6f 73 74 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 68 6f 73 74 52 65 66 22 5d 29 3b 72 65 74 75 72 6e 20 69 74 28 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 69 2c 7b 72 65 66 3a 72 7d 29 29 7d 5f 75 70 64 61 74 65 28 74 2c 65 3d 21 31 29 7b 56 28 65 3f 6e 75 6c 6c 3a 69 74 28 77 6e 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 63 6f 6e 74 65 78 74 3a 74 68 69 73 2e 63 6f 6e 74 65 78 74 7d 2c 7b 63 68 69 6c 64 72 65 6e 3a 74 2e 63 68 69 6c 64 72 65 6e 7d 29 29 2c 74 68 69 73 2e 5f 73 68 61 64 6f 77 29 7d 7d 76 61 72 20 78 6e 3d 6e 28 36 38 31 29 2c 6b 6e 3d 6e 2e 6e 28 Data Ascii: is.props,{host:e,children:n,hostRef:r}=t,i=(0,vn._T)(t,["host","children","hostRef"]);return it(e,Object.assign({},i,{ref:r}))}_update(t,e=!1){V(e?null:it(wn,Object.assign({context:this.context},{children:t.children})),this._shadow)}}var xn=n(681),kn=n.n(
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 5c 6e 62 75 74 74 6f 6e 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 69 6e 70 75 74 2c 5c 6e 74 65 78 74 61 72 65 61 2c 5c 6e 73 65 6c 65 63 74 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 3a 20 30 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 20 6e 6f 6e 65 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 5c 6e 7d 5c 6e 61 2c 5c 6e 61 20 2a 2c 5c 6e 69 6e 70 75 74 Data Ascii: \nbutton {\n -webkit-appearance: none;\n -moz-appearance: none;\n appearance: none;\n}\ninput,\ntextarea,\nselect {\n margin: 0;\n border: 0;\n background: none;\n font-family: inherit;\n outline: 0 none;\n font-size: inherit;\n}\na,\na *,\ninput
2024-12-20 20:41:29 UTC	16384	IN	Data Raw: 47 6e 28 74 2c 65 29 29 3b 72 65 74 75 72 6e 20 61 77 61 69 74 20 69 28 42 6e 28 74 29 29 2c 6c 7d 2c 4b 6e 3d 74 3d 3e 61 73 79 6e 63 28 65 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 7b 70 65 6e 64 69 6e 67 41 63 74 69 6f 6e 73 3a 7b 61 63 74 69 6f 6e 73 3a 72 3d 5b 5d 2c 6f 72 69 67 69 6e 3a 69 7d 3d 7b 7d 7d 3d 6e 28 29 2e 77 69 64 67 65 74 73 5b 74 5d 3b 72 65 74 75 72 6e 20 65 28 67 65 28 74 2c 7b 61 63 74 69 6f 6e 73 3a 5b 5d 7d 29 29 2c 65 28 5a 6e 28 74 2c 72 2c 69 2c 21 30 29 29 7d 2c 58 6e 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 45 65 28 29 2c 7b 77 69 64 67 65 74 49 64 3a 65 7d 3d 4f 6e 28 29 3b 72 65 74 75 72 6e 20 53 74 28 28 28 6e 2c 72 29 3d 3e 74 28 5a 6e 28 65 2c 6e 2c 72 29 29 29 2c 5b 74 2c 65 5d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 6e 28 29 Data Ascii: Gn(t,e));return await i(Bn(t)),l},Kn=t=>async(e,n)=>{const{pendingActions:{actions:r=[],origin:i}={}}=n().widgets[t];return e(ge(t,{actions:[]})),e(Zn(t,r,i,!0))},Xn=()=>{const t=Ee(),{widgetId:e}=On();return St(((n,r)=>t(Zn(e,n,r))),[t,e])};function Qn()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49796	216.137.52.31	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:28 UTC	1249	OUT	GET /share/dist/i/ff6a823eabd85e67c626d007c2830bd5.png HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://premiumgain.nimbusweb.me/share/11450334/ots3f4w6xehf2feb09wy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; _ga_7G2K66TV09=GS1.1.1734727280.1.0.1734727280.0.0.0; _gid=GA1.2.1161705959.1734727283; _ga_L1W7VLTSPG=GS1.1.1734727283.1.0.1734727283.60.0.0; _ga=GA1.1.668868513.1734727275; FPLC=PjNtgvbTHK3i1VawWzxllJ%2BJvx8%2BcjF7eIPtAfv8tBBqvAhYnT1aq1CBvAgVFV01OqVJM4oa896p2EM3TF9O1MNE0h1WrmKcgi21Zi5M9fdRDyu8tx60BOy%2Friyb0A%3D%3D; _gat_gtag_UA_67774717_30=1
2024-12-20 20:41:29 UTC	707	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 427 Connection: close Date: Fri, 20 Dec 2024 20:41:29 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"1ab-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 0b76b1af8ab2b84ac7a253f502e75320.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: d-Es3urxuq63P8dAeQBEWbyA86sSNamKdui9n1EftpOpU8T3xpo2BQ==
2024-12-20 20:41:29 UTC	427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 40 49 44 41 54 78 01 ed 97 3d 8b c2 40 10 86 27 c7 d5 17 e1 8a ab ee b8 eb 2d 4e b8 ea 62 61 b0 57 f4 1f a5 f4 a3 12 7b ed b4 53 2c b4 53 1b ad 04 05 ed 15 ad 2c 04 fd 05 9a 09 28 7e c4 75 66 88 c6 22 0f 04 96 64 99 79 77 f6 dd 65 a2 6d 6d c0 47 5e c0 67 02 01 cf 29 40 7b ff 38 79 cc 44 0a b8 98 89 f4 45 1c b2 80 47 a2 b9 1d c3 bd da ed 6a 09 5e a0 8a e7 7b 05 5e dd 5e c6 0c 03 bc 44 15 4f 93 de 84 a3 f1 c4 79 9c 04 51 03 be bf 3e 41 82 58 c0 4f e4 0f 66 f3 85 33 c6 e4 d3 e1 00 24 88 3c 60 65 f2 87 e4 Data Ascii: PNGIHDR szzpHYssRGBgAMAa@IDATx=@'-NbaW{S,S,(~uf"dywemmG^g)@{8yDEGj^{^^DOyQ>AXOf3$<`e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49798	44.209.154.24	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:29 UTC	581	OUT	GET /api/v1/events HTTP/1.1 Host: events.getsitectrl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://premiumgain.nimbusweb.me Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://premiumgain.nimbusweb.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:29 UTC	369	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 621 Connection: close Server: Getsitecontrol Cache-Control: private, no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type,X-Requested-With Access-Control-Allow-Credentials: false
2024-12-20 20:41:29 UTC	621	IN	Data Raw: 7b 22 69 64 22 3a 22 36 34 66 39 37 33 37 32 36 30 32 61 63 66 33 39 22 2c 22 75 73 65 72 5f 69 64 22 3a 22 36 34 66 39 37 33 37 32 36 30 30 36 30 39 35 38 22 2c 22 74 69 6d 65 22 3a 31 37 33 34 37 32 37 32 38 39 32 31 36 2c 22 74 6f 6b 65 6e 22 3a 22 31 37 33 34 37 32 37 32 38 39 2e 39 32 32 38 39 64 38 33 31 66 65 34 33 30 33 33 61 62 62 33 65 36 62 30 32 37 35 37 63 39 35 38 2e 32 32 38 65 33 65 37 31 62 63 30 62 32 39 39 35 31 62 39 39 36 32 31 39 31 64 66 63 66 35 30 34 22 2c 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 67 65 6f 70 61 74 68 22 3a 22 31 34 37 30 31 35 3a 31 34 37 37 36 32 3a 32 33 31 32 34 31 3a 22 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 35 31 32 38 35 38 31 2c 22 6c 6f 6e 67 69 74 75 64 65 22 Data Ascii: {"id":"64f97372602acf39","user_id":"64f9737260060958","time":1734727289216,"token":"1734727289.92289d831fe43033abb3e6b02757c958.228e3e71bc0b29951b9962191dfcf504","geo":{"ip":"8.46.123.189","geopath":"147015:147762:231241:","geoname_id":5128581,"longitude"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49802	44.209.154.24	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:30 UTC	359	OUT	GET /api/v1/events HTTP/1.1 Host: events.getsitectrl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:31 UTC	369	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:41:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 621 Connection: close Server: Getsitecontrol Cache-Control: private, no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type,X-Requested-With Access-Control-Allow-Credentials: false
2024-12-20 20:41:31 UTC	621	IN	Data Raw: 7b 22 69 64 22 3a 22 36 34 66 39 37 33 37 34 35 37 38 36 34 31 65 30 22 2c 22 75 73 65 72 5f 69 64 22 3a 22 36 34 66 39 37 33 37 34 35 37 66 64 38 61 34 38 22 2c 22 74 69 6d 65 22 3a 31 37 33 34 37 32 37 32 39 31 32 33 30 2c 22 74 6f 6b 65 6e 22 3a 22 31 37 33 34 37 32 37 32 39 31 2e 31 61 37 35 62 64 39 30 32 38 32 63 31 62 36 61 37 32 63 33 32 61 65 30 32 39 62 39 35 35 34 61 2e 38 39 61 31 32 34 32 63 65 35 62 30 61 30 34 66 65 61 39 66 32 63 32 37 66 62 62 31 62 34 61 64 22 2c 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 67 65 6f 70 61 74 68 22 3a 22 31 34 37 30 31 35 3a 31 34 37 37 36 32 3a 32 33 31 32 34 31 3a 22 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 35 31 32 38 35 38 31 2c 22 6c 6f 6e 67 69 74 75 64 65 22 Data Ascii: {"id":"64f97374578641e0","user_id":"64f9737457fd8a48","time":1734727291230,"token":"1734727291.1a75bd90282c1b6a72c32ae029b9554a.89a1242ce5b0a04fea9f2c27fbb1b4ad","geo":{"ip":"8.46.123.189","geopath":"147015:147762:231241:","geoname_id":5128581,"longitude"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49800	216.137.52.105	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:31 UTC	969	OUT	GET /share/dist/i/ff6a823eabd85e67c626d007c2830bd5.png HTTP/1.1 Host: premiumgain.nimbusweb.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: eversessionid=0aeluCRDhaSe3iOk6CLLWJc3QWTxiSeg; nns-list-type=plates; nns-theme=day; _ga_7ZKFB3S0PN=GS1.1.1734727275.1.0.1734727275.60.0.0; FPID=FPID2.2.rwJJ8vrVSwvDRW%2BKKV8p0CB%2BmcP3red22wNUrE3foWk%3D.1734727275; _ga_7G2K66TV09=GS1.1.1734727280.1.0.1734727280.0.0.0; _gid=GA1.2.1161705959.1734727283; _ga_L1W7VLTSPG=GS1.1.1734727283.1.0.1734727283.60.0.0; _ga=GA1.1.668868513.1734727275; FPLC=PjNtgvbTHK3i1VawWzxllJ%2BJvx8%2BcjF7eIPtAfv8tBBqvAhYnT1aq1CBvAgVFV01OqVJM4oa896p2EM3TF9O1MNE0h1WrmKcgi21Zi5M9fdRDyu8tx60BOy%2Friyb0A%3D%3D; _gat_gtag_UA_67774717_30=1
2024-12-20 20:41:31 UTC	707	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 427 Connection: close Date: Fri, 20 Dec 2024 20:41:31 GMT X-Fusebase-Env: prod-replica X-Powered-By: Express Access-Control-Allow-Methods: GET,PUT,POST,DELETE Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800, immutable Accept-Ranges: bytes Last-Modified: Thu, 28 Nov 2024 08:58:31 GMT ETag: W/"1ab-19371fe4ad8" Strict-Transport-Security: max-age=15724800; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 33c6e91bdc193e34e8dcc80edc466018.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: VvQkh65ynjS9KxjaSqmpaz6SajJNl7kD0BSJmWY53GcLxHGL1VwhRQ==
2024-12-20 20:41:31 UTC	427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 40 49 44 41 54 78 01 ed 97 3d 8b c2 40 10 86 27 c7 d5 17 e1 8a ab ee b8 eb 2d 4e b8 ea 62 61 b0 57 f4 1f a5 f4 a3 12 7b ed b4 53 2c b4 53 1b ad 04 05 ed 15 ad 2c 04 fd 05 9a 09 28 7e c4 75 66 88 c6 22 0f 04 96 64 99 79 77 f6 dd 65 a2 6d 6d c0 47 5e c0 67 02 01 cf 29 40 7b ff 38 79 cc 44 0a b8 98 89 f4 45 1c b2 80 47 a2 b9 1d c3 bd da ed 6a 09 5e a0 8a e7 7b 05 5e dd 5e c6 0c 03 bc 44 15 4f 93 de 84 a3 f1 c4 79 9c 04 51 03 be bf 3e 41 82 58 c0 4f e4 0f 66 f3 85 33 c6 e4 d3 e1 00 24 88 3c 60 65 f2 87 e4 Data Ascii: PNGIHDR szzpHYssRGBgAMAa@IDATx=@'-NbaW{S,S,(~uf"dywemmG^g)@{8yDEGj^{^^DOyQ>AXOf3$<`e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49803	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:31 UTC	642	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw==" Sec-WebSocket-Key: MZfvBxULkoIKaUhHu/fOsg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:41:34 UTC	733	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:41:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 899dbb4f-8b35-40a3-afc3-76a4431be800 x-ms-ests-server: 2.1.19683.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49804	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:31 UTC	873	OUT	GET /?N4JV=9Xdg&sso_reload=true HTTP/1.1 Host: bia.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://bia.twuseb.us/?N4JV=9Xdg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-20 20:41:35 UTC	777	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 61454 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 17d1be7c-c284-4d11-b72b-c49b6ff02d00 x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:35 UTC	15602	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 76 ea c8 b6 20 fa 9e 5f 81 a9 3c 06 b6 31 a6 6f ec a5 f4 c1 18 30 cb b8 03 dc a7 cb 25 a4 10 c8 16 12 96 84 31 5e cb bc dd 2f a9 87 1a e7 a1 de ea 0f f6 8f dd 39 67 84 1a 30 ac 95 bb bb f7 d4 38 99 63 ef 65 29 da 19 33 66 1f 33 c4 97 8d c3 b3 5a ef f6 bc 1e 19 ba 23 e3 b7 5f be e0 9f 88 62 c8 8e 23 45 a3 11 55 b7 a5 a8 e1 da d1 88 21 9b 03 29 ca cc e8 6f bf 44 be 0c 99 ac c2 df c8 17 57 77 0d 86 4f 91 ae 3e 30 23 ba 19 71 ad c8 cc 9a d8 11 59 51 ac 89 e9 62 a3 1d bf d5 97 11 73 e5 88 62 99 2e 33 5d 29 ea b2 37 77 07 27 dc 8b 28 43 d9 76 98 2b 4d 5c 6d bb 1c 05 60 dc f1 36 7b 99 e8 af 52 b4 c6 9b 6f f7 66 63 16 dd 59 31 4c ab 2e 31 75 c0 16 7b dd 6c 5f 56 b7 6b d6 68 2c bb 7a df 58 dd 71 aa ab ee 50 52 d9 ab ae b0 6d Data Ascii: v _<1o0%1^/9g08ce)3f3Z#_b#EU!)oDWwO>0#qYQbsb.3])7w'(Cv+M\m`6{RofcY1L.1u{l_Vkh,zXqPRm
2024-12-20 20:41:35 UTC	16384	IN	Data Raw: b4 bc 17 00 0d 31 46 d6 67 8c 6f 31 dd 54 8c 89 ca 1c d0 d6 4f 71 9c 3f 91 8c 89 8b 1b 5e 51 26 21 e4 46 3f b7 56 25 7b 54 d7 2f 66 43 66 47 b6 12 32 3b ca f9 0a 11 1d bd 54 b2 7d ae 7c 42 f4 38 13 6f 19 a5 04 6f 0d 24 98 fb 07 cf f7 81 92 5a 88 5e 3d aa 2c 04 cc 56 20 23 86 2c 01 ff 59 00 d7 42 c5 8b 78 42 fa 43 05 2a 9e 6f e0 39 27 9e 5f e0 39 2f 9e 0f e0 b9 28 9e 7b f0 5c 12 cf 67 f0 5c a0 67 c0 f2 c1 27 1f a4 09 14 81 f4 06 44 10 9c 7e 37 f3 c9 26 38 ca 45 d0 b3 d0 00 08 a4 84 6c d3 2c c2 53 19 ec a9 78 13 16 db ac 90 19 46 b4 9a 6c b6 25 a2 2d 47 6a e6 60 9a 59 b2 d9 04 62 d9 6f 3a 34 7e 39 b1 eb 1c 41 71 4f 14 90 88 f7 d4 f3 5e b3 fc 5b b3 bd d7 6c 7b f4 72 f6 fd 7b b3 8d f4 02 b3 6c 6e c6 9b 05 a9 59 89 37 f3 52 b3 74 df 6c 3f c0 54 49 04 04 b0 c9 Data Ascii: 1Fgo1TOq?^Q&!F?V%{T/fCfG2;T}\|B8oo$Z^=,V #,YBxBC*o9'_9/({\g\g'D~7&8El,SxFl%-Gj`Ybo:4~9AqO^[l{r{lnY7Rtl?TI
2024-12-20 20:41:35 UTC	16384	IN	Data Raw: ca 90 c2 68 60 7e 3a 82 f4 6b 59 73 0b 95 a1 18 7e 35 26 96 6b 84 a3 7b 8d b8 6b fb 85 f0 6b 10 5e 77 db 0b bd 85 00 79 fe 95 d4 70 3f dc a2 d4 f7 52 da 21 4a eb 15 c3 7e 31 1c 16 c3 77 41 f8 b5 db 3e 2c 88 9d 5a 31 bc 0d d8 68 41 27 23 ea 70 31 7c 0e c2 db 3d 55 93 77 fb 8d 02 ad a8 87 11 7c dd 8a e1 0c 0d 38 34 57 62 38 a1 04 0d 94 a5 7e 4f 6d 86 32 71 62 f0 83 7a de 2b 84 b7 ea 3e 52 15 b8 95 95 ca 34 50 e1 27 d5 2f 35 1a 6e 6a 00 71 d8 9a a0 3d 3e ef 85 bd 20 7c 57 2b 84 8a bb 0c a7 04 54 f2 38 7c 00 bf 4e 2f 9e 0b e1 3b f5 34 25 93 f8 29 17 22 92 bc 70 88 fb cf 47 be c0 b4 0c f7 d5 5e 38 29 40 fd 13 17 38 71 57 1d 30 84 03 da 0f c2 9f 85 b0 e7 2b c2 f2 a0 40 03 a7 86 6f a6 3a ea d7 c2 19 d2 6b ea 4b 55 a3 f1 b6 52 0c 1e 55 be 16 0e d1 ba 54 03 26 f4 Data Ascii: h`~:kYs~5&k{kk^wyp?R!J~1wA>,Z1hA'#p1\|=Uw\|84Wb8~Om2qbz+>R4P'/5njq=> \|W+T8\|N/;4%)"pG^8)@8qW0+@o:kKURUT&
2024-12-20 20:41:35 UTC	13084	IN	Data Raw: c7 cc 95 bc 62 22 97 bb ec 07 ea 7b b3 d9 b6 68 31 75 3b ec 5f 00 9b e6 27 96 9d 7f 29 b0 ec 4a c7 84 59 32 53 cb 96 bd 6a ad 6a e2 fa 5a e3 de c3 26 cc d9 ec d7 79 bb 0d 9f 7c 0d 3a d7 58 8f 77 93 fd bb 19 a4 5e 30 d2 2f a9 9e ab 72 e0 a1 64 63 bb 90 b9 65 4a c3 43 96 a9 66 06 26 dd 64 4e 32 6e d0 01 c6 f0 5f bc 05 3a 5f 4d 1b 52 40 6c 67 41 74 2a 6c 0f 24 bc 13 f9 14 a8 a8 6c 17 85 84 32 27 1c 04 56 14 5d 27 3f 0f 2b d5 e5 6c ae 51 71 14 ab 1b 2c 71 be c7 ea df 4b 0e 74 1d 31 7b 5a 64 7d e3 3b 3d 55 98 19 3f 95 bb 67 59 c1 c3 14 2b e8 67 cd 16 96 8d e7 72 17 48 3f 67 81 f4 ff c9 02 c9 18 b3 bd 77 5f 55 ff 2f d6 4e 62 af e1 1d e1 04 b2 83 32 b4 3e 11 07 a7 e1 fe 04 87 17 c0 fc 7b 9b 58 2c b4 00 2a 60 a0 56 15 f1 4e 7d 60 b4 f4 ec 05 73 c6 ea b5 79 3e 9e Data Ascii: b"{h1u;_')JY2SjjZ&y\|:Xw^0/rdceJCf&dN2n_:_MR@lgAtl$l2'V]'?+lQq,qKt1{Zd};=U?gY+grH?gw_U/Nb2>{X,`VN}`sy>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49805	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:31 UTC	753	OUT	GET /favicon.ico HTTP/1.1 Host: bia.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bia.twuseb.us/?N4JV=9Xdg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-20 20:41:34 UTC	733	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:41:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7e8beaf7-7dfc-49c7-aaf2-1f973a74eb01 x-ms-ests-server: 2.1.19683.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49807	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:31 UTC	537	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:35 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:34 GMT Content-Type: application/x-javascript Content-Length: 49907 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:23 GMT etag: 0x8DCE31D8CF87EF9 x-ms-request-id: 1906404f-c01e-002a-0cc2-4c23eb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204134Z-186c86bbc589pf5chC1SJC6wk40000000rv00000000024av x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:35 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2024-12-20 20:41:35 UTC	16379	IN	Data Raw: f1 c3 7e 2f 9b bc 8d d2 cd 1c cd 74 23 0e 4e 2a e9 06 24 7a 6b b3 de c2 27 69 f0 fe 12 7a de 2e 39 3e 00 d9 82 9b 2c d1 57 92 8f 4d 90 cb 5b 25 99 4d 29 af b4 d8 e0 d9 1c b7 f7 e0 2d 58 39 9d e3 4c e0 d9 3b a4 71 e0 03 9e f5 7b 26 1e 84 3a 07 63 c5 0e 11 ea 6f 5a 87 dc 70 c2 81 cc bc 73 04 87 36 7d e9 4d 12 a5 bd d2 e6 3a 3c 2c 69 0e c3 72 24 6e 71 6a dd d2 40 39 82 f8 89 d1 f2 21 e2 2d 5b 29 1e 3e e4 af 22 b2 8d bf 7d ec 7d dc fb b8 6b e4 95 2a 9e b7 b8 9b 43 28 3f 95 c6 a1 6d c4 da 1b 70 01 54 e9 ab ac fb ec 85 e7 e9 04 4f a3 92 74 00 22 5d 85 e1 a4 9a 9f 9a 97 61 14 d0 ef 4b f7 f4 82 54 d2 be 80 cd 15 1e 72 b9 b5 ff 61 70 86 50 1c bf 4d 22 45 4d 42 a9 6e 08 ca 1a b7 59 0a f7 ed 46 26 d3 b7 9b e4 c7 a1 53 63 a8 b3 c0 1b 91 cb 3b 36 35 b1 6d 1b 22 7b 61 Data Ascii: ~/t#N$zk'iz.9>,WM[%M)-X9L;q{&:coZps6}M:<,ir$nqj@9!-[)>"}}kC(?mpTOt"]aKTrapPM"EMBnYF&Sc;65m"{a
2024-12-20 20:41:35 UTC	16384	IN	Data Raw: ab 67 3d bc 17 d4 2d 82 36 4a 01 be af 18 48 0c 07 fb 92 fd cf 7e e1 16 be f8 8c 4c 2b f0 8d 6f 2b 80 f4 b0 0c 54 57 04 5a 04 6f 2f 6e c4 a2 43 82 f4 0d 5c 27 f2 0b 56 22 9c 0b e2 08 f2 8a fa 02 41 72 a3 70 80 f0 58 bd 61 2d 95 c5 cd 48 53 54 ab c1 7c ad ba a5 5c a6 d6 9c 6f 17 42 e3 a7 b0 99 1e 3a ab 43 9b bf 6a 1b a4 34 97 93 94 84 37 da 06 f9 24 1f fd 25 9e 74 55 32 05 02 a3 cd f2 e5 b9 ef 5b 92 3d c5 2a 6e d0 c6 7f d6 84 02 51 0b 3f 85 08 ec e7 33 ec 05 6b 89 48 aa 66 15 c8 ca 23 ce 44 e7 93 d7 be 8b d3 9f 9f e0 47 f7 29 23 74 1c 44 70 c9 7a 6e 9a 25 e5 9f b5 a8 49 3b af b4 48 6b 0d d1 9b fd f0 4a 88 b7 91 4c 03 1c 9e 89 da 3c 02 ea dc 48 eb 00 90 39 64 84 a3 ea 35 4e 2a 1f eb b1 f2 57 6d 21 e3 d3 28 9f c9 5e 3b 52 ef f1 56 ab 5a 5b 2d 32 d5 86 60 33 Data Ascii: g=-6JH~L+o+TWZo/nC\'V"ArpXa-HST\|\oB:Cj47$%tU2[=nQ?3kHf#DG)#tDpzn%I;HkJL<H9d5NWm!(^;RVZ[-2`3
2024-12-20 20:41:35 UTC	1566	IN	Data Raw: 0f 8f bf ad 8f e0 b8 9d 5b 64 16 3a df 7d 9b 24 8f be 7f 1c ef fe f0 68 2f da 7d 3c fd ee 87 dd 1f e2 6f f7 76 a3 3f ed 7d bb ff dd f4 d1 9f be ff f6 4f 0e b1 52 09 9d ab 15 b1 51 19 11 fc 82 58 a8 9c 38 28 62 0d a6 e1 1e b1 4a 7c ee 1e ca 9f 03 f9 f3 a2 e5 b2 7b 6d 3c 4a 4a 01 fe 46 86 48 6d df 91 44 54 19 67 6a 04 22 62 96 25 0b e4 d3 c0 a5 a6 45 af 62 f8 e1 e0 0e c0 f4 68 6c d8 1f 44 60 d3 c6 9c 69 8d 13 2e 82 62 3b 12 9a f1 4e 12 89 89 af 1c f8 4d 92 80 1d 13 a1 81 6b 0f 74 b0 f6 7e 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ab 25 df 18 38 c3 d4 53 19 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 5d 23 e2 09 04 32 6d 86 4c 28 6f 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 02 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 Data Ascii: [d:}$h/}<ov?}ORQX8(bJ\|{m<JJFHmDTgj"b%EbhlD`i.b;NMkt~p,IxtW%8SVnnJTum]#2mL(o5($S$A9VOm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49808	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:36 UTC	419	OUT	OPTIONS /api/report?catId=GW+estsfd+frc HTTP/1.1 Host: 8e1d6ffe-4db8a1b1.twuseb.us Connection: keep-alive Origin: https://bia.twuseb.us Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:39 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-12-20 20:41:39 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-12-20 20:41:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49810	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:36 UTC	643	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bia.twuseb.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:39 UTC	790	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:39 GMT Content-Type: text/css Content-Length: 20410 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 08 Nov 2024 04:59:25 GMT etag: 0x8DCFFB21E496F3A x-ms-request-id: 506ea49a-501e-000c-0bc9-4c23e1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204139Z-186c86bbc5868ks8hC1SJCpbfn0000000rhg00000000dg3w x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:39 UTC	15594	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-12-20 20:41:39 UTC	4816	IN	Data Raw: 78 ce 2b 2b 6e 13 d6 17 0b 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e Data Ascii: x++n,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49811	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:36 UTC	620	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bia.twuseb.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:40 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:40 GMT Content-Type: application/x-javascript Content-Length: 122501 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 22 Nov 2024 01:34:34 GMT etag: 0x8DD0A95D1F56318 x-ms-request-id: daa0577a-401e-0037-2dc9-4c11fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204138Z-186c86bbc589pf5chC1SJC6wk40000000rtg000000004xuw x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:40 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7d 5b e3 b8 92 38 fa ff fd 14 c1 e7 5c 26 19 4c da ce 7b cc 78 d8 74 80 6e 76 80 70 08 f4 cc 2e cd e1 71 6c 25 78 48 ec ac ed f0 72 42 f6 b3 ff aa 4a 92 2d 27 0e dd 3d bb cf bd cf 7d ee ec d9 26 96 4a 6f a5 52 a9 aa 54 2a 7d f8 79 e7 ff 2a fd 5c da ff fe ff 4a c3 eb de d5 75 69 70 52 ba fe 7c 7a 75 54 ba 84 af ff 28 5d 0c ae 4f fb c7 df 5f 0f 36 8a ff 7f fd e0 c7 a5 b1 3f 65 25 f8 3b 72 62 e6 95 c2 a0 14 46 25 3f 70 c3 68 1e 46 4e c2 e2 d2 0c fe 8d 7c 67 5a 1a 47 e1 ac 94 3c b0 d2 3c 0a ff 64 6e 12 97 a6 7e 9c 40 a1 11 9b 86 cf a5 32 54 17 79 a5 4b 27 4a 5e 4b a7 97 95 2a d4 cf a0 36 7f e2 07 50 da 0d e7 af f0 fb 21 29 05 61 e2 bb ac e4 04 1e d5 36 85 8f 20 66 a5 45 e0 b1 a8 f4 fc e0 bb 0f a5 73 df 8d c2 38 1c 27 a5 88 Data Ascii: }[8\&L{xtnvp.ql%xHrBJ-'=}&JoRT}y\JuipR\|zuT(]O_6?e%;rbF%?phFN\|gZG<<dn~@2TyK'J^K*6P!)a6 fEs8'
2024-12-20 20:41:40 UTC	16379	IN	Data Raw: 25 55 aa 1d a5 76 7b c7 d0 9d 2a 43 5f 08 8c 3d f3 9d aa 20 68 24 52 f0 ce ca da 3e 68 09 c0 81 9f f0 78 a1 5c 11 52 77 79 19 f0 cb fe 9a 33 7d 76 5e 63 6d 55 81 06 71 37 80 f1 0e e6 d8 a1 18 f0 e2 10 97 71 23 7f 94 ef bf 52 7f 06 51 ce 04 5a 40 01 48 3f 65 7e 42 9d 70 27 83 b2 5a 68 ce d8 63 99 2b af 38 61 68 21 9b cd f1 d2 0c 77 00 b1 8b f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 5f 3a 48 bf 37 6d 3a 9a 00 4c 34 01 08 95 1f a4 6f 71 0f 3b 9b b1 78 ad 1c ea ef e8 23 02 0a d3 91 13 3d 66 11 13 0e fc 35 cf b7 8f e8 8f 45 be 84 78 11 64 3d f7 77 f4 cb 52 72 37 ea b3 1d 14 9b d0 d3 98 6e cf 5c e0 4d 73 d8 43 aa 1e 40 65 29 89 ae d0 2d ac f1 68 8b fb 1d b3 a3 6a 91 9b 23 9a 45 b7 f7 5b f8 94 e1 36 fa de 00 84 93 19 82 ad d0 a8 e4 57 5d 39 d3 31 Data Ascii: %Uv{*C_= h$R>hx\Rwy3}v^cmUq7q#RQZ@H?e~Bp'Zhc+8ah!w)8+09d_:H7m:L4oq;x#=f5Exd=wRr7n\MsC@e)-hj#E[6W]91
2024-12-20 20:41:41 UTC	16384	IN	Data Raw: 04 55 6d 04 53 e6 18 48 2a 9a 32 49 20 8c 08 c9 2c 84 50 e1 94 49 00 61 04 47 f6 bf 70 e0 57 ff 01 fe 0e 0f b2 f7 69 86 e8 72 9f f9 69 ef 06 06 6e bf ef 9f c0 e3 14 a1 f7 64 20 e6 a7 27 7a e6 cc 32 30 b3 7f 66 66 92 4d b3 32 1a f1 97 fd 7d ce 8c 10 75 40 f5 4d 6f fd 37 90 10 b5 db 0f e8 53 99 4e 6e 05 e5 3a e0 5c ef 80 f4 86 63 29 39 e8 8f fd 1d 6c 19 fb a5 1d c6 77 30 04 02 77 54 31 a9 1f 59 7a f4 00 7c ec e7 6e 02 7b 59 2f 0d c2 bd 87 29 07 06 9b b8 02 64 a8 7a a3 28 f9 ec 20 af 59 ce 68 1e 20 f8 f6 b4 34 9d 95 f7 da 32 c6 7e 53 5e 06 a5 e8 e2 0b 43 cc 34 84 b3 37 53 8e e1 95 f8 e3 0a 1f eb 31 41 6f d4 07 e0 ff 47 5f a2 87 cc 99 a9 f2 65 04 f9 1e 50 d5 b0 72 c4 30 4e d0 23 be 07 6f 55 04 f9 3b 12 e3 24 56 d8 f8 1b 99 56 c4 8a 1f 10 02 c3 79 22 18 83 e1 Data Ascii: UmSH*2I ,PIaGpWirind 'z20ffM2}u@Mo7SNn:\c)9lw0wT1Yz\|n{Y/)dz( Yh 42~S^C47S1AoG_ePr0N#oU;$VVy"
2024-12-20 20:41:41 UTC	16384	IN	Data Raw: 88 61 ac 97 5c d8 9a 19 8a 38 5c 8c 6d e2 c9 54 68 ee fe 8d 18 4c 47 62 12 64 cd 0f 53 0e 14 c8 c2 2c 31 b1 f4 50 2c 75 a8 37 be d7 0a 38 60 80 cb 85 90 e1 08 ff 86 93 e8 31 d2 8a 52 86 17 30 a6 21 29 74 dc 52 40 87 32 ff d4 41 14 97 c4 0b fa c0 13 a4 09 9d 38 19 fa 4a 4b 37 a8 38 69 54 1a c5 3a 1a c7 fb 9a 0e a8 bc 9d a4 59 2d 3d b4 9a 57 f3 5e 46 b0 2a 99 89 59 bb 0f 2d ab 24 46 99 4b 41 95 ca 99 4b 90 35 f3 8c a8 04 19 46 fd 51 6b bf 16 23 f1 90 44 4d 3d 9b 58 2b 9c 1b b0 50 43 e1 03 e7 0f f5 12 a6 98 f5 b1 2b 96 c3 68 39 f6 7e 08 53 e0 d6 5e 23 de 4b 4e 10 8c 8c f5 35 11 19 09 8a cf 04 4a da af 83 ca 3d 1c 2f a7 da 4e d9 5a 71 c8 2a 9e 22 02 9a 3e 30 70 65 d3 16 4c 22 33 45 37 98 5f 35 ff e8 59 6f 27 d3 e4 4d 34 19 3d c8 b7 a7 b4 77 cf a2 90 8c c8 f2 Data Ascii: a\8\mThLGbdS,1P,u78`1R0!)tR@2A8JK78iT:Y-=W^FY-$FKAK5FQk#DM=X+PC+h9~S^#KN5J=/NZq">0peL"3E7_5Yo'M4=w
2024-12-20 20:41:41 UTC	13553	IN	Data Raw: 01 9a 81 e8 32 03 f6 71 6d c3 d5 2e 99 da fb b3 b0 4e 68 e7 72 aa ce aa 04 ae 75 a3 16 cc 64 93 a6 71 2c 6b 86 77 75 87 fd 73 58 7a 58 b2 e3 7f 7c 3a 59 73 d8 db cf 41 2c f7 62 a1 81 43 64 cf ce 2a 2c 62 ea 64 9b 20 d1 ec cf 70 b0 68 e7 de 0c 41 67 f0 5a 65 f3 6c 33 94 0c c7 93 f6 e9 53 11 4f 6f 13 22 aa a6 00 ed e8 f6 5b d8 09 17 b4 b1 6a 6e b0 bc 66 0e 47 ae 8d 75 d7 de 00 b1 f1 a8 02 38 7a bf cb 35 b8 f2 89 26 06 81 81 aa 2f f8 a7 76 28 ef 76 24 ff 2a df 60 18 9f 6b c6 de 82 46 77 ec 96 08 1f 97 61 be 0e 2d 68 da 3a dc d4 18 50 1c 7e f5 ba c3 67 d1 96 32 82 e9 59 b9 ee 31 5c c8 b5 1c c2 85 e5 21 32 aa 49 35 55 9c 5a a7 21 b8 65 3a ea 52 e8 96 44 8b 38 6c 3f 21 f6 c1 33 91 16 15 ba 95 1c 90 fc 94 85 64 85 95 c3 c0 f4 30 c1 62 b2 6a 80 37 f0 d3 52 6f ad Data Ascii: 2qm.Nhrudq,kwusXzX\|:YsA,bCd,bd phAgZel3SOo"[jnfGu8z5&/v(v$`kFwa-h:P~g2Y1\!2I5UZ!e:RD8l?!3d0bj7Ro
2024-12-20 20:41:41 UTC	16384	IN	Data Raw: 7c f6 6d 27 61 b5 a0 4c ef bd a7 30 5b ab a0 bc cb d7 cc 45 cf b5 01 d7 78 9b 07 d6 23 7d f4 e1 fa 5d 98 9e 46 7b 7d d1 3a a9 d6 72 50 f5 ed 0e cd c9 b9 b6 47 ef 1f 43 d9 7b 90 f3 da 5e 1b ef e5 c0 92 eb 1d 3d fc f6 09 1d bc 6c f7 d2 49 a6 d1 53 e5 7e 37 ef 6d f7 f4 c5 f5 07 8f 00 3e 9d 4f 92 ad f3 47 77 ee d0 81 00 e5 f6 9c 3d 9e 4d df 3d 9e 69 75 7b bd df a7 dd 6d 86 15 d7 70 93 84 ec 86 58 bf b2 79 31 18 1d b1 f5 0d 8c 89 04 75 d7 fb 21 93 85 c5 da 9b 2b 93 a2 4d be 72 61 8e 52 7f ab 0e 56 af 4c 4f f7 b4 75 77 76 d7 78 c4 4a dd 35 87 b1 dc e8 2f 5e 6d 77 e5 04 ae da d6 58 6b 7d a5 d0 90 12 a8 68 d4 d4 d9 14 d2 26 0b 85 ca 4f b0 ba f0 9d 14 15 f2 7a 34 ed db f8 ec 98 90 aa 5b 3e 2d e9 80 fb f2 8c 36 ed 21 76 bb 1e bd 7f 3a 6b f2 1d 7c f4 72 08 50 47 bb Data Ascii: \|m'aL0[Ex#}]F{}:rPGC{^=lIS~7m>OGw=M=iu{mpXy1u!+MraRVLOuwvxJ5/^mwXk}h&Oz4[>-6!v:k\|rPG
2024-12-20 20:41:41 UTC	16384	IN	Data Raw: 27 3a 73 09 fd 5d 8d 0e 37 7e 2b 8d aa a9 b9 34 71 23 da e3 d8 d4 e9 19 d0 4e 97 b9 f7 09 65 96 db 8c a3 c3 c1 a0 d5 51 c1 af ed a5 29 b2 b9 93 a6 48 6f 1f 66 a0 6d fa dd d4 54 3d 01 6b 1e b2 ae 64 9f 11 e0 8b 27 72 fe 54 87 78 35 d8 51 69 bb 78 23 42 28 2d 83 0c 59 a3 1d 28 7c db 94 3b 06 02 1d 8c 88 66 cf 38 6d 3f 7c 58 b4 c6 d3 f6 e6 42 cb d7 1e 4a 3a 05 70 0d 00 f9 14 96 67 9d ad 24 c5 30 b5 02 65 9c 7c e4 c3 ec e1 45 ab 2e fb 7a 73 fe 5a df 78 b3 b9 40 87 13 ba 98 6c 5c 5b 2b 48 4a dd 28 07 e4 e1 46 ea 5b f3 ad af 6f 6e a8 6c 53 1f 81 80 de ae 76 5e e9 ce 51 fd da ee d7 b6 33 b4 53 a4 37 81 59 71 f4 09 80 80 13 f7 4f c4 f5 70 8c ee 15 3a 53 22 14 37 d8 33 6a 8b 56 b1 75 28 f2 a3 c3 82 36 a6 0a ed 65 98 a1 cf fe c1 7e 6c a8 45 ef 50 db 27 3c 7a 90 62 Data Ascii: ':s]7~+4q#NeQ)HofmT=kd'rTx5Qix#B(-Y(\|;f8m?\|XBJ:pg$0e\|E.zsZx@l\[+HJ(F[onlSv^Q3S7YqOp:S"73jVu(6e~lEP'<zb
2024-12-20 20:41:41 UTC	11456	IN	Data Raw: 69 f2 f5 eb af 1f b2 c7 f9 6b 66 b9 c3 57 fd 10 e0 cd 5d 56 bd 7c 53 ad aa 89 c2 18 b1 99 aa c8 f8 55 57 05 73 01 f2 e3 5c 80 fc e1 a0 70 f8 1f 6d fd f0 7f d3 16 57 07 c8 8f d7 3f 9e db 30 b6 5e 6e 71 e3 23 b9 f5 56 44 da fb 63 03 13 3d 3c 20 d1 83 03 11 3d 20 00 d1 bd 03 0f 3d 20 e0 d0 bd 03 0d 6d 1a 60 28 a7 6c 64 71 3d 4e e2 f4 f6 b0 b8 59 45 cb 56 52 a5 6e 16 94 48 8b 87 05 8e 54 7b bb b2 ea b2 e1 16 23 12 6d e3 ae 61 2e 02 51 ed a4 57 5e 11 96 57 16 1f d6 ca 06 d1 87 36 ba a4 f8 f0 68 43 5b 3e 8a d3 34 bb e5 e8 42 7f b9 a8 42 7f b5 68 42 eb e8 ff 95 4b b5 ed e8 41 7f 72 d4 a0 3f 37 5a d0 26 2b b1 6e d9 da 1b 93 7f d6 75 dd cd a2 00 6d 18 fd 67 3b 51 7f fe 92 b7 49 ff ec ed 9c 91 44 96 f5 46 8b 1e f0 93 44 b7 47 57 21 ba ca e3 9e bc 62 3b ae 13 0d 36 Data Ascii: ikfW]V\|SUWs\pmW?0^nq#VDc=< = = m`(ldq=NYEVRnHT{#ma.QW^W6hC[>4BBhBKAr?7Z&+numg;QIDFDGW!b;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49809	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:36 UTC	639	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bia.twuseb.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:39 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:39 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: e0df5de3-c01e-0005-37c9-4c2e20000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204138Z-186c86bbc589pf5chC1SJC6wk40000000rp000000000dv68 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:39 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-20 20:41:39 UTC	767	IN	Data Raw: 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 Data Ascii: Lp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49812	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:40 UTC	363	OUT	POST /api/report?catId=GW+estsfd+frc HTTP/1.1 Host: 8e1d6ffe-4db8a1b1.twuseb.us Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 20:41:40 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 34 32 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 69 61 2e 74 77 75 73 65 62 2e 75 73 2f 3f 4e 34 4a 56 3d 39 58 64 67 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 33 2e 32 35 35 2e 32 32 33 2e 32 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f Data Ascii: [{"age":0,"body":{"elapsed_time":4425,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://bia.twuseb.us/?N4JV=9Xdg","sampling_fraction":1.0,"server_ip":"173.255.223.22","status_code":404,"type":"http.error"},"type":"network-erro
2024-12-20 20:41:47 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:47 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 70 Connection: close vary: Accept-Encoding request-context: appId=cid-v1:0df9f0fa-2b61-4bcc-8864-10ea6079c765 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin: content-encoding: gzip
2024-12-20 20:41:47 UTC	70	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 f3 73 f5 51 70 4c 4f 2f 4a 4d 4f 2c c9 2f 52 c8 48 2c 56 28 2e 4d 4e 4e 2d 2e 4e 2b cd c9 a9 54 28 28 ca 07 71 52 53 14 4a 32 52 15 8a 52 0b 4b 53 8b 4b 00 48 8c 5e 6b 35 00 00 00 Data Ascii: sQpLO/JMO,/RH,V(.MNN-.N+T((qRSJ2RRKSKH^k5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49806	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:41 UTC	693	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:44 GMT Content-Type: application/x-javascript Content-Length: 61131 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 3317404e-e01e-0070-4de4-4c450c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204143Z-186c86bbc5868ks8hC1SJCpbfn0000000rr0000000001ufr x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:44 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-12-20 20:41:44 UTC	14460	IN	Data Raw: 2d b4 27 9c a9 c9 8b 5a 0f 38 b6 a8 a6 14 28 15 ad 22 70 c3 a8 99 0a ae d8 2d eb b3 5d aa 66 05 45 42 a6 28 54 f6 34 b2 a4 3c f0 6f cb d7 51 62 14 75 b1 b8 bb 92 d7 23 5d 84 2e 9e 48 cd 40 d1 97 2b 6e 85 c2 da e7 c2 9b 81 11 05 05 68 00 75 5d e0 5d 42 3e 85 2d 60 75 d5 7d 87 76 b1 a1 ad 13 0f f9 87 ee cd e6 6d ed f0 08 35 32 21 7b 11 6c f2 4d 05 bd 54 06 9a d4 36 a1 ae ce e4 2c 30 b4 4c 33 8d 65 71 f8 1d aa a1 e0 16 28 39 03 11 fa a7 ff ad d8 bc b8 c4 7b 33 7d 91 61 87 5d aa 72 b7 4d 9e b6 13 21 ad c1 82 80 fd 24 9f cc 9a e7 47 00 52 47 2e 6c 87 43 d1 dc bf 02 52 52 f8 37 14 e4 0f 50 fa 13 57 38 83 a2 27 48 78 cf fd 3d 76 53 2b 7a 96 7d 23 3f a4 04 ff 9b bb 8d fb 65 36 a1 6c 15 e0 70 0f 77 fb f2 26 08 96 ed be b8 04 ea 24 f3 ae 73 42 f6 c5 ed 86 e7 f0 4e Data Ascii: -'Z8("p-]fEB(T4<oQbu#].H@+nhu]]B>-`u}vm52!{lMT6,0L3eq(9{3}a]rM!$GRG.lCRR7PW8'Hx=vS+z}#?e6lpw&$sBN
2024-12-20 20:41:44 UTC	16384	IN	Data Raw: 98 94 72 f7 01 c9 52 d3 cc 6d 25 35 7b 2b d2 36 0c 8b b7 cf b6 66 94 d1 f9 db 70 52 76 9c 5e ca 4e c7 aa d3 29 3a 4d d7 2a 8b dd 18 ae 50 bf ac 31 0c 70 0d bc 8c 3b 03 ea e4 40 f6 d0 cd e8 26 50 13 9c d2 ec 0e 7a 6c 75 b0 d0 4f 53 79 ed b7 27 fb 99 b1 fc b5 ec aa 78 af ed 2d 03 7c ad c5 24 41 fe 96 97 95 9a 4d 17 9b 3d a1 71 c7 41 ce d3 97 b0 6c 90 53 eb 75 3c 9a ea 0e 56 8c 7e 7b 73 55 82 92 f5 c0 82 c2 cd 7c 0e 24 96 62 48 30 a9 a9 19 cb cf 0b 56 b4 43 76 2f 40 c8 6e 57 fc 10 14 88 18 a9 e8 8a 1f f7 d9 ff fc 99 af cf e8 ff 1f 08 03 4d 1b 04 c4 10 db 9b a1 fe ef c1 ea 57 85 c9 0a 97 c8 da cd c9 61 7e 40 30 36 ca c0 5a 72 1d 55 c8 f1 fc 5f 83 8b f2 d5 67 5e d2 20 1c 47 3a 81 f5 61 c0 fc 72 6c 99 3c 25 c4 b9 81 e1 3a 6c 7b b5 d0 96 63 03 d0 5e 79 bb fc 51 Data Ascii: rRm%5{+6fpRv^N):M*P1p;@&PzluOSy'x-\|$AM=qAlSu<V~{sU\|$bH0VCv/@nWMWa~@06ZrU_g^ G:arl<%:l{c^yQ
2024-12-20 20:41:44 UTC	14709	IN	Data Raw: 26 f9 0d 45 88 07 c3 71 24 6b e8 25 a6 13 3e ea f0 3d 4d 58 17 fe 5f 86 59 7e 71 cf 0a bc 89 70 49 f1 8e 52 98 72 a5 b7 6c 4c d7 de 9a b3 5e b0 6e 03 1d c2 3d d7 d9 9b 16 d7 1f f2 50 b0 5e cf e2 c1 4d 04 35 ea da 54 c4 75 a4 2f 06 e3 98 56 7c 43 8a 07 a8 70 25 c1 2c 04 57 a3 ce be 78 3e 1c 8a 2c ba 43 6e a2 47 4a 97 0f 9c 08 20 2b f8 0e 1b 45 ba c1 cc d7 8d 5b 22 f0 e2 9c 0a 7e 23 93 3f 9e 4e 70 dd 6c a0 98 e3 5b 6f 9c 8d c1 fc 76 96 de 44 89 1c 99 7c 11 27 e8 cd b7 c9 26 dc aa cc 08 ba 54 3b ee 9d 10 35 e5 90 8b 09 af 1a 7d 42 ac 27 3e 70 6e 50 68 4e 77 90 52 6e 91 4d 23 9a 6b 67 00 de 2b 0d 9f 4d d9 ec b5 a7 65 08 4b ce f6 b3 87 8d 2f 84 4a 6e 10 38 8c c2 5b 07 9e 59 e1 5b c4 3f 05 62 76 2f bc 8f f8 7b 78 79 43 38 d7 47 e0 25 ef 81 a9 7d c0 c1 3a c7 d3 Data Ascii: &Eq$k%>=MX_Y~qpIRrlL^n=P^M5Tu/V\|Cp%,Wx>,CnGJ +E["~#?Npl[ovD\|'&T;5}B'>pnPhNwRnM#kg+MeK/Jn8[Y[?bv/{xyC8G%}:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49813	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:41 UTC	558	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:43 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: e0df5de3-c01e-0005-37c9-4c2e20000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204143Z-186c86bbc58rxtvxhC1SJCcgec0000000rs0000000008vbe x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:44 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-20 20:41:44 UTC	767	IN	Data Raw: 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 d6 62 ff 6d 62 29 Data Ascii: Lp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!bmb)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49815	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:41 UTC	789	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:44 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1417 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C524_SN1 x-ms-request-id: 39466021-1409-4ae7-be53-007f3dd7e1a0 ppserver: PPV: 30 H: SN1PEPF0002F15C V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:44 UTC	1417	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 4d 6f db 38 10 bd f7 57 d8 44 11 88 6b ae 22 39 89 93 c8 61 82 a2 db 45 5d 34 6d 51 75 b1 07 57 0b d0 12 65 73 2b 53 02 49 3b 29 1c fd f7 1d 7d 59 b2 da 75 d1 43 0f 89 e5 e1 cc f0 bd e1 cc a3 7c a3 43 25 32 33 30 5f 33 4e 91 e1 8f e6 f4 5f b6 65 95 15 dd 3e 1b 0c e3 8d 0c 8d 48 a5 65 08 c7 bb 38 55 d6 96 a9 81 1e 08 39 e0 d8 cc 75 40 39 fc cb 2d b3 12 9a b4 ce e0 5a 3f 0f b8 25 f1 4e c4 96 9e cb 00 2b 6e 36 4a 0e 8a 67 9b 3f 66 a9 32 7a 5a 24 14 b4 30 d1 5d 6d f3 76 39 11 91 27 49 92 b2 88 47 de d0 cd a7 75 a8 29 42 43 96 24 96 68 32 10 41 da 67 8e e1 4b 15 46 87 4e bb 90 97 b8 e9 6e 9f 88 db 6b 0a a4 ec 90 42 90 9d 51 84 08 b7 1c 9c 5b f3 1e e7 86 88 2e 69 d5 15 e0 34 9e fb 01 d1 d4 21 92 72 3b e1 72 69 56 53 7d 23 a7 Data Ascii: WMo8WDk"9aE]4mQuWes+SI;)}YuC\|C%230_3N_e>He8U9u@9-Z?%N+n6Jg?f2zZ$0]mv9'IGu)BC$h2AgKFNnkBQ[.i4!r;riVS}#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49816	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:42 UTC	539	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:46 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:46 GMT Content-Type: application/x-javascript Content-Length: 122501 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 22 Nov 2024 01:34:34 GMT etag: 0x8DD0A95D1F56318 x-ms-request-id: daa0577a-401e-0037-2dc9-4c11fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204144Z-186c86bbc58rxtvxhC1SJCcgec0000000rrg000000009n2v x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:46 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7d 5b e3 b8 92 38 fa ff fd 14 c1 e7 5c 26 19 4c da ce 7b cc 78 d8 74 80 6e 76 80 70 08 f4 cc 2e cd e1 71 6c 25 78 48 ec ac ed f0 72 42 f6 b3 ff aa 4a 92 2d 27 0e dd 3d bb cf bd cf 7d ee ec d9 26 96 4a 6f a5 52 a9 aa 54 2a 7d f8 79 e7 ff 2a fd 5c da ff fe ff 4a c3 eb de d5 75 69 70 52 ba fe 7c 7a 75 54 ba 84 af ff 28 5d 0c ae 4f fb c7 df 5f 0f 36 8a ff 7f fd e0 c7 a5 b1 3f 65 25 f8 3b 72 62 e6 95 c2 a0 14 46 25 3f 70 c3 68 1e 46 4e c2 e2 d2 0c fe 8d 7c 67 5a 1a 47 e1 ac 94 3c b0 d2 3c 0a ff 64 6e 12 97 a6 7e 9c 40 a1 11 9b 86 cf a5 32 54 17 79 a5 4b 27 4a 5e 4b a7 97 95 2a d4 cf a0 36 7f e2 07 50 da 0d e7 af f0 fb 21 29 05 61 e2 bb ac e4 04 1e d5 36 85 8f 20 66 a5 45 e0 b1 a8 f4 fc e0 bb 0f a5 73 df 8d c2 38 1c 27 a5 88 Data Ascii: }[8\&L{xtnvp.ql%xHrBJ-'=}&JoRT}y\JuipR\|zuT(]O_6?e%;rbF%?phFN\|gZG<<dn~@2TyK'J^K*6P!)a6 fEs8'
2024-12-20 20:41:46 UTC	12556	IN	Data Raw: 25 55 aa 1d a5 76 7b c7 d0 9d 2a 43 5f 08 8c 3d f3 9d aa 20 68 24 52 f0 ce ca da 3e 68 09 c0 81 9f f0 78 a1 5c 11 52 77 79 19 f0 cb fe 9a 33 7d 76 5e 63 6d 55 81 06 71 37 80 f1 0e e6 d8 a1 18 f0 e2 10 97 71 23 7f 94 ef bf 52 7f 06 51 ce 04 5a 40 01 48 3f 65 7e 42 9d 70 27 83 b2 5a 68 ce d8 63 99 2b af 38 61 68 21 9b cd f1 d2 0c 77 00 b1 8b f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 5f 3a 48 bf 37 6d 3a 9a 00 4c 34 01 08 95 1f a4 6f 71 0f 3b 9b b1 78 ad 1c ea ef e8 23 02 0a d3 91 13 3d 66 11 13 0e fc 35 cf b7 8f e8 8f 45 be 84 78 11 64 3d f7 77 f4 cb 52 72 37 ea b3 1d 14 9b d0 d3 98 6e cf 5c e0 4d 73 d8 43 aa 1e 40 65 29 89 ae d0 2d ac f1 68 8b fb 1d b3 a3 6a 91 9b 23 9a 45 b7 f7 5b f8 94 e1 36 fa de 00 84 93 19 82 ad d0 a8 e4 57 5d 39 d3 31 Data Ascii: %Uv{*C_= h$R>hx\Rwy3}v^cmUq7q#RQZ@H?e~Bp'Zhc+8ah!w)8+09d_:H7m:L4oq;x#=f5Exd=wRr7n\MsC@e)-hj#E[6W]91
2024-12-20 20:41:46 UTC	16384	IN	Data Raw: 61 a9 55 18 bf b0 8a 4a 31 f1 66 da ab 2f 48 71 5f 8b 8b 13 bb 20 7a 61 15 34 91 89 b5 05 19 4c 14 4a 97 ac c1 93 af ac c2 32 9d 5c 5b 5c 41 88 58 45 15 c9 45 d6 3a eb 19 98 3f 61 7d 58 97 a9 28 42 6f 9f c5 c5 df 60 62 47 d6 a7 fa 65 91 5f ed 40 7b e5 15 94 89 d5 d3 81 45 76 4c aa 37 2c 32 d5 06 25 82 d5 10 8f 77 2a 2e ca aa ba cb c5 45 3b f5 f4 c3 69 25 8d f4 a4 97 7c 32 0d 43 d2 cd 03 45 00 84 cb 50 93 8b c8 92 94 f4 e3 43 ff 67 e0 39 c7 e1 58 1d 10 43 4f 5f dc e3 e2 d8 13 96 81 29 ab ec ff 8e 86 c6 b2 a1 6d 6c 68 fc 5c 43 63 6a 68 8e e8 47 dc d0 18 e9 01 99 27 06 82 b0 ac ea e7 4e 2c 08 ad af 47 55 e9 cc 43 be cc 28 a5 ee 94 33 75 ac 6d 74 8d aa 89 e2 98 58 03 c2 01 12 cf 3f 1e 68 e0 19 37 f1 74 0c 5b b4 4f fd 28 ae 81 7a 70 9d ef 1d df b9 76 3c df f9 Data Ascii: aUJ1f/Hq_ za4LJ2\[\AXEE:?a}X(Bo`bGe_@{EvL7,2%w*.E;i%\|2CEPCg9XCO_)mlh\CcjhG'N,GUC(3umtX?h7t[O(zpv<
2024-12-20 20:41:46 UTC	16384	IN	Data Raw: 53 df 9b 77 dc d6 6e f4 c4 e2 d5 80 aa 89 68 e3 7b 66 cc c5 bd f2 7e ac 3f 3c 48 f3 a3 0b 96 6e 2d 58 58 b3 3f 4a 13 ee 2c ea 8b a5 3a 26 e9 52 6d a9 17 a4 3a f6 43 04 77 49 b9 32 98 24 ec f6 59 8f 97 c5 8b eb ce 52 28 12 69 e4 ff da af 3d 50 0a c5 52 f7 42 5c 06 02 b7 57 4b 53 93 e6 91 86 b7 89 8a a2 02 63 8a 5d 81 75 d2 f2 27 45 03 d2 d7 93 4e 0a 0d 88 e0 ec 05 52 21 df 25 3a 1f 5a 90 c2 0a 61 1c 2c fe 22 2f 7f 61 ad 86 1c f2 a3 3e e9 bc 66 18 84 d5 b2 24 dc c2 e3 d9 54 8e 19 cd 7b 7a 4a 3a 2a bf 5c 28 c5 4b 64 1d 3a 9e de 4b 2d d8 4b d4 c0 4e fb b5 f9 8d 28 48 e7 9a 8f e5 bb 65 1c b5 e2 3b 3d b6 38 62 18 29 c4 28 84 ea 50 cf 08 9a 8b b1 43 3a ea a8 20 9e 2a 6f 26 b0 9d 4f e3 de 08 78 ff 8e d0 e1 60 66 c5 11 f2 af f2 64 6e fe 70 d7 25 43 4e 43 1b c8 a1 Data Ascii: Swnh{f~?<Hn-XX?J,:&Rm:CwI2$YR(i=PRB\WKSc]u'ENR!%:Za,"/a>f$T{zJ:\(Kd:K-KN(He;=8b)(PC: o&Ox`fdnp%CNC
2024-12-20 20:41:46 UTC	16384	IN	Data Raw: 26 31 df 56 4b a7 05 e7 dc 75 b4 72 e0 5e 20 54 91 d5 2b 92 b8 9a 0a 8f 98 6f 3f 20 36 02 d0 b4 81 ab d4 5e f4 d2 18 85 d9 95 56 c5 83 b1 ca a1 19 e0 f1 55 5a 06 d0 6c ac 24 43 ae f9 62 7d 41 ac 5d 32 01 ca 24 fe a6 19 91 0f 2a c1 04 cf e5 98 6a 87 99 5d de 85 c4 6e d2 84 3a 1d ab b1 79 a6 a4 61 e5 3d ad fa c6 51 bf 5f ab 0e d1 1f 52 d4 ff 48 2c c9 06 80 b4 d5 00 b1 7f 29 04 51 15 ba 75 d4 32 12 ab b7 8d 1e 1a fc 18 ad e8 95 2c 9d de 21 06 e6 78 67 6f 67 eb c4 0e 57 e2 20 d6 f5 0a 5b cc d3 8c 71 95 4f f4 af d0 80 96 84 6f d9 39 7e 1b 56 78 a5 7e 97 ed ae 02 13 ad b9 5a 45 75 95 9c b6 e0 f5 db 81 c9 c9 00 d5 59 30 b3 c9 00 4a 90 a0 b4 8d ff 5a af 48 eb 7b ea 35 d6 a0 31 05 4e 8c a3 a9 7c d4 c8 88 13 5f 90 57 25 d6 90 4f b7 5f 25 f2 10 c2 23 d5 b9 9a 68 d7 Data Ascii: &1VKur^ T+o? 6^VUZl$Cb}A]2$*j]n:ya=Q_RH,)Qu2,!xgogW [qOo9~Vx~ZEuY0JZH{51N\|_W%O_%#h
2024-12-20 20:41:46 UTC	16384	IN	Data Raw: 26 74 d0 b9 59 87 83 37 74 08 4b ce f3 01 21 c5 b7 4f 27 83 ef 07 00 f7 e4 d9 44 e5 da 07 ba 48 85 3d 24 34 80 66 8f c7 6f 48 71 6c 55 b3 66 b4 83 a5 ff 6b 12 f2 2c e8 1e ad e1 5b b9 39 ba 12 38 49 99 28 e6 e2 a4 be c0 78 35 fa 50 11 4e 27 e0 b0 7e b3 1a 2d 57 bf ee 0b 90 1b de 91 6d 8a 6b c2 0a db a9 5c f4 85 a2 fa a4 fb fb 8b d6 b1 1d ab 73 b6 f1 b0 a0 64 22 b4 6a cd 91 43 76 65 cd 27 e7 e3 69 79 6a 0a e9 26 4b 75 0b 76 a9 93 4b 99 55 a4 35 36 93 57 4a ab f3 c5 ba 53 a9 7d 7a fd 9f de 63 a5 bf 68 60 8b 7b dd 90 48 cd 41 e7 56 1b d2 ab d1 21 38 cc fc c6 93 c3 da 93 43 1b 7e 34 bc 35 5e c4 3a 6f ec 23 8d 43 2f 96 e8 6d b5 8e 2a 5b f5 59 f8 76 32 0d ab 93 36 a4 fb d4 a4 de 7b 38 ae ab d4 39 14 9b e7 ba 44 23 c1 1e 8e 9b 18 52 8b 4e 66 b6 32 92 aa 84 fd b0 Data Ascii: &tY7tK!O'DH=$4foHqlUfk,[98I(x5PN'~-Wmk\sd"jCve'iyj&KuvKU56WJS}zch`{HAV!8C~45^:o#C/m*[Yv26{89D#RNf2
2024-12-20 20:41:46 UTC	16384	IN	Data Raw: 74 40 5c a7 69 e8 bc d7 b8 5c c8 ea c9 f4 92 a2 0a 56 1a 9c d6 7b b5 a6 e1 d1 61 d1 56 cc 86 a5 a5 1d c1 d6 fa e9 ab 72 fc 51 e7 b8 54 9e ed d9 fa 88 a1 c8 af 61 16 b0 5d 39 79 07 0b b0 a2 af 7f 6d b6 c1 06 56 45 6e b0 5e 07 7a 45 5b 07 6d 78 65 1f bc 5f ce ec 92 1e dc 9a b7 b5 f3 bb 2a 2c e4 70 31 96 43 b7 3e 46 b7 7e e8 8d 42 62 48 d1 f2 b5 a2 15 9a ac 24 47 d7 0e 53 f6 0e 70 d6 33 b4 de 41 15 fd c3 69 f9 33 17 a3 d1 8b 81 8a 34 19 bc 1c 2e c6 a5 1c e9 04 2c d7 88 e0 86 c5 ac 13 d9 bd 9a fe 51 e1 59 d9 1e 0b f4 80 d1 e1 06 e6 60 e2 4a 56 18 e7 5a 23 1b 44 86 0d 61 21 c9 ba 31 c2 82 8c 1c 13 97 04 15 e4 a8 07 5a bd 69 0c 3a e9 e7 21 a3 7b 86 e4 97 ef c8 22 5a 7d 37 d9 50 7f 8c b9 a7 58 93 36 e3 60 ed 75 24 7d 76 5c 28 4b 9b 30 4a 2d 0f 84 a3 05 0d fa c5 Data Ascii: t@\i\V{aVrQTa]9ymVEn^zE[mxe_*,p1C>F~BbH$GSp3Ai34.,QY`JVZ#Da!1Zi:!{"Z}7PX6`u$}v\(K0J-
2024-12-20 20:41:46 UTC	12448	IN	Data Raw: e2 d5 a7 85 19 0b 41 0c ca 78 42 6a f4 16 63 e4 17 2a 79 18 24 95 4d ec 97 6e 06 63 5b af 41 5e 65 97 15 2a 8e 09 eb c1 81 2d 20 ee e8 35 6d fc 68 8e 19 cb 68 51 32 cf ab b5 4b b7 48 37 1d c2 15 89 5f 20 ef c1 5b c2 ec 0b 3b 52 81 dd c9 c5 f5 23 95 d2 6a 11 85 15 70 55 90 7d a0 80 bb 51 bc 0e 24 91 d8 ff 84 27 e6 71 8c 57 9a 3e e5 b9 83 88 76 50 bb 52 d5 de d5 5b 76 6d ae cc 4f 9d 3b 56 ed 0f 78 8e 6a f5 d8 b4 3f 18 6d 7a 6e ba ba 33 d6 ee 58 d3 d7 c6 67 b4 eb 9f d7 71 3c a8 f2 71 a8 3e 80 13 44 53 bd 88 ad 76 e3 69 25 46 ab 44 8b a1 61 f6 1b c1 72 ae bb ba 26 3f 6b 50 89 da e6 8c 8b 68 6f 05 e9 7d a8 50 b9 18 00 1e a2 8b 55 ef 24 78 05 3b c2 5b 25 f3 a4 18 85 49 0a be 7a ae a6 db 6e 0a 7b 9c 5a a9 43 11 08 e8 6f 54 7b 43 a4 0a 27 cb da 2e 03 6a 03 1b ac Data Ascii: AxBjcy$Mnc[A^e- 5mhhQ2KH7_ [;R#jpU}Q$'qW>vPR[vmO;Vxj?mzn3Xgq<q>DSvi%FDar&?kPho}PU$x;[%Izn{ZCoT{C'.j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49817	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:42 UTC	684	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: r9J3E6jPAnb6jxF+CcxghA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:41:45 UTC	736	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:41:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: be9d2c48-002e-4abd-9001-b58fcaa62d00 x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49818	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:45 UTC	521	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:49 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:48 GMT Content-Type: application/x-javascript Content-Length: 61130 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 36091705-c01e-0031-0651-4b55fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204148Z-186c86bbc58n4pnghC1SJCgnts0000000s2g000000005caa x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:49 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-12-20 20:41:49 UTC	16379	IN	Data Raw: 2d b4 27 9c a9 c9 8b 5a 0f 38 b6 a8 a6 14 28 15 ad 22 70 c3 a8 99 0a ae d8 2d eb b3 5d aa 66 05 45 42 a6 28 54 f6 34 b2 a4 3c f0 6f cb d7 51 62 14 75 b1 b8 bb 92 d7 23 5d 84 2e 9e 48 cd 40 d1 97 2b 6e 85 c2 da e7 c2 9b 81 11 05 05 68 00 75 5d e0 5d 42 3e 85 2d 60 75 d5 7d 87 76 b1 a1 ad 13 0f f9 87 ee cd e6 6d ed f0 08 35 32 21 7b 11 6c f2 4d 05 bd 54 06 9a d4 36 a1 ae ce e4 2c 30 b4 4c 33 8d 65 71 f8 1d aa a1 e0 16 28 39 03 11 fa a7 ff ad d8 bc b8 c4 7b 33 7d 91 61 87 5d aa 72 b7 4d 9e b6 13 21 ad c1 82 80 fd 24 9f cc 9a e7 47 00 52 47 2e 6c 87 43 d1 dc bf 02 52 52 f8 37 14 e4 0f 50 fa 13 57 38 83 a2 27 48 78 cf fd 3d 76 53 2b 7a 96 7d 23 3f a4 04 ff 9b bb 8d fb 65 36 a1 6c 15 e0 70 0f 77 fb f2 26 08 96 ed be b8 04 ea 24 f3 ae 73 42 f6 c5 ed 86 e7 f0 4e Data Ascii: -'Z8("p-]fEB(T4<oQbu#].H@+nhu]]B>-`u}vm52!{lMT6,0L3eq(9{3}a]rM!$GRG.lCRR7PW8'Hx=vS+z}#?e6lpw&$sBN
2024-12-20 20:41:49 UTC	16384	IN	Data Raw: 41 58 b8 b0 be f3 e0 3f de 14 55 1a 52 35 f6 ff 0b c7 4f ae 33 8a e8 8a 73 14 57 95 12 14 0e ef 75 e8 ba 8a 04 63 a3 08 fa 58 95 9b 28 9a 84 63 9c 11 8b b7 bf 28 12 fb b0 d0 dd 31 33 03 24 c4 b0 cd f7 04 8c 62 ae 87 60 19 50 d9 d5 be 4b 5d b1 cd 7e 1c 6f d1 f6 86 06 69 2c ef b9 3e a3 72 8c 91 18 63 b5 9e c5 be 1b 97 f8 a7 3a 39 3e c7 1b 95 d2 a6 44 b1 2b 32 f6 56 c5 72 74 5e d0 b5 35 f1 6b ca 6a 32 d9 82 29 57 7a 5b ae c5 ad 85 1c 44 dd 4f ee d3 f1 a7 fd c8 53 a1 8a 2a 70 f2 b5 ae 90 76 ee a9 38 b7 5a 46 96 80 01 7b 00 7f a4 51 fe fa 11 3a ab fa a6 e4 5b 84 bd b0 17 c1 27 97 47 f1 d0 7b d5 ec 66 17 cd 5e 1b 3e db d8 59 69 26 ac 0c d1 fc 30 ca 07 59 cc 9a ac e5 aa ff 27 6c 8e 78 29 92 1c 2e 25 2b d2 a5 08 ff 60 29 01 34 5d 8a ce e7 4b 89 b9 d1 52 52 cd 64 Data Ascii: AX?UR5O3sWucX(c(13$b`PK]~oi,>rc:9>D+2Vrt^5kj2)Wz[DOS*pv8ZF{Q:['G{f^>Yi&0Y'lx).%+`)4]KRRd
2024-12-20 20:41:49 UTC	12789	IN	Data Raw: f2 9b 90 10 2f f2 23 8b 48 dd b5 11 d3 a5 f4 87 85 e8 78 20 90 57 ea c7 f6 02 e3 ab 44 a0 94 ea 22 63 7a cd 10 4e 55 5e cb a3 a1 15 17 22 46 7f de a5 e9 8d 7f 45 d7 48 a1 b1 a1 5e 67 f5 b3 5b be 7a a8 4a 09 2f d7 d6 36 d9 5f ba c5 21 c0 e7 9b d4 e7 bb 8b 2d fa 7b 25 36 db 75 f0 ae e3 96 1f 0a 24 e6 ca be 86 dc 6b 4d 15 dc 06 11 06 74 ed 75 ae 83 eb d9 ec 56 9d c0 8e d0 32 b0 c0 ea 3f bc 76 87 a9 bc 5d 00 05 9f 92 ed de 49 a9 6b e5 14 dc d1 aa aa 22 07 81 ce be b8 eb 95 38 ec 29 7d 7a fa f2 40 7d 72 aa 0e ce 51 70 70 71 ca ac eb b7 22 e1 24 38 d2 8e 56 8e 4c 47 2b 1d da 02 27 b0 f8 4d 84 7e 1d 3b 5a 71 fc 7d da a7 32 23 2b dd d1 c8 cc a4 36 13 07 10 1a 37 04 a3 e8 4a 39 e2 75 da 2b 8a e8 76 52 bc 6a 76 ad f7 f5 f5 b6 f5 4e 34 26 dd 47 7a 88 7e 2b da 5a 87 Data Ascii: /#Hx WD"czNU^"FEH^g[zJ/6_!-{%6u$kMtuV2?v]Ik"8)}z@}rQppq"$8VLG+'M~;Zq}2#+67J9u+vRjvN4&Gz~+Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49819	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:46 UTC	734	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:49 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:49 GMT Content-Type: application/x-javascript Content-Length: 116388 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:37 GMT etag: 0x8DD05A546E5C15E x-ms-request-id: ea77f0ba-b01e-006e-46d0-4a9679000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204148Z-186c86bbc58nlsmlhC1SJC1pzn0000000rxg00000000eb9w x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:49 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 63 88 8c f0 90 84 f4 30 93 04 0e 90 e9 e9 21 4c 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b 3b 3f 38 3d af 1d bf ab 9d ff e5 e8 f4 6d ed 04 ee 7e ad 7d 3c 3e 3f 7a 73 b8 7e 3d d8 28 fe 3b 9f f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bc 28 79 a8 1d 9d 58 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-cc0!La#ytkJ&^~_jW;;?8=m~}<>?zs~=(;qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yX-Cmp?5/QmSb^Kjw8}Q!o
2024-12-20 20:41:49 UTC	14460	IN	Data Raw: 34 1d 84 83 a7 5e 67 62 69 a4 09 2b 0b 6a 06 db 85 c2 38 1e 8c d1 2e 47 54 b9 4f 81 98 cd 68 0f 45 0e 89 61 23 e5 23 69 30 8d 8e d0 e7 28 8b 58 68 53 7a 4b 19 2c d1 cb e6 94 14 01 f5 02 a7 61 8a c3 e7 92 3f 83 44 b1 41 e9 34 a0 f6 49 9c 4b 97 5c 2e b2 83 99 df 6e 64 f7 22 1d a9 6a 7c af 83 44 ae ba ce 77 4a ec 76 58 ba 09 7f 3c fc 13 c1 9f 12 7b 99 49 16 6c f2 56 14 91 b0 5b 98 8a ee d3 51 90 d8 bd d7 87 26 ff 29 b6 16 b4 53 69 dc 63 77 43 78 1e f9 6e d4 f7 f7 52 8a 8d 4e d9 07 12 e6 5b 50 0b 1a 5f 6f 60 75 63 38 0e fe c6 58 f4 54 3c 81 89 18 bb be c5 e0 71 d3 d6 6c a4 6b e3 9f 62 da f2 1b 68 9d 88 c5 fc 0d 17 bf 65 d8 5c 6e fc 1c 35 bd fd 54 78 43 6e 78 24 2c e9 fb e8 f5 e4 6f 6c e4 5a dd 29 ea 62 27 f0 74 b2 e7 f5 27 5a ef 9a 48 72 53 ff 26 d0 a9 29 a2 Data Ascii: 4^gbi+j8.GTOhEa##i0(XhSzK,a?DA4IK\.nd"j\|DwJvX<{IlV[Q&)SicwCxnRN[P_o`uc8XT<qlkbhe\n5TxCnx$,olZ)b't'ZHrS&)
2024-12-20 20:41:49 UTC	16384	IN	Data Raw: 75 f4 c4 c8 b3 df 90 28 29 3e 50 20 f4 7a fb 3b 69 06 f5 84 e6 08 13 8d 89 a7 2d 26 3d 21 d6 55 2b 8c dd 61 58 a2 a0 98 c3 8f c7 00 a2 b1 60 bd 6d c3 85 f1 30 39 03 2e 39 87 8b 8e cc 32 c1 92 d3 39 b6 8d 45 23 4a af 0a 87 1c e0 c0 b6 77 49 49 41 cf a2 2e 9c 4c 3e b2 72 58 bb 38 46 3e 94 18 bb 88 ae f0 20 50 be 85 04 e7 5c c3 d9 00 67 f4 f0 c0 bf f4 f0 d0 e2 e5 18 da 5c 2b 82 1e 7f 09 1e c1 f8 23 6b b4 4d b0 93 d6 4a a8 1f 9d 0b a4 4a 4e 78 e1 68 c0 9b 25 86 ec 18 7c d9 06 6f ce 16 45 ea 47 07 2d 2b 5d 58 23 22 65 94 f1 26 16 c3 50 3a 70 e4 14 f7 3f 9b 85 7d 69 f6 33 88 5d a0 86 ad 6d d4 a2 a6 f2 62 cb 54 a3 c6 4f 54 a3 e6 b5 fb 6d 5e bf 88 3a 0f 5e 79 2a 31 ef 67 3c 33 4f 8c 92 56 8e 9a 04 6e 69 cc 65 1e c0 5c 72 eb 31 09 6e 15 f6 36 ff 32 6e fd 5f 6a c5 Data Ascii: u()>P z;i-&=!U+aX`m09.929E#JwIIA.L>rX8F> P\g\+#kMJJNxh%\|oEG-+]X#"e&P:p?}i3]mbTOTm^:^y*1g<3OVnie\r1n62n_j
2024-12-20 20:41:49 UTC	16384	IN	Data Raw: 82 63 bc ea c8 e9 58 c8 63 34 c0 98 5a 72 c5 37 ea 92 35 f5 47 96 07 bf 94 11 b6 85 76 8f 66 89 94 7a 0f cf c3 92 56 66 93 1f 9e fb 52 25 bf bf 2d aa e2 ee e1 9e 99 04 a8 94 42 7d 0c 48 ca c3 e3 09 9c f4 40 88 93 a6 31 5a 38 4e 93 e6 8b b0 08 7f 8c a3 1b 38 52 93 a6 02 1e 1c a8 ea 0c b8 0e c6 06 cc 2e 83 a9 71 75 05 f0 b8 16 68 c0 2e 80 e3 ba 66 4e 16 e5 f1 2f a8 9b 90 30 65 37 fc c1 55 78 fb 7c 0e e0 c0 a1 a4 ee 25 3a 4c bf 4a 0a 38 7c ce e9 32 17 97 c6 22 ba 70 88 0c 50 9f 56 a7 80 65 98 21 b2 40 58 45 96 d4 92 fa 78 52 c0 14 56 2f e0 08 ba 10 7e 93 a5 bd 86 43 7b 0d e3 1c f5 f9 58 b2 61 c8 e3 25 46 e4 6d 80 45 c5 ef 8b 2c 4c 72 68 e4 f7 8a 3e 26 15 44 8f 5d 8c cd 7a 78 b8 36 0b 7f a2 01 fc 90 9e ac f2 47 49 40 1a 68 16 1b 69 05 2f 31 70 75 15 b8 ca 9b Data Ascii: cXc4Zr75GvfzVfR%-B}H@1Z8N8R.quh.fN/0e7Ux\|%:LJ8\|2"pPVe!@XExRV/~C{Xa%FmE,Lrh>&D]zx6GI@hi/1pu
2024-12-20 20:41:50 UTC	16384	IN	Data Raw: c4 4d 98 50 22 77 aa b2 39 42 6d b9 8b 57 ac 85 e7 e4 b0 04 ac d5 4d 15 d4 b9 3e e9 68 97 62 0e 8b f8 b3 2b ab d4 64 5d 58 a6 fe 0b 02 6b bb a8 40 12 00 f3 f2 59 6a bb fb 8a 1e 2d 2c 71 0c d5 66 81 fe 54 a5 96 a1 aa 0c f5 c2 fc db e9 9b d7 86 02 05 63 f5 6c 3a 6d 8a bd 37 8f dd 0c c3 90 e7 1e 9c 3a f3 8b 12 cf c6 0f 85 3b 28 07 a8 57 3b 89 28 01 17 32 6e 8a 88 41 0c 4b 9e 6c 61 e5 a6 2f e3 27 53 f3 93 85 5d 99 0e e4 6f dc ac 25 58 30 2f 81 2a 64 16 ab 65 94 09 85 56 29 1e 14 54 b3 9d f8 53 9b 00 2f 51 f7 8f 9e 65 c2 31 fe 95 6f a4 dc ed 9b 3c a0 b6 b7 29 a7 8e 60 5f 74 5c 10 84 8b 10 57 98 ce 17 22 ca 0d 62 f9 f2 8d 69 d7 8d 1d 36 bf 2f e2 1f a8 14 b7 26 67 05 fc 54 46 65 6e f6 5b 70 56 37 ee 8d 69 7b 7d f3 60 46 ab c6 58 31 b4 dd ae 8c ce 4d 7c 11 8f 72 Data Ascii: MP"w9BmWM>hb+d]Xk@Yj-,qfTcl:m7:;(W;(2nAKla/'S]o%X0/*deV)TS/Qe1o<)`_t\W"bi6/&gTFen[pV7i{}`FX1M\|r
2024-12-20 20:41:50 UTC	2731	IN	Data Raw: 30 b6 a6 f0 bb 64 0f 1c 96 5b bf c1 27 df e9 80 29 61 48 a9 19 7c a3 f3 49 83 f6 43 00 53 18 42 7c f2 00 30 84 a9 66 a1 39 a0 f3 f8 42 a8 23 25 47 7f 38 7b e0 99 33 9d a5 cd 17 f1 59 19 07 ac 7c 80 13 12 19 1f 10 fd b6 e0 43 3c ca 55 2b 8d 05 63 a5 8b ba 31 a6 18 df 19 50 ff 94 22 7d c0 72 a5 2d 9c 5a 51 98 2e 71 ec 00 aa e3 6a 5d 7e 75 65 ad 57 62 75 60 42 87 e1 86 bd 5d 12 51 a0 34 82 5e d6 41 6b 82 ef 7f d2 81 a2 43 e8 8d c9 b1 2f b0 27 69 9a 36 a2 9d eb c8 7c 51 d6 06 e4 76 88 76 ae 95 04 ed 0c 84 24 3a ca d8 7d 18 89 86 64 34 c5 0b 57 ec ff d6 50 6b 9c ba 95 4b 8f 51 96 aa 80 10 d3 3d dd e6 e5 e4 d0 e0 aa b6 0a 06 20 54 87 1e 8b a8 f2 50 cb c6 00 19 fc 85 24 aa 3c 86 13 52 97 25 02 3a 65 6b 46 01 59 1d 47 92 fc 81 24 e7 23 49 62 5b 44 2c 63 26 29 33 Data Ascii: 0d[')aH\|ICSB\|0f9B#%G8{3Y\|C<U+c1P"}r-ZQ.qj]~ueWbu`B]Q4^AkC/'i6\|Qvv$:}d4WPkKQ= TP$<R%:ekFYG$#Ib[D,c&)3
2024-12-20 20:41:50 UTC	16384	IN	Data Raw: 86 95 11 d3 fd 56 c8 eb cf c6 66 d5 94 4c 94 0e 31 1f c5 43 81 8d 5b b5 5b 66 95 de 06 d3 20 6c 65 22 23 b1 9b 89 64 3b ba c1 c7 4f 37 19 d6 cb 02 37 c9 20 30 02 e7 28 d7 48 1f 51 95 5d 96 57 5a f2 c5 e8 3a 11 fa 1e 35 56 84 be 74 a4 a7 84 be 24 e2 4d 0b 7d d1 35 72 60 8e 75 8d 8c 75 34 14 fc 4e 54 5b d9 3b 7e 12 b0 91 f9 d6 0a c7 70 c6 dd 6f 02 46 03 98 22 6a 70 c5 1c 59 28 ac d8 04 7a d1 17 b8 62 00 5c cf 18 8d 8f 80 62 62 03 34 3b 8a f4 b4 61 ec a0 65 c3 03 6e a3 37 c6 99 f5 cd 71 da 1c d7 01 12 9c ca 4d f3 6e b1 f0 74 3f 6d 8e 1b d0 63 69 8e eb 9b 7e 77 ce cd 71 7d c5 32 8c 89 b7 7d 33 65 2f 16 ab ad c6 6c ca 6e 38 e6 a2 9c 67 7a aa 62 e7 ae e5 1b fa 48 bf 29 4c 91 83 a3 04 30 d3 e3 9b f6 34 9f 67 13 40 6e 53 94 e6 8e 51 9a 4b a3 ef 4e 7b eb 3c ed 64 Data Ascii: VfL1C[[f le"#d;O77 0(HQ]WZ:5Vt$M}5r`uu4NT[;~poF"jpY(zb\bb4;aen7qMnt?mci~wq}2}3e/ln8gzbH)L04g@nSQKN{<d
2024-12-20 20:41:50 UTC	16384	IN	Data Raw: d1 98 f2 91 d9 84 83 37 8b 37 47 96 9c 68 80 b3 89 35 95 af 00 6b 9e c0 c1 0c 83 04 f3 29 6d 95 59 a9 75 b8 64 30 ac 43 64 c9 85 11 ef c8 bc c3 cc 8a ef 4e 3f 5e fc 7a 7e 7d fa e1 c3 e9 1f d7 2f 3f bd 7e 7d fe e1 fa d7 8b f3 df ae d0 f7 2d fb cb 13 e5 4b 3c 4b 48 19 bd 80 f1 42 ab 68 f8 9d 12 7d 07 0d 87 2b c9 17 db 73 b4 73 5f 05 e8 81 22 f2 c0 a8 3a 9b e3 d5 72 9c 5e 11 73 a8 a5 6c 8d 84 38 44 1a 7d 50 de 45 01 5f 68 13 eb e3 2a 92 a1 a8 93 b7 4f 5c 45 1b 31 d4 b5 df 7c cf 1d ed f1 da 1a 37 5a 6a f7 8f 1d 80 43 82 b4 7c bf 67 fa dd 3e 00 21 4a 68 81 2a d8 cc 1c 32 85 16 9a 71 52 0a 69 83 de 24 6f fe 6d 50 04 89 97 d6 e4 80 72 63 e1 2e 8a 12 54 80 bb c9 8b fd d7 30 99 a9 34 f3 46 72 12 c6 ed ea 96 d1 b6 4e 60 94 7d 4c 39 ea 77 1d 05 87 f7 29 23 87 0a 0b Data Ascii: 77Gh5k)mYud0CdN?^z~}/?~}-K<KHBh}+ss_":r^sl8D}PE_hO\E1\|7ZjC\|g>!Jh2qRi$omPrc.T04FrN`}L9w)#
2024-12-20 20:41:50 UTC	1700	IN	Data Raw: ee 3a 90 05 da c4 2d d3 4f 15 80 f7 60 c3 48 16 c3 71 68 29 94 26 c3 8a ee 38 9e bd 5f 5a f6 fd d2 b2 ef 57 2f fb fe d2 b2 af 1e f7 2b 16 b5 bd 73 a8 49 a9 d4 ff b4 d1 70 df 19 9a ce 3f 21 76 78 ae 74 f4 84 5c 15 e5 3d de 4f ae 12 c3 78 3f bb 4a d8 e2 7d 70 a5 cc da fb bc b8 cf 17 c9 7f a5 ed cb 9f a2 4d b6 ac ff 2c 15 d1 7b 77 9a 38 44 bf dd c4 e1 37 18 37 50 5f 2a ec 1b 64 6f 0a 66 0e 94 f9 f7 5b 3a 14 47 ba f8 4b eb ee 2f ad bb a2 d6 5d d9 30 e8 4f 30 7d c9 fe 13 66 0a 7f 19 d6 fc 17 19 d6 74 36 b6 37 d9 b2 86 dc 70 4c a5 83 8d 89 b4 a7 99 ad 30 96 59 69 06 fc 60 13 59 60 5c b3 a2 49 8c f0 80 e0 5b 3b ad c7 ad 8d 8e 74 c2 4b 9e 13 32 96 1a 02 f3 78 ce 6e 28 c5 20 90 15 8f aa 0d 51 54 de 3b 74 b7 91 87 8e 7c f4 25 a0 f4 64 23 a1 27 1b fa d1 92 9e 6c e6 Data Ascii: :-O`Hqh)&8_ZW/+sIp?!vxt\=Ox?J}pM,{w8D77P_*dof[:GK/]0O0}ft67pL0Yi`Y`\I[;tK2xn( QT;t\|%d#'l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49821	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:46 UTC	827	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 65f66297-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:48 UTC	485	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:41:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: b73b7cb2-ac9e-4b7b-a5e6-37fb55726b8d x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: E93AACCA80E644FE92C2ED10E4E16139 Ref B: BY3EDGE0120 Ref C: 2024-12-20T20:41:48Z access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:48 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-12-20 20:41:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49822	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:48 UTC	770	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0 Sec-WebSocket-Key: cAZ/tOIcHUdSaCoYmQ6BVw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:41:52 UTC	733	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:41:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: ba64c6b0-3f19-4e2e-ac50-dc5c25cf3c00 x-ms-ests-server: 2.1.19683.6 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:41:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49823	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:51 UTC	562	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:55 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:55 GMT Content-Type: application/x-javascript Content-Length: 116388 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:37 GMT etag: 0x8DD05A546E5C15E x-ms-request-id: ea77f0ba-b01e-006e-46d0-4a9679000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204153Z-186c86bbc588zn5chC1SJCrbq40000000s500000000001mb x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:55 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 63 88 8c f0 90 84 f4 30 93 04 0e 90 e9 e9 21 4c 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b 3b 3f 38 3d af 1d bf ab 9d ff e5 e8 f4 6d ed 04 ee 7e ad 7d 3c 3e 3f 7a 73 b8 7e 3d d8 28 fe 3b 9f f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bc 28 79 a8 1d 9d 58 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-cc0!La#ytkJ&^~_jW;;?8=m~}<>?zs~=(;qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yX-Cmp?5/QmSb^Kjw8}Q!o
2024-12-20 20:41:55 UTC	14460	IN	Data Raw: 34 1d 84 83 a7 5e 67 62 69 a4 09 2b 0b 6a 06 db 85 c2 38 1e 8c d1 2e 47 54 b9 4f 81 98 cd 68 0f 45 0e 89 61 23 e5 23 69 30 8d 8e d0 e7 28 8b 58 68 53 7a 4b 19 2c d1 cb e6 94 14 01 f5 02 a7 61 8a c3 e7 92 3f 83 44 b1 41 e9 34 a0 f6 49 9c 4b 97 5c 2e b2 83 99 df 6e 64 f7 22 1d a9 6a 7c af 83 44 ae ba ce 77 4a ec 76 58 ba 09 7f 3c fc 13 c1 9f 12 7b 99 49 16 6c f2 56 14 91 b0 5b 98 8a ee d3 51 90 d8 bd d7 87 26 ff 29 b6 16 b4 53 69 dc 63 77 43 78 1e f9 6e d4 f7 f7 52 8a 8d 4e d9 07 12 e6 5b 50 0b 1a 5f 6f 60 75 63 38 0e fe c6 58 f4 54 3c 81 89 18 bb be c5 e0 71 d3 d6 6c a4 6b e3 9f 62 da f2 1b 68 9d 88 c5 fc 0d 17 bf 65 d8 5c 6e fc 1c 35 bd fd 54 78 43 6e 78 24 2c e9 fb e8 f5 e4 6f 6c e4 5a dd 29 ea 62 27 f0 74 b2 e7 f5 27 5a ef 9a 48 72 53 ff 26 d0 a9 29 a2 Data Ascii: 4^gbi+j8.GTOhEa##i0(XhSzK,a?DA4IK\.nd"j\|DwJvX<{IlV[Q&)SicwCxnRN[P_o`uc8XT<qlkbhe\n5TxCnx$,olZ)b't'ZHrS&)
2024-12-20 20:41:55 UTC	16384	IN	Data Raw: 75 f4 c4 c8 b3 df 90 28 29 3e 50 20 f4 7a fb 3b 69 06 f5 84 e6 08 13 8d 89 a7 2d 26 3d 21 d6 55 2b 8c dd 61 58 a2 a0 98 c3 8f c7 00 a2 b1 60 bd 6d c3 85 f1 30 39 03 2e 39 87 8b 8e cc 32 c1 92 d3 39 b6 8d 45 23 4a af 0a 87 1c e0 c0 b6 77 49 49 41 cf a2 2e 9c 4c 3e b2 72 58 bb 38 46 3e 94 18 bb 88 ae f0 20 50 be 85 04 e7 5c c3 d9 00 67 f4 f0 c0 bf f4 f0 d0 e2 e5 18 da 5c 2b 82 1e 7f 09 1e c1 f8 23 6b b4 4d b0 93 d6 4a a8 1f 9d 0b a4 4a 4e 78 e1 68 c0 9b 25 86 ec 18 7c d9 06 6f ce 16 45 ea 47 07 2d 2b 5d 58 23 22 65 94 f1 26 16 c3 50 3a 70 e4 14 f7 3f 9b 85 7d 69 f6 33 88 5d a0 86 ad 6d d4 a2 a6 f2 62 cb 54 a3 c6 4f 54 a3 e6 b5 fb 6d 5e bf 88 3a 0f 5e 79 2a 31 ef 67 3c 33 4f 8c 92 56 8e 9a 04 6e 69 cc 65 1e c0 5c 72 eb 31 09 6e 15 f6 36 ff 32 6e fd 5f 6a c5 Data Ascii: u()>P z;i-&=!U+aX`m09.929E#JwIIA.L>rX8F> P\g\+#kMJJNxh%\|oEG-+]X#"e&P:p?}i3]mbTOTm^:^y*1g<3OVnie\r1n62n_j
2024-12-20 20:41:55 UTC	16384	IN	Data Raw: 82 63 bc ea c8 e9 58 c8 63 34 c0 98 5a 72 c5 37 ea 92 35 f5 47 96 07 bf 94 11 b6 85 76 8f 66 89 94 7a 0f cf c3 92 56 66 93 1f 9e fb 52 25 bf bf 2d aa e2 ee e1 9e 99 04 a8 94 42 7d 0c 48 ca c3 e3 09 9c f4 40 88 93 a6 31 5a 38 4e 93 e6 8b b0 08 7f 8c a3 1b 38 52 93 a6 02 1e 1c a8 ea 0c b8 0e c6 06 cc 2e 83 a9 71 75 05 f0 b8 16 68 c0 2e 80 e3 ba 66 4e 16 e5 f1 2f a8 9b 90 30 65 37 fc c1 55 78 fb 7c 0e e0 c0 a1 a4 ee 25 3a 4c bf 4a 0a 38 7c ce e9 32 17 97 c6 22 ba 70 88 0c 50 9f 56 a7 80 65 98 21 b2 40 58 45 96 d4 92 fa 78 52 c0 14 56 2f e0 08 ba 10 7e 93 a5 bd 86 43 7b 0d e3 1c f5 f9 58 b2 61 c8 e3 25 46 e4 6d 80 45 c5 ef 8b 2c 4c 72 68 e4 f7 8a 3e 26 15 44 8f 5d 8c cd 7a 78 b8 36 0b 7f a2 01 fc 90 9e ac f2 47 49 40 1a 68 16 1b 69 05 2f 31 70 75 15 b8 ca 9b Data Ascii: cXc4Zr75GvfzVfR%-B}H@1Z8N8R.quh.fN/0e7Ux\|%:LJ8\|2"pPVe!@XExRV/~C{Xa%FmE,Lrh>&D]zx6GI@hi/1pu
2024-12-20 20:41:55 UTC	16384	IN	Data Raw: c4 4d 98 50 22 77 aa b2 39 42 6d b9 8b 57 ac 85 e7 e4 b0 04 ac d5 4d 15 d4 b9 3e e9 68 97 62 0e 8b f8 b3 2b ab d4 64 5d 58 a6 fe 0b 02 6b bb a8 40 12 00 f3 f2 59 6a bb fb 8a 1e 2d 2c 71 0c d5 66 81 fe 54 a5 96 a1 aa 0c f5 c2 fc db e9 9b d7 86 02 05 63 f5 6c 3a 6d 8a bd 37 8f dd 0c c3 90 e7 1e 9c 3a f3 8b 12 cf c6 0f 85 3b 28 07 a8 57 3b 89 28 01 17 32 6e 8a 88 41 0c 4b 9e 6c 61 e5 a6 2f e3 27 53 f3 93 85 5d 99 0e e4 6f dc ac 25 58 30 2f 81 2a 64 16 ab 65 94 09 85 56 29 1e 14 54 b3 9d f8 53 9b 00 2f 51 f7 8f 9e 65 c2 31 fe 95 6f a4 dc ed 9b 3c a0 b6 b7 29 a7 8e 60 5f 74 5c 10 84 8b 10 57 98 ce 17 22 ca 0d 62 f9 f2 8d 69 d7 8d 1d 36 bf 2f e2 1f a8 14 b7 26 67 05 fc 54 46 65 6e f6 5b 70 56 37 ee 8d 69 7b 7d f3 60 46 ab c6 58 31 b4 dd ae 8c ce 4d 7c 11 8f 72 Data Ascii: MP"w9BmWM>hb+d]Xk@Yj-,qfTcl:m7:;(W;(2nAKla/'S]o%X0/*deV)TS/Qe1o<)`_t\W"bi6/&gTFen[pV7i{}`FX1M\|r
2024-12-20 20:41:55 UTC	2731	IN	Data Raw: 30 b6 a6 f0 bb 64 0f 1c 96 5b bf c1 27 df e9 80 29 61 48 a9 19 7c a3 f3 49 83 f6 43 00 53 18 42 7c f2 00 30 84 a9 66 a1 39 a0 f3 f8 42 a8 23 25 47 7f 38 7b e0 99 33 9d a5 cd 17 f1 59 19 07 ac 7c 80 13 12 19 1f 10 fd b6 e0 43 3c ca 55 2b 8d 05 63 a5 8b ba 31 a6 18 df 19 50 ff 94 22 7d c0 72 a5 2d 9c 5a 51 98 2e 71 ec 00 aa e3 6a 5d 7e 75 65 ad 57 62 75 60 42 87 e1 86 bd 5d 12 51 a0 34 82 5e d6 41 6b 82 ef 7f d2 81 a2 43 e8 8d c9 b1 2f b0 27 69 9a 36 a2 9d eb c8 7c 51 d6 06 e4 76 88 76 ae 95 04 ed 0c 84 24 3a ca d8 7d 18 89 86 64 34 c5 0b 57 ec ff d6 50 6b 9c ba 95 4b 8f 51 96 aa 80 10 d3 3d dd e6 e5 e4 d0 e0 aa b6 0a 06 20 54 87 1e 8b a8 f2 50 cb c6 00 19 fc 85 24 aa 3c 86 13 52 97 25 02 3a 65 6b 46 01 59 1d 47 92 fc 81 24 e7 23 49 62 5b 44 2c 63 26 29 33 Data Ascii: 0d[')aH\|ICSB\|0f9B#%G8{3Y\|C<U+c1P"}r-ZQ.qj]~ueWbu`B]Q4^AkC/'i6\|Qvv$:}d4WPkKQ= TP$<R%:ekFYG$#Ib[D,c&)3
2024-12-20 20:41:55 UTC	16384	IN	Data Raw: 86 95 11 d3 fd 56 c8 eb cf c6 66 d5 94 4c 94 0e 31 1f c5 43 81 8d 5b b5 5b 66 95 de 06 d3 20 6c 65 22 23 b1 9b 89 64 3b ba c1 c7 4f 37 19 d6 cb 02 37 c9 20 30 02 e7 28 d7 48 1f 51 95 5d 96 57 5a f2 c5 e8 3a 11 fa 1e 35 56 84 be 74 a4 a7 84 be 24 e2 4d 0b 7d d1 35 72 60 8e 75 8d 8c 75 34 14 fc 4e 54 5b d9 3b 7e 12 b0 91 f9 d6 0a c7 70 c6 dd 6f 02 46 03 98 22 6a 70 c5 1c 59 28 ac d8 04 7a d1 17 b8 62 00 5c cf 18 8d 8f 80 62 62 03 34 3b 8a f4 b4 61 ec a0 65 c3 03 6e a3 37 c6 99 f5 cd 71 da 1c d7 01 12 9c ca 4d f3 6e b1 f0 74 3f 6d 8e 1b d0 63 69 8e eb 9b 7e 77 ce cd 71 7d c5 32 8c 89 b7 7d 33 65 2f 16 ab ad c6 6c ca 6e 38 e6 a2 9c 67 7a aa 62 e7 ae e5 1b fa 48 bf 29 4c 91 83 a3 04 30 d3 e3 9b f6 34 9f 67 13 40 6e 53 94 e6 8e 51 9a 4b a3 ef 4e 7b eb 3c ed 64 Data Ascii: VfL1C[[f le"#d;O77 0(HQ]WZ:5Vt$M}5r`uu4NT[;~poF"jpY(zb\bb4;aen7qMnt?mci~wq}2}3e/ln8gzbH)L04g@nSQKN{<d
2024-12-20 20:41:55 UTC	16384	IN	Data Raw: d1 98 f2 91 d9 84 83 37 8b 37 47 96 9c 68 80 b3 89 35 95 af 00 6b 9e c0 c1 0c 83 04 f3 29 6d 95 59 a9 75 b8 64 30 ac 43 64 c9 85 11 ef c8 bc c3 cc 8a ef 4e 3f 5e fc 7a 7e 7d fa e1 c3 e9 1f d7 2f 3f bd 7e 7d fe e1 fa d7 8b f3 df ae d0 f7 2d fb cb 13 e5 4b 3c 4b 48 19 bd 80 f1 42 ab 68 f8 9d 12 7d 07 0d 87 2b c9 17 db 73 b4 73 5f 05 e8 81 22 f2 c0 a8 3a 9b e3 d5 72 9c 5e 11 73 a8 a5 6c 8d 84 38 44 1a 7d 50 de 45 01 5f 68 13 eb e3 2a 92 a1 a8 93 b7 4f 5c 45 1b 31 d4 b5 df 7c cf 1d ed f1 da 1a 37 5a 6a f7 8f 1d 80 43 82 b4 7c bf 67 fa dd 3e 00 21 4a 68 81 2a d8 cc 1c 32 85 16 9a 71 52 0a 69 83 de 24 6f fe 6d 50 04 89 97 d6 e4 80 72 63 e1 2e 8a 12 54 80 bb c9 8b fd d7 30 99 a9 34 f3 46 72 12 c6 ed ea 96 d1 b6 4e 60 94 7d 4c 39 ea 77 1d 05 87 f7 29 23 87 0a 0b Data Ascii: 77Gh5k)mYud0CdN?^z~}/?~}-K<KHBh}+ss_":r^sl8D}PE_hO\E1\|7ZjC\|g>!Jh2qRi$omPrc.T04FrN`}L9w)#
2024-12-20 20:41:55 UTC	1700	IN	Data Raw: ee 3a 90 05 da c4 2d d3 4f 15 80 f7 60 c3 48 16 c3 71 68 29 94 26 c3 8a ee 38 9e bd 5f 5a f6 fd d2 b2 ef 57 2f fb fe d2 b2 af 1e f7 2b 16 b5 bd 73 a8 49 a9 d4 ff b4 d1 70 df 19 9a ce 3f 21 76 78 ae 74 f4 84 5c 15 e5 3d de 4f ae 12 c3 78 3f bb 4a d8 e2 7d 70 a5 cc da fb bc b8 cf 17 c9 7f a5 ed cb 9f a2 4d b6 ac ff 2c 15 d1 7b 77 9a 38 44 bf dd c4 e1 37 18 37 50 5f 2a ec 1b 64 6f 0a 66 0e 94 f9 f7 5b 3a 14 47 ba f8 4b eb ee 2f ad bb a2 d6 5d d9 30 e8 4f 30 7d c9 fe 13 66 0a 7f 19 d6 fc 17 19 d6 74 36 b6 37 d9 b2 86 dc 70 4c a5 83 8d 89 b4 a7 99 ad 30 96 59 69 06 fc 60 13 59 60 5c b3 a2 49 8c f0 80 e0 5b 3b ad c7 ad 8d 8e 74 c2 4b 9e 13 32 96 1a 02 f3 78 ce 6e 28 c5 20 90 15 8f aa 0d 51 54 de 3b 74 b7 91 87 8e 7c f4 25 a0 f4 64 23 a1 27 1b fa d1 92 9e 6c e6 Data Ascii: :-O`Hqh)&8_ZW/+sIp?!vxt\=Ox?J}pM,{w8D77P_*dof[:GK/]0O0}ft67pL0Yi`Y`\I[;tK2xn( QT;t\|%d#'l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49824	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:51 UTC	765	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:54 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:53 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 54ca9041-a01e-004e-11f7-4cd273000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204153Z-186c86bbc58vm967hC1SJC2umn0000000rg0000000007up2 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-12-20 20:41:54 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-20 20:41:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49825	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:51 UTC	779	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:54 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: bbd85f91-501e-0033-2ac2-4ceb42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204153Z-186c86bbc58485zjhC1SJC8hvg0000000rtg000000005rb8 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:54 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-12-20 20:41:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49826	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:51 UTC	778	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:54 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: b2e5649a-801e-0076-41e4-4c76b3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204153Z-186c86bbc58xmdzphC1SJCzmm40000000kf0000000005cf1 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:54 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-20 20:41:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49827	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:51 UTC	779	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:54 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: e2b5b96e-001e-0011-31c1-4c2e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204153Z-186c86bbc5874zgghC1SJC3b080000000ryg00000000cx53 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:54 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-20 20:41:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49829	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:51 UTC	740	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:54 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:54 GMT Content-Type: application/x-javascript Content-Length: 35194 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:38 GMT etag: 0x8DD05A5479BC1A5 x-ms-request-id: 8351f38d-e01e-002d-0f56-4a4f88000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204153Z-186c86bbc588zn5chC1SJCrbq40000000s10000000008q5s x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:54 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-20 20:41:54 UTC	16384	IN	Data Raw: 6e f3 05 fc bb f7 bc 7d be 6c ed 35 9f 93 43 ec 87 4d fa f3 02 ff 6d 1f 53 a2 4d 39 bd 26 25 f8 b1 bf 5e 8f 13 50 ec c5 f3 17 f8 ef 8b 17 fd 4d fa f3 c3 c5 fd f9 f2 14 0c 85 33 f8 73 f2 c3 29 fe 7b 72 ca c0 f6 0b 02 1e 63 53 f0 a7 c3 d0 0e 15 3d dd ed 6c d2 9f 63 82 fe d0 6d 52 d9 66 0b ff 6d 73 8d dd 17 17 db 34 ea bd af 11 95 e6 e1 75 3c bf 7c 1d 0c a3 84 e9 d8 47 e2 99 8c d3 28 2f e2 39 3d da 40 d9 4c 5b 93 fd 21 2e 92 88 33 5a 4c e9 fe ef 37 0c ac 7f d0 18 ee b8 47 85 a4 8c e7 3f 05 b7 a0 ec d1 4f 12 c5 f4 6b 80 16 fa 7c d0 3a a0 d4 61 78 40 6c d8 ef 80 ec 07 05 03 d8 3b 0b a5 5c a5 52 b8 95 a1 f7 70 73 73 ee 7d c1 ed 5d 49 30 a8 18 73 fb c0 e2 b3 11 c8 04 7c 0f 61 2b bf 8c 17 1f d2 cb 08 97 9b df c7 dd 2e f5 a8 e8 80 0b 6f b6 bc 79 a3 61 3c 5f 99 61 Data Ascii: n}l5CMmSM9&%^PM3s){rcS=lcmRfms4u<\|G(/9=@L[!.3ZL7G?Ok\|:ax@l;\Rpss}]I0s\|a+.oya<_a
2024-12-20 20:41:54 UTC	3232	IN	Data Raw: f3 ca 9c e5 07 8f f7 1e 44 1c 55 f4 db 6f 40 25 12 ed c3 12 de ae 0e cb 2a 29 5d f7 f3 a8 66 40 41 73 b0 71 6c 33 46 52 ce 91 74 b3 5f 6e 7b 98 f3 d2 df 9a 4e 4f 56 da 7e 39 2d f1 a8 52 3a ce 3c 41 8d 83 86 02 f1 e7 e0 09 4c 0f 70 36 94 f9 cd da 74 ee 15 1e 79 1e b6 c8 90 9a ec df c8 64 77 27 e3 98 6e 40 73 17 59 b4 f2 ce 4e 97 01 5f b9 cb e7 a3 60 af c8 00 37 6f d9 a3 f0 de d1 66 87 43 37 66 3c a6 5e 7f 43 a1 13 eb d1 94 0a 8a b8 3c 52 f4 46 ef c7 5e 59 1d ae a1 02 82 32 75 54 9c a2 51 35 fe 52 6d 5d 1a f5 66 b5 56 65 7a 09 21 bc 51 6b 37 59 78 a3 5e 2e 37 31 9c 5e 86 4f 0d f6 7b 86 77 02 f8 55 8b 85 b0 cc 65 ca d8 42 bf 4e 7a 7a 45 84 5e a3 98 aa 1e 26 d5 2b 4d 0a d2 eb 6d 15 8d 0e 59 3d 5d 47 a3 e5 ba ca fe 25 d4 65 90 25 38 2a 4e bc 5d 53 05 f2 b1 97 Data Ascii: DUo@%)]f@Asql3FRt_n{NOV~9-R:<ALp6tydw'n@sYN_`7ofC7f<^C<RF^Y2uTQ5Rm]fVez!Qk7Yx^.71^O{wUeBNzzE^&+MmY=]G%e%8N]S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49830	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:55 UTC	533	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:57 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:57 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 54ca9041-a01e-004e-11f7-4cd273000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204157Z-186c86bbc58w5vtzhC1SJCwn5s0000000rg000000000f0a4 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-12-20 20:41:57 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-20 20:41:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49831	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:55 UTC	547	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:58 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: e2b5b96e-001e-0011-31c1-4c2e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204157Z-186c86bbc5868ks8hC1SJCpbfn0000000rm0000000009xah x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:58 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-20 20:41:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49832	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:55 UTC	547	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:58 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: bbd85f91-501e-0033-2ac2-4ceb42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204157Z-186c86bbc589r6gphC1SJCc2bn0000000rp000000000dffu x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:58 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-12-20 20:41:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49833	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:55 UTC	546	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:58 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: b2e5649a-801e-0076-41e4-4c76b3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204157Z-186c86bbc58wx6pxhC1SJCkne40000000rpg00000000drfm x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:58 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-20 20:41:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49834	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:56 UTC	568	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: 8adbfcfb-4db8a1b1.twuseb.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:41:59 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:41:58 GMT Content-Type: application/x-javascript Content-Length: 35194 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 15 Nov 2024 18:42:38 GMT etag: 0x8DD05A5479BC1A5 x-ms-request-id: 83a6a978-901e-0037-24e4-4c2e57000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241220T204158Z-186c86bbc58pvvrzhC1SJCrzcg0000000rhg00000000ccx8 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-20 20:41:59 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-20 20:41:59 UTC	16384	IN	Data Raw: 6e f3 05 fc bb f7 bc 7d be 6c ed 35 9f 93 43 ec 87 4d fa f3 02 ff 6d 1f 53 a2 4d 39 bd 26 25 f8 b1 bf 5e 8f 13 50 ec c5 f3 17 f8 ef 8b 17 fd 4d fa f3 c3 c5 fd f9 f2 14 0c 85 33 f8 73 f2 c3 29 fe 7b 72 ca c0 f6 0b 02 1e 63 53 f0 a7 c3 d0 0e 15 3d dd ed 6c d2 9f 63 82 fe d0 6d 52 d9 66 0b ff 6d 73 8d dd 17 17 db 34 ea bd af 11 95 e6 e1 75 3c bf 7c 1d 0c a3 84 e9 d8 47 e2 99 8c d3 28 2f e2 39 3d da 40 d9 4c 5b 93 fd 21 2e 92 88 33 5a 4c e9 fe ef 37 0c ac 7f d0 18 ee b8 47 85 a4 8c e7 3f 05 b7 a0 ec d1 4f 12 c5 f4 6b 80 16 fa 7c d0 3a a0 d4 61 78 40 6c d8 ef 80 ec 07 05 03 d8 3b 0b a5 5c a5 52 b8 95 a1 f7 70 73 73 ee 7d c1 ed 5d 49 30 a8 18 73 fb c0 e2 b3 11 c8 04 7c 0f 61 2b bf 8c 17 1f d2 cb 08 97 9b df c7 dd 2e f5 a8 e8 80 0b 6f b6 bc 79 a3 61 3c 5f 99 61 Data Ascii: n}l5CMmSM9&%^PM3s){rcS=lcmRfms4u<\|G(/9=@L[!.3ZL7G?Ok\|:ax@l;\Rpss}]I0s\|a+.oya<_a
2024-12-20 20:41:59 UTC	3232	IN	Data Raw: f3 ca 9c e5 07 8f f7 1e 44 1c 55 f4 db 6f 40 25 12 ed c3 12 de ae 0e cb 2a 29 5d f7 f3 a8 66 40 41 73 b0 71 6c 33 46 52 ce 91 74 b3 5f 6e 7b 98 f3 d2 df 9a 4e 4f 56 da 7e 39 2d f1 a8 52 3a ce 3c 41 8d 83 86 02 f1 e7 e0 09 4c 0f 70 36 94 f9 cd da 74 ee 15 1e 79 1e b6 c8 90 9a ec df c8 64 77 27 e3 98 6e 40 73 17 59 b4 f2 ce 4e 97 01 5f b9 cb e7 a3 60 af c8 00 37 6f d9 a3 f0 de d1 66 87 43 37 66 3c a6 5e 7f 43 a1 13 eb d1 94 0a 8a b8 3c 52 f4 46 ef c7 5e 59 1d ae a1 02 82 32 75 54 9c a2 51 35 fe 52 6d 5d 1a f5 66 b5 56 65 7a 09 21 bc 51 6b 37 59 78 a3 5e 2e 37 31 9c 5e 86 4f 0d f6 7b 86 77 02 f8 55 8b 85 b0 cc 65 ca d8 42 bf 4e 7a 7a 45 84 5e a3 98 aa 1e 26 d5 2b 4d 0a d2 eb 6d 15 8d 0e 59 3d 5d 47 a3 e5 ba ca fe 25 d4 65 90 25 38 2a 4e bc 5d 53 05 f2 b1 97 Data Ascii: DUo@%)]f@Asql3FRt_n{NOV~9-R:<ALp6tydw'n@sYN_`7ofC7f<^C<RF^Y2uTQ5Rm]fVez!Qk7Yx^.71^O{wUeBNzzE^&+MmY=]G%e%8N]S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49835	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:41:57 UTC	770	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0 Sec-WebSocket-Key: nnpRm2xDqj1058vXNIWiJQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:42:00 UTC	733	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:42:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 85fb312d-720b-4835-b5dd-fabaa9f12e00 x-ms-ests-server: 2.1.19683.6 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:42:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49837	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:42:07 UTC	770	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0 Sec-WebSocket-Key: c3bxaGAo3ZpwjgoxjuhwvA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:42:10 UTC	736	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:42:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b824d423-6a79-442f-bb10-f153e79a3d00 x-ms-ests-server: 2.1.19683.6 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:42:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49839	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:42:12 UTC	1030	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1734727329219&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true HTTP/1.1 Host: 1b9f8d12-4db8a1b1.twuseb.us Connection: keep-alive Content-Length: 2335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://bia.twuseb.us Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://bia.twuseb.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="
2024-12-20 20:42:12 UTC	2335	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 32 30 54 32 30 3a 34 32 3a 30 39 2e 32 31 32 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 62 30 63 32 35 32 38 30 38 65 36 31 34 65 39 34 39 30 38 36 65 30 31 39 61 65 31 63 62 33 30 30 22 2c 22 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 76 65 72 22 3a 22 32 2e 31 2e 31 39 36 38 33 2e 36 22 2c 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 73 49 64 22 3a 22 45 4f 6a 4f 36 39 51 71 44 55 65 56 2f 4e 6f 74 55 2f 32 37 58 70 22 Data Ascii: {"name":"IDUX_ESTSClientTelemetryEvent_WebWatson","time":"2024-12-20T20:42:09.212Z","ver":"4.0","iKey":"o:b0c252808e614e949086e019ae1cb300","ext":{"app":{"ver":"2.1.19683.6","name":"IDUX_ESTSClientTelemetryEvent_WebWatson","sesId":"EOjO69QqDUeV/NotU/27Xp"
2024-12-20 20:42:15 UTC	816	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 20 Dec 2024 20:42:14 GMT Content-Type: text/html; charset=utf-8 Connection: close p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" time-delta-millis: 5144 access-control-allow-headers: P3P,Set-Cookie,time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://bia.twuseb.us access-control-expose-headers: time-delta-millis set-cookie: MC1="GUID=9ae7e430ddba4fd2a76a154022601377&HASH=9ae7&LV=202412&V=4&LU=1734727334363"; Domain=twuseb.us; expires=Mon, 09 Dec 2080 17:24:28 GMT; Path=/; Secure set-cookie: MS0=e745c479dbd84b89bc76b764dc774762; Domain=twuseb.us; expires=Sun, 10 Dec 2079 17:54:28 GMT; Path=/; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49840	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:42:14 UTC	833	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0; ai_session=EOjO69QqDUeV/NotU/27Xp\|1734727329215\|1734727329215 Sec-WebSocket-Key: ottNOxXA4WjBOXYig0qkfQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49841	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:42:20 UTC	957	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0; ai_session=EOjO69QqDUeV/NotU/27Xp\|1734727329215\|1734727329215; MC1="GUID=9ae7e430ddba4fd2a76a154022601377&HASH=9ae7&LV=202412&V=4&LU=1734727334363"; MS0=e745c479dbd84b89bc76b764dc774762 Sec-WebSocket-Key: WRZQRniN5aWTQvhQAU1MxQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:42:23 UTC	736	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:42:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 2b4afc0a-24c3-425c-b33a-95d264133400 x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:42:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49842	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:42:35 UTC	938	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0; ai_session=EOjO69QqDUeV/NotU/27Xp\|1734727329215\|1734727329215; MC1="GUID=9ae7e430ddba4fd2a76a154022601377&HASH=9ae7&LV=202412&V=4&LU=1734727334363"; MS0=e745c479dbd84b89bc76b764dc774762 Sec-WebSocket-Key: LBvHrgrPMEDrsVViTyn18A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-20 20:42:38 UTC	736	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 20 Dec 2024 20:42:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: e4290cf3-b6c0-4ef0-addd-0139f3ce2700 x-ms-ests-server: 2.1.19683.6 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://8e1d6ffe-4db8a1b1.twuseb.us/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-20 20:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49846	173.255.223.22	443	6864	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:42:43 UTC	938	OUT	GET /4db8a1b1ae734ef1bd17ae68b3aa9590/ HTTP/1.1 Host: bia.twuseb.us Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://bia.twuseb.us Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3IonYL="NGRiOGExYjEtYWU3My00ZWYxLWJkMTctYWU2OGIzYWE5NTkwOjc2ZTJmNTg3LTE5YzUtNGZiYS1iYjEyLWQwY2U0ZWZlODM5Nw=="; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=4c52e5e4-3aec-4ec7-bb1d-f3dc78a5af30; brcap=0; ai_session=EOjO69QqDUeV/NotU/27Xp\|1734727329215\|1734727329215; MC1="GUID=9ae7e430ddba4fd2a76a154022601377&HASH=9ae7&LV=202412&V=4&LU=1734727334363"; MS0=e745c479dbd84b89bc76b764dc774762 Sec-WebSocket-Key: xLtPEFBw0wYQKYml9azgig== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Target ID:	0
Start time:	15:40:38
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	15:40:38
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1964,i,5279644903293289592,10840831433166987168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:40:39
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aselog24x7.cl/"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 0.19.id.script.csv, type: HTML
Source: Yara match	File source: 0.31.id.script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML

Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: Iframe src: https://65f66297-4db8a1b1.twuseb.us/Prefetch/Prefetch.aspx
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: Iframe src: https://65f66297-4db8a1b1.twuseb.us/Prefetch/Prefetch.aspx

Source: https://bia.twuseb.us/?N4JV=9Xdg	HTTP Parser: No favicon
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No favicon
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No favicon
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No favicon
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No favicon
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No favicon

Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://bia.twuseb.us/?N4JV=9Xdg&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.101
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.101
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.101
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.101
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.19
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.19
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.19
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.19
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.4.254
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.4.254
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.4.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.4.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: chromecache_185.1.dr	String found in binary or memory: M.getElementsByTagName("iframe"),oa=Q.length,na=0;na<oa;na++)if(!v&&c(Q[na],H.Xe)){UK("https://www.youtube.com/iframe_api");v=!0;break}})}}else G(t.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},u,v=!1;X.__ytl=n;X.__ytl.o="ytl";X.__ytl.isVendorTemplate=!0;X.__ytl.priorityOverride=0;X.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_135.1.dr, chromecache_141.1.dr, chromecache_170.1.dr, chromecache_140.1.dr, chromecache_200.1.dr, chromecache_185.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Ik:function(){e=nb()},Gd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: did"](19,49152,null,0,u.ButtonComponent,[],{icon:[0,"icon"]},null)],(function(e,t){var n=t.component;e(t,5,0,n.shareUrl,n.share);e(t,10,0,"embed");e(t,13,0,"fb");e(t,16,0,"twitter");e(t,19,0,"reddit")}),(function(e,t){var n=t.component;e(t,11,0,"https://www.facebook.com/sharer/sharer.php?u="+n.shareUrl),e(t,14,0,"https://twitter.com/intent/tweet?&url="+n.shareUrl),e(t,17,0,"http://www.reddit.com/submit?url="+n.shareUrl)}))}function g(e){return r[" equals www.facebook.com (Facebook)
Source: chromecache_161.1.dr, chromecache_190.1.dr	String found in binary or memory: did"](19,49152,null,0,u.ButtonComponent,[],{icon:[0,"icon"]},null)],(function(e,t){var n=t.component;e(t,5,0,n.shareUrl,n.share);e(t,10,0,"embed");e(t,13,0,"fb");e(t,16,0,"twitter");e(t,19,0,"reddit")}),(function(e,t){var n=t.component;e(t,11,0,"https://www.facebook.com/sharer/sharer.php?u="+n.shareUrl),e(t,14,0,"https://twitter.com/intent/tweet?&url="+n.shareUrl),e(t,17,0,"http://www.reddit.com/submit?url="+n.shareUrl)}))}function g(e){return r[" equals www.twitter.com (Twitter)
Source: chromecache_135.1.dr, chromecache_141.1.dr, chromecache_140.1.dr, chromecache_200.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Hh:e,Fh:f,Gh:g,mi:k,ni:m,Xe:n,Jb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(hE(w,"iframe_api")\|\|hE(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!ZD&&fE(x[B],p.Xe))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_191.1.dr, chromecache_174.1.dr, chromecache_183.1.dr, chromecache_148.1.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_170.1.dr, chromecache_185.1.dr	String found in binary or memory: var jD=function(a,b,c,d,e){var f=aB("fsl",c?"nv.mwt":"mwt",0),g;g=c?aB("fsl","nv.ids",[]):aB("fsl","ids",[]);if(!g.length)return!0;var k=fB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Mz(k,Oz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: aselog24x7.cl
Source: global traffic	DNS traffic detected: DNS query: premiumgain.nimbusweb.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d3hogio4d1txum.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: nimbusweb.me
Source: global traffic	DNS traffic detected: DNS query: metric.nimbusweb.me
Source: global traffic	DNS traffic detected: DNS query: stt.nimbusweb.me
Source: global traffic	DNS traffic detected: DNS query: bia.twuseb.us
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: l.getsitecontrol.com
Source: global traffic	DNS traffic detected: DNS query: s2.getsitecontrol.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: 8adbfcfb-4db8a1b1.twuseb.us
Source: global traffic	DNS traffic detected: DNS query: events.getsitectrl.com
Source: global traffic	DNS traffic detected: DNS query: 8e1d6ffe-4db8a1b1.twuseb.us
Source: global traffic	DNS traffic detected: DNS query: 87e039e4-4db8a1b1.twuseb.us
Source: global traffic	DNS traffic detected: DNS query: l1ve.twuseb.us
Source: global traffic	DNS traffic detected: DNS query: 65f66297-4db8a1b1.twuseb.us
Source: global traffic	DNS traffic detected: DNS query: 1b9f8d12-4db8a1b1.twuseb.us

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://aselog24x7.cl/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Windows Analysis Report
http://aselog24x7.cl/